ANDREW MELLEN **** S. Fundy Circle ∙ Centennial, CO 80015
Microsoft Certified Systems Engineer 303-***-**** (m) ∙ **********@*****.***
A hands-on senior Information Technology professional equipped with 20 years of proven success. Innovative leader with broad technical knowledge and proven ability to meet business objectives with technology solutions. Extensive qualifications in all aspects of systems engineering, administration, management and maintenance, network/server operations, hardware/software solutions, information security and business continuity.
Combination of hands-on leadership style with exceptional communication skills continually driving focused teams toward performance excellence. Adept at improving operation standards to provide efficiency, customer experience and increase revenues. Areas of expertise include:
Information Security and IT Audit ∙ Service Management ∙ Business Continuity ∙ Technology Implementations
Strategic Planning ∙ Systems Design ∙ Client Relations ∙ Project Management ∙ IT Budgeting
PROFESSIONAL HIGHLIGHTS
Lead Shane Co. Data Center move which included 150 production servers, SAN and large SAP application footprint with only two hours of store operations downtime. Responsible for implementing new network wide standards and monitoring practices, while replacing entire Windows core infrastructure.
Security and Loss Prevention Manager at largest privately owned jewelry store in the United States. Successfully converged all systems to allow for central management and decreased response times to security and loss prevention incidents. Created new incident response system to allow for immediate reporting of incidents.
Managed a fifteen person technical support team at Raytheon that decreased open tickets by 75% and cut issue response
time in half allowing the support of several new contract areas without increasing staff.
Enjoyed the prestigious opportunity of supporting presidential communications terminal for Air Force One and Air Force Two; an instrumental contributor to the success of two Space Shuttle launches.
RECENT EXPERIENCE
Shane Co. Retail Jewelry Company ---------------------------------------------------------------------------------2/2007 – Present
Senior Manager, IT Operations & Security
Leadership of Service Desk, Store Systems and Enterprise Security functions including 9 direct reports. Implemented “Legendary Service” initiative that applied ITIL framework methodologies resulting in increase of customer satisfaction survey approval rating to 90% and first call resolution rate to 80%.
Managed a complete overhaul of the SAP ERP landscape security architecture to industry best practices. This included role definitions, profile updates and proper separation of duties for ERP, FICO and BI systems. It also included the review of all background processes and assigned user roles used by XI system.
Management of all aspects of the IT Infrastructure to include a 1,000 sq. ft. data center housing the core Cisco network, 200 Windows servers and an HP EVA SAN. Included a 20 store nationwide MPLS infrastructure with 40 servers, 200 workstations and 150 POS terminals.
Primarily responsible for all company information security. Managed an Intrusion Protection System implementation and rollout of new endpoint security layers to improve network protection. Responsible for all incident identification, investigation and response. Actively involved in all aspects of loss prevention and compliance.
Developed a new enterprise security framework and associated policies using COBIT and ISO/IEC 17799 as guidance. Created company-wide information and physical security awareness program.
Built PCI Compliance Roadmap based on full internal PCI self-audit of entire infrastructure.
Completed maintenance contract review of all security systems to ensure proper maintenance saving $100,000 a year.
Improved all video surveillance systems to allow network access and reduce investigation and response time at all stores. Performed security analysis at 20 stores and provided results and recommendations to executive management.
Senior technical contact for SAP Triversity POS system. Successfully managed roll out of three major software upgrades while only impacting store operations with 10 minutes of downtime. Rebuilt, reconfigured and optimized 10 Transnet middleware servers, 46 store servers and 170 POS terminals resulting in reduction of support tickets by 50% and POS crashes by 65%.
Recommended and led implementation of secure file transfer solution that saved the company $40,000 a year.
Coordinated the implementation of a new Bangkok, Thailand facility including new data center housing 10 Windows servers and HP EVA SAN.
Managed a cable cleanup project at 20 stores to improve network connectivity and implement new cable management and hardware standards. Project included visits to all stores, site surveys, technician coordination and hands on cleanup of several stores. Resulted in another 20% decrease in POS crashes.
In first month of hire, decreased downtime of all infrastructure services 90% by stabilizing the Windows infrastructure which was continuously causing email, authentication and application problems. Upgraded the Windows domain to 2003 R2 and implemented several enhancements that improved the overall user experience.
Tripled the performance of the shaneco.com web site infrastructure by implementing Windows best practices and implementing several TCP/IP and application configuration parameters. Engineered replacement web infrastructure that allowed for 40% increase in overall traffic and holiday influx.
Successfully implemented Exchange Server upgrade to 2003, which included quickly implementing OWA, ActiveSync with ISA Server and a dual firewall infrastructure. Engineered a new Exchange 2007 infrastructure.
Managed three new store openings in three months. This included the setup and tear down of training facilities, management of all vendors, CAT6 cabling, network installation, server installation and configuration, POS and PC installation and configuration, VoIP phones and windows domain configuration.
Engineered and implemented complete SharePoint (MOSS 2007) architecture. Completed user training to enable departmental site development while developing low-end applications and forms to support business functions.
Fiserv Financial Services Company ----------------------------------------------------------------------------------5/2004 – 2/2007
Information Systems Security Officer / Test Lab Manager / Lead Systems Administrator
Sole individual responsible for security operations, audit, Sarbanes-Oxley compliance and CyberTrust certification. Included incident response and investigation, file system forensics, log analysis and antivirus/spyware management.
Implemented bi-weekly security meeting for IS departments to address patch management, train administrators and address security process improvement. Shortened patch time from four months to one.
Key contributor to business continuity functions including the completion of a Business Impact Analysis and Disaster Recovery testing.
Managed the implementation of mobile and desktop encryption. Performed product evaluation, procurement and training of technical support.
Redesigned total information security and audit framework to align with corporate strategy and meet auditing and federal regulation requirements. This included identification of gaps in security policy, creation of policy control structure and creation of policy radar screen report using NIST rainbow series, COBIT and ISO/IEC 17799.
Completed assessment of Application Development Lifecycle. Initiated security involvement with all project management and application development processes. Wrote a Secure Development Lifecycle Roadmap which identifies security requirements, project deliverables, security code reviews and security testing of applications. Developed System Security Plan template.
Implemented RSA multi-factor authentication product for all of our externally faced web sites. Completed a complete risk assessment of all of our web sites to determine implementation scope.
Migrated Novell GroupWise email system to Exchange 2003 on time with limited budget and resources, including clustered Exchange/Win2k3, front-end load balanced Win2k3 servers, ISA Server 2004 for OWA, Blackberry Enterprise Server 4.0 and Mobile 5.0 PDAs.
Doubled performance of the middleware platform by deploying clustering/SAN technologies and SQL Server 2000.
Senior member of administration team that was responsible for all aspects of Windows NT/2000/2003 system administration, including Active Directory, DNS, DHCP and Group Policy.
Decreased downtime by 25% in test/dev/stage environments as Test Lab Manager for a 130 server test lab consisting of VMware, Windows, Linux and Cisco technologies.
Project lead for several successful application implementations on Windows platforms. One of the primary specialists consulting on several business initiatives.
Hands on experience with Snort, ISA Server, Websense, Cisco PIX, nCircle Vulnerability Scanner, McAfee ePo and several other open source security tools, such as Nessus and wireshark/ethereal.
CAREER SUMMARY
Ciber U.S. Government Contracting Company -------------------------------------------------------------------10/2003 – 5/2004
Lead System Administrator
SchlumbergerSema Utilities Support Company -----------------------------------------------------------------2/2000 – 10/2002
Windows Administrator
SCB Computer Technology State Government Contracting Company ---------------------------------------6/1999 – 2/2000
Lead Windows Administrator
Litton PRC U.S. Government Contracting Company -------------------------------------------------------------9/1998 – 6/1999
Senior Systems Admin / Lead Exchange Server Admin
AppliedTheory Internet Service Provider --------------------------------------------------------------------------4/1998 – 9/1998
Primary Windows Administrator
Raytheon U.S. Government Contracting Company --------------------------------------------------------------9/1997 – 4/1998
IT Services Supervisor
U.S. Air Force--------------------------------------------------------------------------------------------------------------5/1990 – 9/1997
Desktop Services Supervisor / Web Manager
Raytheon U.S. Government Contracting Company---------------------------------------------------------------5/1994 – 9/1997
Part-Time Industrial Security
Aurora Mall Security Services----------------------- --------------------------------------------------------------9/1992 – 4/1994
Part-Time Security Guard
EDUCATION AND ASSOCIATIONS
Community College of Air Force--------------------------------------------------------------------------------------9/1990 – 9/1997
B.S. in Computer Information Systems 100 Credit Hours
University of Phoenix -------------------------------------------------------------------------------------------------11/2009 – Present
B.S. in Operational Security Management Expected completion date of 11/2011
American Society for Industrial Security (ASIS International) - Member
SCHEDULED TO TEST FOR CISSP ON 8/1/2010
TOP SECRET (SCI) SECURITY CLEARANCE 1990 - 1998