Sql Server Security
Resume:
W. Thomas Blanchard
St Petersburg, FL
*************@*****.***
Professional Certifications &Technical Skills
Certifications
Comp TIA Security + (Certification ID: COMP001020513498), ITIL Foundations, MCAD/MCP/MCTS (Microsoft Certification ID: 3806101)
DoD 8570 IAT Level II Compliant
Work Experience:
June 2015 – Present Cubic Defense Application Inc – DBA/Application Developer
Performed The Dual Roles of Database Administrator and Custom Application Developer for Marine Corp Central Command (MARCENT) at MacDill Air Force Base, in Tampa Florida and Forward Operations in overseas base.
As DBA was responsible for Database Security Data Integrity, Backups, Maintenance Jobs, Analysis Services, Database Creation and Architecture for Custom Databases, Security and Implementation of COTS application Databases, and Reporting Services.
Determined Needs of Different Divisions within MARCENT/MARCENT Forward and Created Custom Applications, and Database Design, Physical Model, DDL, DML, DCL Based on those needs.
Migrated SQL Server Databases from SQL 2008r2 to 2014 and from database mirroring to Always on High Availability.
Re-Architected large, poorly designed, de-normalized (UNF), un-indexed, transactional database, upon which multiple applications relied, into multiple smaller 3NF databases. Also utilized memory optimized tables and native compiled procedures to improve performance.
Use tools such as Fog light and Spotlight to monitor databases, ensure backup integrity, and improve query performance.
Created DB Security Hardening Scripts and Added Encryption (TDE) and in-transit as required.
Ensured Security of NPPI, and Classified Data and Compliance with DISA Security Technical Implementation Guides(STIGs).
Migrated Stand Alone Application Databases in SQL Standard, SQL Express, and Internal DB to Enterprise Production Cluster, to Ensure High Availability and Centralize Management.
Assisted in Data Center Move in overseas base.
Assisted in SharePoint administration.
October 2013 – June 2015 Citizens Bank Senior Database Security Engineer
Led Database Security initiatives by establishing and complying with organizational standards as well as FDIC regulations.
Directed a large user entitlement project to ensure data security across all RDBMS platforms; had meetings with globally diverse teams and management weekly to define phase time lines and deliverables.
Designed ETL processes across multiple platforms including SQL Server (versions 2000-2012), Oracle (versions 10g to 11gR2 and Exadata), DB2 (Versions 8-9) and Teradata version 13.10.
Ensured standard compliance by monitoring and reporting across all MS SQL and Oracle Servers.
Worked with Oracle APEX team to create compliance and user entitlement reports.
Utilized clarify ticketing system, to ensure database security issues were tracked and resolved in a timely fashion.
Installed IBM Guardium Appliance and S-Taps on SQL Servers to monitor SQL Server Instances for Intrusion prevention and security monitoring.
Created scripts to automate s-tap installation and configuration on database servers.
Created DCL Scripts for All RDBMS platforms within the environment.
October 2012 – October 2013 Geographic Solutions, Inc. Lead Security Programmer/Analyst
Protected the security of client data utilizing expertise with information security tools and protocols to identify security threats and develop programming solutions. Working with packet capturing software, to identify insecure network protocols and performs network traffic forensic analysis, isolating malicious network behavior and inappropriate network use.
Used IBM Rational AppScan, Nessus, Kismet, Airsnort, NMAP, Ethereal, WebInspect and Nikto to expose any system vulnerabilities, including those identified by the Open Web Application Security Project (OWASP) Top 10.
Performed as lead and mentor to a team of programmer/analysts, ensured the timely completion and security of projects and deliverables.
October 2009 – October 2012 Citizens Bank Assistant Vice President - Database Security
Led Database Security initiatives by establishing and complying with organizational standards as well as regulations such as GLBA, SOX and Dodd Frank.
Directed large projects, supervised administrative staff and met with diverse teams and management daily to define phase time lines and deliverables.
Estimated large-scale project budgets and develop an executable timeline for each phase.
Ensured data compliance by generating enterprise reports and monitoring all MS SQL and Oracle Servers.
Created reporting application to monitor various compliance issues, as well as drive space, CPU utilization and backups.
Wrote DCL scripts to ensure security compliance within SQL Server and Oracle and DB2 databases.
Installed Oracle Audit Vault and Oracle Database Vault and created alerts to ensure security within the database.
Worked with IBM to create Guardium proof of concept project for multiple RDBMS platform’s security and intrusion prevention monitoring.
September 2006 – October 2009 EMC2 Senior Solutions Consultant
Acted as Lead Architect on an extensive Data Warehouse/Business Intelligence project, utilizing SQL Server, SQL Server Reporting Services, SQL Server Analysis Services, SQL Server Integration Services, and Integrated with SharePoint.
Oversaw an extensive upgrade as Mass Mutual Team lead for more than 30 VB6 business critical applications to VB.NET 2.0, coordinating entire upgrade leading off-shore resources while training internal application developers.
Conducted client meetings to establish specifications and system designs
Updated Non-ANSI SQL compliant stored procedures in Sybase to be ANSI SQL compliant, ensuring proper integration with ADO.NET.
Assisted Fallon Community Health development team in upgrading, .NET 1.1 applications to .NET 2.0 web applications adding new functionality, and improved SQL Performance, via Performance Tuning and Stored Procedures.
Migrated various key applications for CVS, including their recruiting database application from Access to SQL Server.
Robert Half Technology Consultant
For Sureware, LLC: Designed and implemented profile management system for large travel agencies
- Designed and implemented automatic file export utility, and web management interface
- Worked closely with clients to establish specifications and system designs
For Granite Telecommunications: Supervised and trained other developers on .NET 2.0 and application architecture.
- Migrated all internal applications to .NET 2.0 SQL Server 2005, and Oracle 10g.
For Digipress: Served as lead programmer on project to re-engineer print on demand order system by designing, implementing, and documenting systems with .NET and SQL Server.
- Collaborated with clients to establish specifications and system designs.
For State of Massachusetts DOT: Upgraded traffic site from ASP to ASP.NET
For Constellation New Energy Upgraded Intranet Application from ASP to .NET and SQL Server 2000-2005.
- Developed and implemented several enhancements to commercial billing system.
- Designed and coded systems to upload customer data from excel files and flat files to third party billing system utilizing Visual Basic 6.0 COM, SQL Server, and XML.
For Capital Intellect, Inc.: Designed and implemented web/email management interface utilizing ASP, VB, SQL Server 2000, and Outlook with VBA.
For Lincoln Institute of Land Management: Created Secure HR application from Access Database
For TLVentures: Designed and implemented call logging system utilizing .NET, SQL Server and Web Services, Designed and implemented investment tracking system utilizing .NET and SQL Server.
Litton PRC, Inc. Software Engineer
Developed products for multiple government agencies including the Postal Service, Army, Navy and Marine Corps.
Part of a team that used ASP, SQL Server, DB2, Erwin and Oracle to develop a data warehouse and reporting application to track store sales and delivery confirmation data.
Part of a team that developed a data warehouse and reporting application for the Army utilizing ASP and SQL Server to track weapons targeting information.
Under an extreme deadline, designed and implemented code to eliminate data entry errors for Marine Corps equipment tracking Database utilizing ASP and SQL Server.
Education
July 2012 Master of Information Systems - Information Security Management
Certification Program, Villanova University, Villanova, PA
June 2003
Business Management, Gibbs College of Boston, Boston, MA
Contact this candidate