^{Richard S. Herro}

2348 Orchard Crest Boulevard732-292-1950

Manasquan, NJ 08736Rich@Herro.com

 

Inventive IT designs with over 15 years of broad expertise leading cross-functional teams to successfully execute innovative projects. Highly technical manager with extensive knowledge of various utilities, tools, operating systems, protocols and topology; US Patent holder driving solutions to reach business goals.

 

CERTIFICATIONS:US PATENT #7783463 – Designed for Data Center a Client Simulation Lab

CISSP – Certified Information Systems Security Professional - In progress

ITIL - Foundation IT Service Management

CCNA - Certified Cisco Network Administrator

MCSE - Microsoft Certified Systems Engineer

 

EDUCATION:New York University

Bachelor of Science, Finance, Stern School of Business

 

PROFESSIONAL EXPERIENCE

 

HTS Security TECHOLOGY2015 – PRESENT

Solutions Architect

 

§    Design Software Defined Infrastructure for SDN and Cloud Security for customers

§    Evaluated and delivered presentations to C-Level Executives on Cloud Service Providers (Amazon AWS, Google Compute and Microsoft Azure) and Security Solutions from Cisco, Sophos, F5, Juniper, Palo Alto

§    Implemented Architect Solutions for SDN infrastructure E2E design blueprints for customer sites these locations.

§    Managed the Cyber Risk Data Protection Architecture; supporting a Global Exposure Solution for a Multi-Vendor Expansion project

§    Implemented and enhanced Security Solutions Architect for Customers Networks in Data center, comprising of multi-vendor Routers, Ethernet switches. F5 Load Balancers, CISCO ASA Firewalls. VoIP and Wireless devices.

 

AMERICAN INTERNATIONAL GROUP (AIG)2014 – 2015

Solution Architect/Service Delivery Manager

 

§    Managed Cisco Network Infrastructure; Cyber Risk Services and Cloud Security for remote Datacenters.

§    Designed Cloud Security solutions with (IAM, SIEM, IDS) which included ‘Best Practices’, to efficiently utilize the Cloud services; Software as a Service (SaaS); Platform as a Service (PaaS) and Infrastructure as a Service (IaaS)

§    Architect new Topologies for Customers Datacenters using CISCO platform; included Security for Server/Client WEB Applications.

§    Designed, Plan and Implement Rollout Plans, created Statement of Work (SOW) and Order Builds

§    Designed Architect Solutions with Enterprise Risk Management for Solvency II Financial Model

§    Managed and Monitored Modeling application; with Access Control (ACL) and Data protection using encryption.

§    Developed and implemented a Disaster Recovery (DR) plan.

§    Developed various Proof of Concepts, (PoC) environments for ECM Igloo application

 

ALIGN COMMUNICATIONS2013 – 2014

Senior enterprise Security Solutions Architect

 

§    Managed Projects, designing and developing solutions architecture for production sites with Cloud infrastructure.

§    Designed Security Solutions for Cloud Service (IaaS), and VoIP Virtual Datacenters

§    Provided consultation and displayed presentations to Hedge Fund CIO and NYC Department CIO.

§    Delivered presentations targeting future state problems and challenges in CYBER Security

§    Designed and implemented HIPPA, SOX, SAS70 compliant Disaster Recovery as a Service (DRaaS) solution. Plan uses Cloud aware software to automate synchronization with Cloud provider.

§    Analyzed Cloud Service Provider market for client including; Amazon AWS, and Microsoft Azure).

§    Designed and developed and managed the Security Information Events Management (SIEM).

§    Developed the DR/HA Architecture Using virtualization VMware, VSphere.

§    Architect Infrastructure for High Availability mission critical business systems provided Tier 7 Highly automated business recovery solution.

§    Evaluated Business and Technology Risk generated new ideas and challenge the status quo.

§    Research new technology based tools and methods to present to Managers

§    Review Mobile MDM market for financial customers, researched vendors for the Blackberry replacement and designed a solution that worked for the financial industry regulated client

 

MORGAN STANLEY2005 – 2013

VICE-PRESIDENT, ENTERPRISE SOLUTION ARCHITECT

 

§    Financial Enterprise Architect received a US Patent for the unique design of a Client Simulation Lab

§    Worked directly with Business Units on ‘Best Practice’ to Developed strategic solutions and architecture solutions.

§    Designed Security Solution and demonstrated a scalable and easy to adapt for customers changing business requirements.

§    Designed architecture for Low Latency trade flows internally and performance testing of new infrastructure.

§    Performed Presentations to department Managers a comprehensive Tactical and Strategic understanding of infrastructure management i.e., Service Level, Capacity Planning, Business Continuity, Change and Release management and governance.

§    Proven track record of effectively delivering project results, meeting all deadlines for projects and completed projects under budgeted projections.

§    Provided technical thought Leadership in overall Security Solutions development

§    Build and Manage a team of Engineers from scratch to support new Solutions Security Architecture for Datacenters

§    Established a team of System Engineers across Asia, North America and Europe supporting Global Enterprise Security Solutions.

§    Architect an end-to-end Network to perform Capacity Testing in Labs with response to UK FSA regulatory Audit finding as part of ITs Enterprise Data Security.

§    Managed team of up to 18 VPs, associates and consultants to design, test capacity and report updates to regulators

§    Managed multiple vendor programs from contract negotiations, SLA and prepare RFP/RFI response, proposals and create vendor partnership.

§    Designed and implemented QA environments to test Capacity, Performance and Application Failovers.

§    Provided Cloud Services solutions; IaaS, CaaS and PaaS to the business development teams.

§    Designed a Business development environment, development and implementation, complex security, performed capacity testing and certification.

Network Management:

§    Implemented Global Security Solutions Initiatives in Data Center Lab environments.

§    Managed Security threats by conducting penetration testing, log analyses and vulnerability

§    Work with Datacenter Managers and Business teams to ensure efficient synchronization and implementation of infrastructure including; Wireless and VoIP Network, SAN, Windows Server and Linux.

§    Provide technical expertise to Datacenter Engineers, established credibility with design, deploy and operate server based technologies within the virtualized data center.

§    Managed over 2000 servers in three Datacenter locations, Implemented multi-vendor Security tools for defense in depth strategy.

§    Execute infrastructure management activities in the labs across multiple locations, and certify new network kit, monitored servers using Nagios, monitoring tool.

§    Implemented F5 load balancer solution supporting WEB Applications in an IP Network

§    Tested applications for Scale Up vs Scale out vs Grid. Made recommendations from tests.

§    Provided support for the Morgan Stanley Client Link portal and many of the 200 apps that ride across that MPLS Cloud environment

§    Managed the Morgan Stanley Matrix portal prior to go live to test/tune.

 

UNISYS CORPORATION2003 – 2005

ENTERPRISE ARCHITECT / PROJECT MANAGER

 

§    Provided consultation and delivered presentations to Senior IT Executives from Sharp, Chubb, Merrill Lynch, WAI, Jet Blue and NYC public sector.

§    Designed and Developed an Enterprise IT Security Strategy presented to Executives; IT Blueprint included; Integrate High Availability and Disaster Recovery; Implementation of SAN and NAS storage; Improved systems management using ITIL and MOF

§    Designed a Solution Architect for financial firm looking to improve High Availability.

§    Performed assessment of the IT systems, processes and applications to assist new company CIO in acquiring needed data and identify areas of risk/concern.

§    Architect a Global Secure Cisco Wireless LAN solution to be implemented with Access Points and RFID system.

§    Design Datacenter Relocation Project, manage the project from start to finish, including the development, documentation and implementation of the planning and testing of Network devices

§    Managed Engineering teams, System Test Lab designers, with Dev/QA test environments. 

§    Scaled-up SQL Server using 16 processor 64-bit, and 32 processor Windows Datacenter.

§    Active Directory design and implementation project engineer for Unisys’ clients.

§    Enterprise Architect Solutions for an Electronic customer. Designed an IT Blueprint based on the Microsoft MSA Reference Architecture Other recommendations included: Systems Management Tools, remote Desktop Management and a new DR strategy.

§    Design and developed an IT Strategy for a large NYC Department; this strategic study analyzed the current-state IT infrastructure and defined a future-state IT infrastructure based on the Microsoft WSSRA Designed AD and SMS to manage desktops.

§    Design solution Architect for several Disaster Recovery; Business Continuity assignments Performed DR Risk Assessment, Business Impact Analysis and created SMARC tables.

 

K HOVNANIAN ENTERPRISES1999 – 2003

DIRECTOR SOLUTIONS ARCHITECTURE & INFRASTRUCTURE

 

§    Director of IT Architecture and Infrastructure: Responsible for all technology deployments for $31B Fortune 1000 Corporation.

§    Managed IT resources across 90+ Networked sites, and was directly responsible for all IT Architecture planning, Engineering team, Network Infrastructure and IT Operations including LAN services, Helpdesk, SAP Basis, Mortgage and Telecom Teams

§    Extensive experience developing Full Project Life Cycle projects from discovery through implementation standardized the IT Department’s project plan methodology.

§    Provided consultation to corporate Senior Management.

§    Created and managed budgets for the Network, SAP Basis system, the Mortgage, and Telecom Total budgetary responsibility was approximately 12 million dollars annually.

§    Created a three year IT Strategy plan that took into account areas where the business units had planned to grow, and managed the tactical IT Infrastructure and Security projects to align with the IT Strategy “Look at the Strategic to understand the Tactical.”

§    Implemented continuous improvement concepts in each of my teams. Created Metrics to measure progress

§    Managed and lead engineer teams to focus on problem-solving, decision making and adaptive learning

§    Standardized the company workstations to Windows XP, Office XP, updates, patches, and new applications using SMS

§    Systematically incorporated High Availability systems, clusters, and fail over options.

§    Negotiated national contracts with Telecom, Disaster Recovery and Off-Site Tape Storage vendors; Organized DR tests across company.

§    Planned and managed a Datacenter consolidation and Datacenter relocation.

§    Implemented Sarbanes-Oxley compliance measures.

§    Designed WAN Infrastructure to streamline a single Vendor Frame Relay cloud this change increased throughput to remote offices by 5 times while reducing telecom costs by over 20%.

§    Re-Sourced data network a second time in 2002 to take advantage of aggressive competition to improve network performance; cut data line costs by over 35% ($57k to $42k per month).

§    Implemented Network Management solutions that included: HP Open View and Cisco CWSI Monitoring Utilized Network Associates Sniffer to troubleshoot application and connectivity issues.

§    Analyzed telecom expenditures in several regional offices redesigned the telecom services, line types and LD providers to save $250,000 per year in telecom expenses.

 

Security Solutions:

§    Designed, developed and Implemented a security solutions using Cisco ASA, Juniper SRX and Check Point devices

§    Implemented Dragon Intrusion Detection Sensor (IDS) at corporate office.

§    Planned and implemented a comprehensive, integrated and auto-updating Anti-Virus solution using

§    Lead the cross functional teams that designed the SAP Security groups, Transaction Codes, Profile Generator and the standard and non-standard authorization processes.

§    Performed regular security audits on both the internal and external company network to ensure security.

§    Performed Risk Assessment audits on several companies that were in purchase negotiation with K Hovnanian

§    Adopted enterprise wide best practices policies; implemented procedures to incorporate and standardize OS security settings and audit logs.

§    Implemented automated log tracking scripts to alert to high interest incidents.

§    Designed E-Commerce infrastructure utilizing Microsoft MSIB including MS Content Manager Server, Commerce Server, Application Center, SQL Server 2000, on two Global Load-Balanced web server

§    Designed, Developed and Implemented the company’s first Internet connection; includes a Checkpoint Firewall w/ DMZ, Intrusion Detection Sensor, MailSweeper SMTP gateway, Web Server w/ SSL, FTP Server, Sophos Antivirus

§    Implemented a Citrix Secure Gateway Application Portal to allow access to the corporate network across the Internet over secure SSL connections.

§    Identified breaks and vulnerabilities with third parties applications and infrastructure.

§    Led efforts to protect corporate data by enforcing information security policies and Troubleshot SAP ERP implementation issues and performance problems.

§    Installed Red Hat Linux w/ Apache as web servers to cut web server licensing costs Configured TomCat ServLet application servers to run web enabled ERP application.

§    Utilized MS BizTalk Server as part of an Enterprise Application Integration (EAI)

 

Application Development:

§    Designed standards for the company’s SAP ERP roll-out to remote sites, including Portal access for company vendors and partners Designed data flow requirements for integration.

§    Managed Application engineers, developed Internet Policies and Procedures for IT

§    Implemented Mercury WinRuner and LoadRunner for application QA testing.

§    Managed development team that developed Internet, intranet and eCommerce site development using NET, J2EE and Servlets.

§    Maintained Financial Trading Desk for Mortgage Company with Reuters.

§    Built the company’s first QA Test Lab Incorporated Red Hat Linux Servers, Windows Servers, SQL Server, Cisco Routers, Checkpoint FW, Citrix MetaFrame XP, SAP, Mercury WinRunner and LoadRunner Tested all new applications prior to deployment.

§    Administered ADP HRizon payroll server and Integra mortgage underwriting system both running on SQL Server.

§    Managed upgrades to Oracle Financial Modeling System (FMS).

§    Created Active Directory tree structure and project plan to implement AD.

§    Integrated three separate financial databases into one multidimensional data warehouse.

§    Implemented a fiber backplane for SAN/NAS access and Tape Library backups.

§    Designed Mail and Messaging infrastructure including Internet Gateway

 

 

TECHNICAL SKILLS:

 

CLOUD PROVIDERS:AMAZON WEB SERVICES (AWS), MICROSOFT AZURE, GOOGLE CLOUD

CLOUD SERVICES:CaaS, IaaS, SaaS, DRaaS

OPERATING SYSTEMS:CISCO IOS, NX-OS, JUNIPER JUNOS, RH LINUX, VMWARE ESXi, MICROSOFT WINDOWS

 

ROUTERS/SWITCHES:CISCO CATALYST SWITCHES 2900, 3500, 3900, 6500; 4300, 5100, CISCO ISR G2, CISCO 9000 ROUTERS;

CISCO NEXUS 5K, 7K SWITCHES; JUNIPER MX960, MX480, EX, QFX, SRX210

 

SECURITY/FIREWALLS:

·               CISCO ASA

·               JUNIPER SRX

·               F5 BIG IP

 

STORAGE DEVICES/MONITOR TOOLS:

·               SAN, NAS

·               IBM

·               EMC

·               CISCO NETFLOW

·               HP OPENVIEW

·               RIVERBED

 

PROTOCOLS/TOPOLOGY:ATM, DECNET, ETHERNET, FDDI, FRAME RELAY, IPX-XPS, ISDN, NETBUI, SNA, SONET, T1, T3,

FIBEROPTIC CABLES, COAXIAL CABLES, TOKEN RING, X.25, Xdsl, RADIOWAVES, RF, TWISTED WIRE CABLES, DMZ,

TCP/IP, BGP, EIGRP, IPV4, IPV6, OSPF, IS-IS, VxLANS, MPLS CLOUD VPN, VLAN, ACL, VOIP, SIP, PSTN, WiFi 802.11a/b/g/n, 802.11ac