Client Services Cyber Security

Thomas R. Graham

PO box ***, ** Golden Hill Rd, Lenox Dale, MA 01242

https://www.linkedin.com/pub/tom-graham/1/35/816

*********@***.***, 413-***-****

Lenox Software Consulting, LLC (LSC) (1990 - 2024)

President and founder

I founded a small consulting firm specializing in Software Configuration Management (SCM). LSC offered both client services and in-house developed products (i.e., methodologies, training materials, software tools and finished products) that assisted in the implementation of SCM solutions. LSC Employed up to ten consultants geographically spread across the country (e.g., Texas, Florida, South Carolina, North Carolina, Michigan, New York, Georgia, and Massachusetts). In addition to those duties of owning/managing a small consulting firm, I was also the senior consultant responsible for the design, implementation strategy using Endevor-MVS for our clients. Well over seventy-five (75) clients were served with project goals that have varied from simply trying to get better control over their software development and inventory, to facilitating large corporate mergers. Developed many tools and utilities written in assembler and Cobol to support implementation and analysis.

Genesys Consulting Services, Inc (Genesys) (Jan 2024 – Jul 2024)

Applications Developer Consultant

This was a six month contract with Genesys’s customer. I worked with customer’s IT application development group as mainframe application developer on an insurance application. Tools used were IBM’s SCLM, Cobol, CICS, VSAM and Xpeditor. Followed Agile development processes throughout the engagement. My responsibilities included mentoring, systems requirements and technical specifications, test planning, code development, testing and change control documentation.

General Dynamics Mission Systems (GDMS) (Feb 2016 – Dec 16 2022)

Senior Systems Engineer

Worked with business development as principal investigator for internal research and development (IR&D) focused on cyber security for cyber physical systems. As Product Owner of an IR&D project, my responsibilities included mentoring, systems architecture, project management, deep research, white papers, and setting strategic direction of the development efforts. In addition, I led efforts for R&D scope definition, cost estimation, and CAPEX investments. My role and achievements have had a significant and positive impact on GDMS’s cyber security direction and programs. The position required utilizing skills both business and technical, while interfacing with all levels of management and GDMS’s customers. I currently hold a top security clearance. Retired.

Sabic Innovative Plastics (Sabic-IP) (2007 - 2016)

Enterprise Resource Planning (ERP) Support Leader

I was functioning in dual roles; global network operations and business applications support as follows:

Responsible for improving network operational excellence globally and providing capacity planning on our network (LAN, WAN, and WLAN) as well as on our global phone system (CISCO unified communications). Worked as a “Data Analyst” and developed advanced custom reports to derive long term trend analysis targeting areas for upgrades and optimization. Involved in the implementation of CISCO Prime and Collaboration for monitoring and control of the network infrastructure.

ERP role, responsibilities included the support and enhancement for most of the company’s United States and Canadian based financial ERP (Oracle eBusiness Suite 11i and R12.0) applications. Involved in many efforts to improve the financial controllership/operations of the business. Collaboration with all levels of the financial management team while working cross-functionally with end-users and other IT teams. Responsible for contract negotiations and the oversight of contractors coordinating with off-shore and on-shore teams for both support and development. Sabic-IP’s applications are highly interfaced and ran on multiple platforms ranging from Mainframe, Unix, Windows.

General Electric Plastics (GEP) (2004 - 2007)

Finance Program Leader

Responsible for mainframe and Oracle based Cost based systems. Stabilized the interfaces on these systems to reduce operational failures 98%. Introduced GEP to Extreme Programming, (predecessor to Agile) demonstrated on a very high-profile project critical to the bottom line of the business to recover five (5) million dollars in tax in thirty (30) days. The project was very successful. Saudi Basic Industries bought General Electric Plastics.

Symantec Global Learning and Certification (2003 - 2004)

Director of Symantec eLearning Solutions and Technology

I facilitated and transitioned my team from a Service Development role to a Global Learning and Certification role. As the Director of eLearning Solutions and Technology it included all the responsibilities of the Director of Security Service Development along with training development functions. Accomplishments included overseeing the ongoing partnerPak development, aligning partnerPaks with the Symantec Certification program and release of the Symantec Technical Facilitation Pak, presenting to our partners at Secure Exchange, and developing requirements for distance learning (e.g., virtual classroom with remote lab).

Symantec Security Services (2001 - 2003)

Director of Symantec Security Services Development

Director of Service Development was responsible for the new strategic direction to enable the channel partners. The goal was to reach a worldwide audience of partners, with a consistent message on product implementation, and get the partners spun up during the limited window of time just prior to a product launch. I oversaw the creation and development of partnerPak. The first of the partnerPaks developed was for the Symantec Gateway Security appliance and this was followed by the Symantec Client Security partnerPak. This groundbreaking and critically acclaimed approach to enabling the partners was both cost effective and innovative to enabling our partner ecosystem. partnerPaks met our goals to enable Symantec partners at a fraction of the time and cost.

The partnerPaks are a holistic approach to enabling our partners, they are more than a collection of best practices, more than computer-based training (CBT) and enable the partner to create working examples in which to learn from. The consulting learning curves are estimated to have been reduced from six (6) months to two (2) months for Symantec AntiVirus Corporate Edition, and for Symantec Gateway Security, we found that technicians with no prior knowledge on the firewall, were able to have the appliance up and running in only a few hours in a secure manner. This provided instant ROI, while instilling a sense of confidence in our products. This solution-oriented approach that embodied the philosophy of “what you need to know, when you need to know it” made the appliance much more accessible/approachable by our partners. The partnerPak addressed multiple audience types, from novice to expert (both frequent and occasional) and provided solution-oriented materials (ranging from high-level to detailed, simple to complex, simulations and methodologies, best practices, project plans and sample contracts) as well as bundling in product documentation, sales briefs and white papers and more. partnerPaks are one of the major benefits that partners have with Symantec.

Axent Security Service (2000 - 2001)

Director of Axent Security Services

Director of implementation consulting services organization for the Authentication, Authorization, and Access control (AAA) products (Webthority, Defender, and PassGo). Responsibilities included all aspects of consulting service startup, from concept through implementation, and revenue generation. The position had a strong customer focus and highly cross functional with liaison responsibility between customers, product engineering, technical support, sales, partners, as well as training/education. Duties included team development, hiring/firing, setting salary, skills, and consulting practice development (including methodology and best practices, pipeline and resource allocation/scheduling, beta program, setting scope of engagements, contract writing, and project management). The service rolled out as a concept of a bundled product/service offering. The implementation service that resulted from these efforts was highly acclaimed by our customers, partners, and within the company (by sales, product management, engineering, customer support and executive management). Many of the engagements became reference accounts that were further leveraged by sales. Symantec bought Axent.

Raymond Graham & Associates (1987 - 1990)

Founding partner

Founding partner in a small consulting firm specializing in high quality and large scale applications development using database technologies. Duties included account manager, Business Analyst, Designer, Project leader, Programmer analyst for the development of a large scale (Multi-million dollar project scope) manufacturing Total Quality Information System for General Electric Plastics. Efforts included project leadership for a project team of 6 to 7 individuals, business requirements definition with end users, also involved in the technical design, software specifications, coding, testing and systems implementation. The following applications modules were delivered by this project:

• Customer Feedback (Complaint and Returned Materials system)

• Raw Material Introduction

• Raw Material Tracking

• Raw Material Specification

• Raw Material History Quality

• Purchasing and Raw material inventory system interfaces

Independent Consultant (1984 to 1987)

Project Leader for the development of an Order Ship Bill (OSB) system for General Electric Plastics. This system was modeled after an existing OSB application but was tailored to the needs of a specific business. Efforts included business requirements definition with end users, technical design, project leadership and technical quality assurance testing/review for a team of 6 to 8 programmers (approximately, 1+ year effort).

Project leader for the development of an Accounts Receivable (AR) system for General Electric Plastics. Efforts included business requirements definition, project leadership for a team of 5 to 6 individuals (approximately 1+ year effort), technical design, coding and testing. In addition to the AR development, the effort also included a subsystem for electronic data transmissions to/from Banks.

Served as systems analyst and programmer analyst working on an import-export licensing system for a Digital Equipment Corp. to recover import/export duties and track federal licensing of computers sold outside of the United States (approximately 6 month effort).

Eastern Technical Associates (1982 - 1984)

Employee of a Boston based consulting firm for 2 years, providing consulting services specializing in database technologies. Tasks/accomplishments are as follows:

• Key member of a team responsible for development of an electrical distribution system on PRIME equipment using Prime DBMS, a user written application monitor, and data dictionary. Performed Database administrator functions while concurrently doing applications development.

• Upgraded a General Ledger financial software package, implementing new database structures to provide for client/user requests. The restructure provided for new functionality while making the existing application more efficient. All changes completely compatible due to the use of an input/output control module.

• Designed a marketing software system for promotional contract tracking. The package was completely online and interactive using IDMS and ADSO.

• Provided technical advice for the development of a video education series about Cullinet's (now Broadcom) productivity tool ADSO (Ver 1.0).

Digital Equipment Corporation (DEC) (1979-1982)

Database administrator and Programmer Analyst

Skills:

Professional services management and administration, business systems analysis, design, implementation, and training in the following areas:

Cyber Physical systems

Security Solutions

Consulting Services

Change Control

Manufacturing Quality

Product Specifications and History

Accounts Receivable

Inventory Control

Import/Export

Raw Materials Quality

Bill of Materials

Distribution systems

Marketing

Contract Promotions

General Ledger

Standard Cost

Price Variance

Inventory Cost

C/S Applications

Network Administration

Customer Feedback

Returned Materials

Order Processing

Database administration

Insurance applications

Methodologies:

Agile development methodology

Safe Agile Framework

Model Based Engineering

Symantec Implementation Methodology

Software Configuration Management Implementation Methodology

Lean Six Sigma & Continuous Improvement

Systems Development Life Cycle

Extreme Programing

Modular Systems Design

Database Design

Structured Systems Analysis

Education:

Multiple Management training courses

Certified Information Systems Security Professional (CISSP)

Ethical Hacking

Information Technology Services Management - ITIL Foundation certified

SAP ERP - TERP10 certified with a focus on FICO

Boston University (1 year: Computer Science)

Southeastern Massachusetts University (3 years: Biology, Math)

Technology:

Security solutions Hypervisors, Security architecture, SecureBoot, PUFs, Mutual Attestation, RootKit detection, Symantec security solutions (Firewall/VPN, Antivirus, Client Security, AAA, RSA, Network & Host IDS, ESM, Defender, PassGo, Webthority)

Engineering Jira, MagicDraw, Matlab, Simulink, SpeedGoat, Tableau

DevOps/DevSecOps QEMU, SDK Development, VirtualBox, Doxygen, Polyspace

Networking and Internet Microsoft networking, Cisco Prime and Collaboration, Cisco Unified Communications, High availability/Performance (F5), Riverbed

Computing platforms Xilinx Zynq Ultrascale+, Windows-11 thru 95, 2016 thru NT-Server/workstation, Unix, Solaris, Macintosh, DazzlerMax, pcAnywhere, Ghost, OS/2, MS-Office, MS-Project, MS-Visio, communications tools (i.e., PowerTerm, Passport, ReachOut, Citrix, Extra, Rumba.), DOS, Web/FTP server setup, VMWARE, ORACLE: SQL, Packages and Functions.

IBM Mainframe (MVS) ENDEVOR-MVS (ver 3.5 thru 18.0), ENDEVOR-DB, IDMS, DB, DC, IDD, ADSO, OLM, DMLO, ACF2, RACF, TSO, VM, CMS, PROFS, ISPF (Dialogs, Panels and CLISTs), FileAid, Office Vision, IDCAMS, COMPAREX, TPX, JobScan, JCLPrep, OPS-Automation, CICS, DB2, IMS, COBOL, Pro*COBOL, and Assembly Language, Xpediter

DEC VAX 11/780, DBMS-32, FMS, CMS, DTR, DEC-10/20, DBMS-10/20, DEC Rainbow, MS DOS, CPM, Z80 & 8088 Assembler

Programing Languages:

COBOL, Assembler, Java, Python, C/ C++, ADSO, Perl, JCL, ISPF, REXX, Pascal, FORTRAN

Contact this candidate