Theo Hughes

**** ********* **

Greenville, Texas 75402

mobile: 972-***-****

adzdj1@r.postjobfree.com

Education: Bachelor of Science, University of Texas at Arlington

Operating Systems: Windows Server 2000, 2003, 2008, 2012, 2016, Windows 7/10

Languages: Visual Basic, C#, VBA, VB Script, PowerShell, JavaScript, Python, HTML, DHTML

Environments: OpenSSL, ADCS, PKI, IIS, TFS, Visual Studio, Active Directory Certificate Services, ERP, ASP, .NET

Databases: SQL Server 2000-2016, Access, Oracle

Applications: Sharepoint, MQ MS Office, Visio, Project, Adobe Photoshop

Tools: Venafi, Cygwin, CA Stackgen, Installxpress, Splunk, Repliweb, Application Lifecycle Management, SCM

Southwest Airlines

Cydersecurity

March 2023 to July 2023

Senior PKI Engineer - Remote

Evaluated and mapped out plan for upgrading Venafi infrastructure across 3 domains. Validated Servers and releases, developed plan for optimization and load balancing of entire PKI infrastructure for across the board Server and Systems upgrade. Mapped timeline and strategic touchpoints for Team. Installation and validation of Venafi and supporting databases. Troubleshooting Cybersecurity Vulnerabilities. Isolated a specific recurring one related to Windows Server Updates. Consulted for a number of different issues and support.

LSEG/Refinitiv

London Stock Exchange Group plc

May 2022 to Jan 2023

Senior PKI Engineer

Automate Qualys verification for Venafi TPP. Stand up and expand capabilities of Venafi SSL/TLS Certificate Management Service that performs discovery import, tracking, renewal, attribution, and distribution of certificates across multiple platforms. Expand into client/workstation certificates to support wireless LAN and VPN authentication. Support delivery of a server/client and end user Certificate Management Service that supports critical services like VPN, server to server communication, Domain Authorization, and workstation authentication. Ongoing maintenance of the platform, server support, and troubleshooting. Design & Engineering of the solution. Troubleshoot PKI Issues, create technical transition and integration plans and execute them

Bank of America

Greenville, TX -remote

May 2020 to April 2022

AVP Cyber Security Governance Engineer

Consultant management for Global Information Security. Duties primarily consult, review, and approve that they are acceptable for Bank of America according to Bank Standards. Validating HSMs for private key storage and analyzing certificates using OpenSSL. Other duties included, reporting, and research Venafi certificate issues that require necessary modifications that needed updates to assist Venafi PKI Engineering team.

Voya Financial

Greenville, TX -remote

May 2019 to Apr 2020

PKI Engineer

Infosys contract Technical Lead for ground up build, implementation, and migration from Venafi 17.2 to 18.4. Build. configuration, testing, deployment and automation of 6 Venafi Trust Protection Platform (VTTP) servers, and 3 SQL Server databases. Topology was customized to comply with internal Network Security.

Researched Vulnerability Scans for remediation and Risk compliance.

Acted as Master Administrator for installation, configuration, and customization of 6 VTTP servers and SDK.

Interfaced with multiple stakeholders to develop requirements, documentation, and solidify strategies/agreements for extending automation, and modify/establish workflows. Automation of deployment for F5, IIS, Apache, Linux, JBOSS, JKS, Bluecoat, Palo Alto, and Salesforce certificates.

Entergy Corporation

Greenville, TX -remote

Nov 2018 to May 2019

IT Security Architect

ComTec Consultants contract Technical Lead and PKI Architect for ground up build, implementation, and migration to Microsoft PKI Certificate Authority servers (ADCS). Installed and configured Microsoft Root CA as a standalone Root. Installed, configured, and implemented 2 subordinate Enterprise CAs for provisioning. Generated CSRs and issued certificates for subordinate CAs on Root CA, then disabled Root CA. Root and subordinate certificates were deployed by AD GPU. Set baseline cryptographic standards for TLS/SSL.

Build. configuration, testing, and deployment of 5 Venafi Trust Protection Platform (VTTP) servers, and 3 SQL Server databases. Topology and balancing customized to comply with internal Network Security.

Acted as Master Administrator for installation, configuration, and customization of VTTP servers. Educated customer on creating various custom AD OU groups to manage and maintain certificates for a wide variety of internal devices. Created and tested multiple discovery queries to establish baseline installations, workflows, and organizational levels.

Analysis and tracking of existing certificates and compliance. Created and established baseline logging and reports.

Risk Analysis to address TLS/SSL related vulnerabilities identified from Scans.

Shomette Systems

Greenville, TX

Apr 2018 to Oct 2018

Freelance Contract Systems Engineer

Building, upgrades, and troubleshooting Windows Servers for small businesses. Network configuration and security, troubleshooting workstation connectivity. Installation, configuration, and customization of small business server software. Backups and configuration of file storage.

Bank of America

Global Technology and Operations

Greenville, TX -remote

Nov 2012 to Mar 2018

Consultant Systems Engineer

Enforced Global Information Security standards in server builds, configuration, deployment, and maintenance. Educated development groups about reasons for standards when needed. Worked closely with both Agile and Waterfall SDLC process to maintain and customize environments as needed. Structured DNS for Test environments.

Scripting complex server configurations and modifications in Batch, VBScript, PowerShell including Registry changes.

Managed and structured architecture for code changes in Team Foundation Server (TFS).

Monitored and deployed different versions of .NET framework from 2.0 through 4.5.2 to maintain code stability.

Developed server SSL certificate checking and validation scripts for large numbers of targeted servers

Analyzed PKI structure for Mortgage Technology determining structure and deficits

Planned remedial action for all servers

Extensive documentation of all certificate processes

Ground up architecture and build of Venafi tree structure for Mortgage Technology

Custom development of scripts to create Venafi imports

Validating and deploying large groups of SSL certificates with scripts and Venafi

Worked closely with PKI Administrators to resolve issues

Created 172 page ``how to'' document for certificate management and Venafi tasks

Trained team members both onshore and offshore on Venafi

Trained other employees on CA Stackgen, and other inhouse tools.

Configuration, troubleshooting, and support of web server performance for the Mortgage Division of Bank of America, supported over 20 applications in Artificial Intelligence and Central Services. Subject Matter Expert for Environment Management and Support, certificates, server farm deployments, configuration, testing and troubleshooting, requiring close interaction with management and teams both onshore and offshore in Europe and India.

Built and configured Repliweb servers and jobs for maintaining servers, deployments and applications. Responsible for setting up websites, Windows services and scheduled tasks, and SQL batch files before hand over for QA validation. Work was performed on Windows Server 2003 thorough 2012. Migrating Build servers with Visual Studio including 3rd party components. Installed and configured Single Sign-On (SSO) interfaces

Bank of America - TEK Systems

Greenville, TX -remote

Oct 2010 to Oct 2012

Contract Network Engineer

Configuration, troubleshooting, and support of web servers for the Mortgage Division of Bank of America. Application interfaces with SQL Server 2005/2008. Created scripts for deployment automation and server inventories, scripts to remotely validate large numbers of server configurations with targeted groups. Scripting deployments for the First Mortgage Origination Systems groups.

Installation and configuration of CruiseControl.NET automated continuous integration and servers and NAnt. Setup and configuration of 4 Build servers with process custom scripting for backup and staging.

American Airlines – TEK Systems

Ft Worth, TX

Jul 2010 to Sept 2010

Technical Consultant Server Deployment Project

Subcontract for Microsoft Corporation. Designed and developed scripts for the custom wrapper configuration of Windows Server 2008 R2 images to automate the deployment of HP servers throughout the organization. Specific customizations included NIC configuration and teaming, ILO card configuration, manual IP configuration, and applying images. Design and coding of an IP configuration HTA and unit test. Major rewrite of NIC Teaming functions to use an XML library of all possible configurations for a given server model, including XML for non-teamed NICs. Wrote functions to determine slot and port ordering for physical NIC port locations and synchronize them with local area connection names in both PE and Windows. Designed and tested script to set the swap file. Modification and debugging of download update scripts. Created script catalog to define and describe the function of all scripts within the overall Build.

Dallas Independent School District – TEK Systems

Dallas, TX

Feb 2009 to Jul 2010

Lead Consultant and DBA for Kaspersky Deployment Project

Designed and developed scripts for the complete uninstallation of all Symantec Antivirus products used in the DISD, then installation and configuration of Kaspersky Anti-Virus. Created VB Scripts to shutdown Windows System processes, remove leftover files and registry entries, ftp files, and email reports. Also created scripts for Kaspersky Admin server contact and process initiation. Wrote various utility scripts for tasks such as system evaluation and reporting, changing computer names, and joining computers to the domain. Installation reporting is done by uploading csv files to the ftp server, then using a scheduled SQL Server 2005 SSIS process to retrieve and add them to a database table. Created databases, installed and configured SSIS and SSRS, wrote custom SSIS process for imports and setup as a scheduled Job. Wrote custom views and stored procedures for maintenance. Used SSRS for reporting on installations. Created ad-hoc reporting tool that was compatible with both Access 2003 and 2007 in VBA for management. Wrote procedures, technical documentation, and user guides.

Point Solutions LLC Independent Contract

Dallas, TX

Nov 2008 to Feb 2009

Technical Consultant MAS 500

Troubleshooting issues on a MAS 500 Point of Sale System integration. Made recommendations to developers to correct problems and smooth transaction integration through several versions of MAS 500 using C++ and SQL Server 2000 and 2005.

MIS Group

Dallas, TX

Aug 2005 to Nov 2008

Technical Consultant MAS 500

Began with MIS in the MAS 500 ERP Development Group, customizing and writing add-on solutions and modifications for Customers with Visual Basic, VBScript, JavaScript, and SQL triggers and stored procedures. Was asked to join the Technical Consulting Group to assist Customers and Application Consultants with a wide and unusual variety of problems, at the Application, Database, and Systems level. Evaluation and recommendation of applications, hardware, architecture, and configuration for optimum balance of cost benefit and projected future use. Made recommendations to Customers and Application Consultants to resolve a wide and unusual variety of problems, at the Application, Database, Systems and Configuration level. Often this required migrating databases, upgrading databases, creating and configuring SQL Servers, setting up and scheduling Jobs and DTS packages, importing legacy, customer data, and troubleshooting SQL issues.

Replicated customer server operating environments creating specialized images on over 50 VM Ware server instances with a wide variety of configurations. Managed VMWare environment to balance resource loading.

Managed Active Directory DS and DNS for test environment and MIS Group

This ranged from Systems Administration, SQL Server DBA, and database troubleshooting activities, to creating custom Crystal Reports, complex data views, complex stored procedures, MS Office interfaces, to developing one-of-a kind custom solutions. Custom Business Intelligence Cube design and development. Created Saleslogix reports using ASP and JavaScript for company customer portal.

Accelerated Christian Education – Matrix

Lewisville, TX

Jun 2005 to Jul 2005

Consultant

Systems Analysis and troubleshooting of development server and online web e-commerce application. Corrected issues with online credit card verification system, and certificate issues. Application written in VBScript and JavaScript, using ASP, IIS, Commerce Server 2000, and SQL Server 2000 with ADO connections to Elite Informix based accounting system. Created completed test server for evaluation and testing. Setup nightly job to refresh test environment and backup data from production. Evaluated of performance issues, made recommend ions for future updates, corrections, issue resolutions, and design changes of www.aceministires.com.

Tribble Machine Works

Waxahatchie, TX

Mar 2004 to Feb 2005

Systems Manager

End to end responsibility for development of www.tribblemachine.com web site. Hosted on Windows XP Server with IIS. Performed site search engine optimization (SEO). Designed and developed web catalog for machine shop services, marine, and power sports engines. Designed and developed mass email utility for marketing and dealer updates. Also performed all Systems Administration and Management, networking, and user support functions for a small office. Server was NT 4.0, workstations Windows XP Professional. Website written in ASP with Access database. Coding was in VB Script, JavaScript, DHTML, and HTML. Ad hoc training of users on Microsoft Office applications. Order entry in SBT Accounting System. Extracted raw data from SBT Accounting System for the e-commerce website, inventory, spreadsheets, and conversion to QuickBooks accounting system. Developed database driven automated HTML email mass mailer to prospect for new business; send newsletters to existing customers.

SkillsNET

Waxahatchie, TX

Jul 2003 to Oct 2003

Developer

Troubleshooting, bug fixes, error correction, updating, research, and testing of very large scale skills system (1192 pages of ASP code). Code base was very large and complex, supporting multiple websites on a web farm. Also did performance testing of various configurations. Database was SQL Server 2000 (multiple databases). Coding was in VBScript and JavaScript, and SQL stored procedures and custom functions. Special project for a customer demo written in Access.

Wells Fargo Bank, Ciber

Irving, TX

Jul 2003 to Jul 2003

Consultant

Wrote specifications, flow, designed and developed ASP pages for module in online broker system. Sever side code was written in VBScript; JavaScript for client side processing. Also wrote stored procedures for module in SQL. Database was SQL Server 2000 (multiple databases).

Guidefinder, Inc - Independent Contract

Red Oak, TX

Feb 2002 to June 2003

Senior Consultant and DBA

Complete responsibility including hosting arrangements for a series of 15 outdoors and fishing oriented web portals, featuring an online reservation system for fishing guides, online ads, news stories, and forums utilizing SQL Server 2000 databases and ASP. Web design, user interface, graphics, coding. and testing. Performed Search Engine Optimization (SEO). Setup shared and replicated SQL Server environment and maintenance. Sites designed and created were 17 different portals with a commo back end.

Texas Educational Paperbacks Independent Contract

Dallas, TX

Jul 1999 to Feb 2002

Senior Consultant and DBA

Managed Microsoft Preview Program for parent company with Windows 2000 Server betas including clients for adoption. This included setting up and managing Active Directory Domain Services for Users, OU, and Servers. Later joining to parent tree. Installed and configured Exchange Server.

End to end responsibility for development of fully featured state of the art, e-commerce web site www.tepbooks.com. Hosted on Windows 2000 Advanced Server with IIS 5.0, and SQL Server 2000. Database was originally SQL Server 6.5 and migrated up through SQL Server 7.0, and 2000. Designed and developed web catalog, custom shopping cart, and customer service sections. Designed and developed intra-net based back-end for maintaining the e-commerce site, reviewing and printing orders, and all customer service functions. Designed and created VB server side custom COM+ components, ASP pages, and account maintenance back end. Designed and laid out all SQL Server tables, stored procedures and triggers. Installed and performance tuned OS and SQL Server. All ASP pages written in VB Script. All client side code written in Java Script. Designed and developed desktop Reorder system that was deployed to customers (and 2 additional versions in subsequent years). Last version uploaded orders to website for processing. Reorder was written in VB 6.0 and used Active Reports 1.1 for generating invoices and reports. Performed research and recommendations for accounting system replacement and data extraction from legacy accounting system. Support and training for users on Microsoft Office applications and custom maintenance system for website.

Ericsson Telecommunications - Manpower Technical

Richardson, TX

Apr 1999 to Jul 1999

Senior Consultant

Software analysis and redesign of a switch memory allocation calculation software tool.

Levenson and Hill - NSN

Dallas, TX

Nov 1998 to Mar 1999

Senior Consultant

Troubleshooting and correction of planning and accounting systems for large advertising agency using Visual Basic 6.0 and SQL Server 6.5. Wrote reporting utilities, advised performance tuning for SQL Server and NT Server.

TU Electric - Babich Technical

Irving, TX

Aug 1998 to Nov 1998

Senior Consultant

Wrote functional design specifications for components of an inbound call processing system. System to be developed using the IMA EDGE software tools with Oracle 7.0 back-end.

Winstar Communications - Romac International

Dallas, TX

Jul 1998 to Aug 1998

Senior Consultant

Redesigned, rewrote, enhanced and converted Access 7.0 VBA code and queries to SQL-Server 6.5 stored procedures for reporting. Designed and developed reporting utilities in Visual Basic 6.0. Client systems were NT Workstation 4.0.

Raytheon TI Systems - Adtek

Dallas, TX

Dec 1997 to Jun 1998

Senior Consultant

Redesigned, rewrote, enhanced and converted MS Office 16-bit applications to 32-bit Office 97. Applications were primarily in Excel VBA and Access. Converted 16-bit Oracle Objects routines to Microsoft’s ODBC 2.0, the first MS ODBC driver that enabled retrieving recordsets from Oracle stored procedures. Rewrote 16-bit .dll’s in 32-bit VB 5.0.

Quantra - Analysts International Corporation

Dallas, TX – Chicago, IL

Aug 1997 to Nov 1997

Technical Staff

Assisted customer with bug analysis, fixes, enhancement, and redesign recommendations both in Dallas and Chicago. Required review and analysis of 300,000+ line VB5/SQL-Server based property management system. Installation and administration of Intersolv Tracker bug tracking system (SQL-Server). Integration of 8 project bug databases (5 different applications) into Tracker projects.

John Deere - Just Technical Associates

Dallas, TX

Jan 1997 to July 1997

Systems Analyst

Porting of single-user parts shipment tracking system to multi-user system, Access 7.0 front-end, and SQL-Server 6.5. Installation and administration of SQL-Server, set up user accounts, created database and tables. Wrote procedures to download DB2 data from mainframe. Wrote all stored procedures and views. Designed, coded and tested enhancements. Design and development of Auction Tracking System.

DCAS - Just Technical Associates

Dallas, TX

Feb 1997 to May 1997

Systems Analyst

Design, development, coding, testing, and support of all in-house software using Access 7.0, and Visual Studio. Troubleshooting over WAN. Programming in Visual Basic, and Access. Developed specifications, estimates of required effort, timeline, conducted user-team meetings, enhancement surveys, wrote test cases, and conducted lab testing of software. Coded and tested program modules. Conducted user training on various portions of the system. Re-wrote major portions of existing program for conversion from DOS based programs. Provided proof of concept cases for future releases and updates. Developed company web pages using MS Front Page. Evaluated 5 major distributed accounting systems based on SQL-Server and made recommendation of Acuity Accounting System to upper management.

Texas Instruments Semiconductor Group - Lincoln Technical Services

Dallas, TX

Jan 1995 to Jan 1997

Programmer Analyst

Re-wrote major portions of existing program for conversion from Pascal based stand-alone program to Access 2.0 database. Provided proof of concept cases for future releases and updates. Programming, design, and support of customer satisfaction database. Wrote specification, designed, and developed multi-user graphing wizard. Other custom controls from the 16-bit version of VB 4.0 were included in GUI.

American Airlines - Analysts International Corporation

Ft Worth, TX

Sept 1994 to Dec 1995

Programmer Analyst

Design, development, coding, and testing Visual Basic 4.0 utilities and data transport for Budget program. Responsible for re-design of architecture to hybrid application with Excel, Access 2.0, and VB 4.0 components for phase 2 of this project.

Texas Educational Paperbacks

Dallas, TX

Oct 1993 to Aug 1994

Programmer Analyst

Designed, developed, coded, and tested 32-bit Access 7.0 order/inventory system. Features included automatic importing of down-loaded Internet orders into database, e-mail viewer, automatic inventory balancing, notification of low inventory levels, purchase order generation, and custom mailing label generation. Design incorporated a number of 32-bit custom controls from VB 4.0.

NationsBank - Analysts International Corporation

Dallas, TX

Feb 1993 to Sept 1993

Programmer Analyst

Design, development, coding, testing, and support of two custom Visual Basic for Applications programs for software quality evaluations. Original MS Excel macros were converted to VBA code. Complete system re-write in order to take full advantage of VBA functionality. Added enhancements to further automate systems. Final result was custom self contained application eliminating 6 spreadsheets. Wrote specifications for next development phase.

NationsBank - Analysts International Corporation

Dallas, TX

Aug 1992 to Jan 1993

Applications Support Specialist

Design, development, coding, testing, and support of a custom statistical reporting MS Access database. Net savings of effort is projected at 6 man months. Total system consists of approximately 9000 data elements, over 50 tables, 100+ queries (including dynamically created ones), and numerous forms and reports. Developed system specification, overall architecture, proof of concept, coded and tested program modules, maintenance utilities, menus and toolbars. The design incorporated unique features including portions in which Access is performing as a client, executing VBA modules as subroutines, data validation, and custom decision support tools. Data feeds consisted of Focus generated flat files, a variety of spreadsheet reports, delimited text files, and other Access databases. Complete responsibility for all needs assessment, relational table structure design and normalization, coding, user training and support. All programming was done in Access basic and Visual Basic for Applications (Object Basic dialects).

United Methodist Foundation - Computemp

Dallas, TX

Feb 1992 to Jul 1992

Contract Applications Support Specialist

Design/Development of an Employee Production Scheduling System using Access and VBA.

EDS Management Consulting Services - Decision Consultants Inc

Allen, TX

Dec 1991 to Jan 1992

Contract Applications Support Specialist

Design/Development of cross platform compatible Field Reporting System using Excel Macros.

Superconducting Super Collider - Belcan Technical Services

DeSoto, TX

Dec 1989 to Nov 1991

Data Systems Support and Programmer Analyst

Design, evaluation, testing, debugging, documentation, and support of the DbServe (SUN based) Oracle reporting tools, custom reports, and databases for Procurement systems. Documentation of functional definitions for DbServe tables. Testing, modification, and documentation of GQL (SQL generating tool) Oracle reporting models. Heavy interface with both Information Services and the user community to resolve problems. In depth knowledge of Oracle table structures for Procurement Systems. Graphics design and documentation. Research and systems analysis for special projects. Software testing, troubleshooting, and evaluation. User technical support and training. Design, development, documentation, and support of custom reports and database systems. Graphics design and documentation. Research and systems analysis for special projects in Accounting Department. Systems management of group file server. Cost benefit analysis and recommendations on hardware/software upgrades. Software testing troubleshooting, and evaluation. User technical support and training. Design and development of Financial Reporting System for GEM Detector Physics Research Group. Involved assessment of user needs requirements and resources, extensive research, system/database design, testing, implementation, and documentation. Programmed MS Excel as a custom application.

Contact this candidate