^{Richard S. Herro}

2348 Orchard Crest Boulevard732-292-1950

Manasquan, NJ 08736Rich@Herro.com

 

Inventive IT architect with over 15 years of broad expertise leading cross-functional teams to successfully execute innovative projects. Highly technical manager with extensive knowledge of various utilities, tools, operating systems, protocols and topology. US Patent holder driving solutions to reach business goals.

 

 

CERTIFICATIONS:ITIL - Foundation IT Service Management

CCNA - Certified Cisco Network Administrator

MCSE - Microsoft Certified Systems Engineer

US PATENT #7783463 - Design of the Client Simulation & Innovation Lab

 

 

EDUCATION:New York University

Bachelor of Science, Finance, Stern School of Business

 

 

PROFESSIONAL EXPERIENCE:

 

 

HTS CONSULTING

Security Architect / Program Manager

·   Designed Infrastructure for Cloud migration`

·   Evaluated and delivered presentations to C-Level Executives on Cloud Service Providers (Amazon AWS and Microsoft Azure) and Security Solutions from Cisco and Juniper

·   Implemented infrastructure for E2E for remote sites these locations required Nexus 9K, HP Blade center for the Server/client applications.

·   Managed the Cyber Risk Data Protection Architecture; supporting a Global Exposure Solution for a Multi-Vendor Expansion project

·   Implemented Customer Security Networks in Data center, comprising of multi-vendor Routers, Ethernet switches, F5 Load Balancers, CISCO ASA Firewalls. VoIP and Wireless devices.

·   Performed website security scans using WebInspect

·   Performed network security scans using Qualys

·   Implemented and configured secure remote access and VPN access

·   Moved client apps to cloud using AWS SSL and Amazon EBS encryption

·   Managing 6 distinct project streams

 

 

AMERICAN INTERNATIONAL GROUP2014 – 2015

Solution Architect/ Service Delivery Manager (AIG)

·   Designed the Solutions Architecture plan for Financial Modeling, Solvency II Financial Model with Enterprise Risk Management

·   Created new architecture plan for moving ERM apps to virtualized internal cloud platform,

·   Created department roadmaps based on business, vendor schedules and technology refresh.

·   Managed and troubleshoot performance issues with the Re-architecture/Engineering for the Financial Modeling application on internal cloud.  Tested public cloud scale out. 

·   Generated data package for regulators for solvency 2 and CCAR.

·   Performed technical review for Statement of work (SOW) for customers at remote sites

·   Developed and managed new future state architecture for remote clients

·   Designed, developed and implemented a DR/BC plan and test for the ERM team.

·   Managed Multi-Vendor Expansion project, design, developed and documented for the Hardware and Software Infrastructure including Data Architecture.

·   Managed daily scrum meetings and prioritized projects for support teams based upon criticality and roadmap.

 

ALIGN COMMUNICATIONS2013 – 2014

Senior Solution Architect / Project Manager

·   Managed integration project developed new topologies for customer environments, designing new cloud infrastructures using multi-platforms.

·   Conducted verifications for information delivery by developing and completing usability test plans; evaluating traffic patterns; studying user feedback; and Usability Specialists

·   Answered customer RFP’s for new project work

·   Implemented Microsoft Dynamics CRM at NYC Hedge Fund client

·   Supported Hedge Fund CIO and NYC Department of Health and Mental Hygiene CIO.

·   Solutions Architect designed and developed an overall vision that underlies the solution for NYC Department of Health customers while complying with HIPAA

·   Designed DR/HA Architecture deploying and managing Virtualization technologies Citrix, VMware, VSphere and Site Recovery Manager.

·   Created a High Availability Architecture that will provide true Tier 7 Highly automated business recovery solution.

·   Evaluated and analyzed Cloud technologies providers for a HIPAA regulated clients.

·   Designed, developed and implemented HIPAA compliant DRaaS solution. Plan uses Cloud aware software to automate synchronization with cloud provider.

·   Analyzed Global Service Providers in Cloud market for clients including such names as AWS, CSC, Rackspace, Savvis, Cognizant and Azure

·   Analyzed MDM market to find a solution for the financial industry regulated clients using Blackberry and trying to switch to iPhone and Android

 

 

MORGAN STANLEY2005 – 2013

Vice-President, Architect / Program Manager

Enterprise Solution Architect designed Client Simulation Lab, High Performance Lab, capacity Testing Lab and Innovation Lab. Received US Patent for design of Client Simulation Lab.

·   Designed and developed a Capacity Testing Lab

·   Managed teams of 18 VPs, associates and consultants with installation and operation of large-scale capacity and performance testing in response to FSA audit finding.

·   Performed contract negotiations and SLA negotiation with vendors

 

IT Management/Architect:

·   Managed end-to-end Data Center Design for multiple white space build outs

·   evaluated and tested enterprise applications for performance issues and capacity limits

·   Managed cloud solutions IaaS and PaaS for the business development teams.

·   Proven track record of effectively delivering results while managing multiple priorities.

·   Design, deploy and operate server-based technologies within a virtualized Data Center.

·   Project Manager for Client Simulation Lab build out that included over 130 IT professionals.

·   Managed a team of global engineers across North America, Europe and Asia

·   Comprehensive tactical and strategic understanding of infrastructure management including Service Level, Capacity Planning, Business Continuity, Change and Release management, governance and global migrations.

·   Provide consultation to DC managers and business teams to ensure efficient synchronization and implementation of infrastructure practices including daily scrums.

·   Implemented Client Simulation Lab, the high performance Lab, and created the Capacity Lab

·   Develop presentations for the client simulation lab deployed to applications and DMZ configuration changes

·   Created RFP’s for several large vendor requests

·   tested and implemented secure wireless networking for testing of new iPad applications

·   Implemented Continuous Integration testing Software Dev using ElectricCommander

 

 Network Management and Security:

·   Performed all infrastructure management activities and certifications in the labs across multiple locations

·   Perform consolidated analysis of over 2000 servers in three datacenters.

·   Architect Security designs to allow F5 load balancers and Firewalls providing access to front end tools for several tests simultaneously

·   Implemented Nagios monitoring to proactively monitor servers and run RFB tests.

·   Developed and Implemented security initiatives using devices (Cisco ASA, F5, Checkpoint) to support defense in depth strategies in QA and production Lab environments.

·   Performed security scans on all new Web Apps for Common Vulnerabilities (DVA scans)

·   Arranged penetration testing in the Client Simulation environment

·   Implemented System Management Tools, remote Desktop Management and a new DR strategy

 

Web Apps and Ecommerce:

·   Maintained Morgan Stanley ClientLink portal and applications

·   Performed testing of the Portfolio Analytics portal and the GM IPO website

·   Troubleshoot bottlenecks in the performance of the Google TSO application

 

UNISYS CORPORATION2003 – 2005

Enterprise Architect / Project Manager

·   Served as Senior Enterprise Architect for Unisys consulting working on multiple projects for customers

·   Managed and supervised several small engineering teams.

·   Provided consultation and delivered presentations to senior IT executives from Sharp, Chubb, Merrill Lynch, WAI, Jet Blue and NYC public sector.

·   Created IT Strategy: Analyzed current state of IT; Design an IT Blueprint; Integrate High Availability and Disaster Recovery processes, installing SAN and NAS storage devices

·   Improve systems management using ITIL and MOF

·   Enterprise Architect for implementation of secure wireless LAN and RFID system

·   Designed new Architect for wireless IT systems, processes and applications to assist new company CIO in acquiring needed data and identify areas of risk/concern

·   Designed, developed and implemented new Active Directory design with scaled-up SQL Servers using 16 processor 64-bit, and 32 processor Windows Datacenter.

·   Enterprise Architect for a major consumer Electronics Company Designed an IT Blueprint based on the Microsoft MSA Reference Architecture

·   IT Strategist for an Enterprise Architecture review for a large NYC Department This strategic study analyzed the current-state IT infrastructure and defined a future-state IT infrastructure based on the Microsoft WSSRA Designed AD and SMS to manage desktops.

·   Designed and implemented Disaster Recovery – Business Continuity assignments Performed DR Risk Assessment, Business Impact Analysis and created SMARC tables.

·   Enterprise Architect for financial firm looking to improve High Availability systems Goal achieved via implementation of 30 mile Stretch Cluster.

·   Worked on several RFP’s for large clients

 

 

 

K HOVNANIAN ENTERPRISES1999 – 2003

Director of Information Technology

Director of IT Architecture and Infrastructure: Responsible for all technology deployments for $31B Fortune 1000 corporation. Managed IT resources across 90+ networked sites, and was directly responsible for all IT Architecture planning, Engineering team, Network Infrastructure and IT Operations including LAN services, Helpdesk, SAP Basis, Mortgage and Telecom Teams.

·   Supervised a team of 30 IT engineers

·   Created and managed separate budgets for Network, SAP Basis, Mortgage, and Telecom Total budgetary responsibility was approximately 12 million dollars annually.

·   Created a three year IT Strategy plan that took into account areas where the business units had planned to grow, and managed the tactical IT Infrastructure and Security projects

·   Implemented continuous improvement concepts for teams and turned around under-performing team into highly effective team and implemented metrics system for team based goals

·   Managed Full Project Life Cycle projects from discovery through implementation standardized the IT Department’s project plan methodology.

·   Negotiated national contracts with Telecom, Disaster Recovery and Off-Site Tape Storage vendors

·   Planned and managed a data center consolidation and data center relocation.

·   Implemented Sarbanes-Oxley compliance measures

 

Network Management:

·   Managed enterprise wide network consisting of 5000+ nodes, 150+ servers (Windows 2003 {including clustered Advanced Servers}, Windows NT, AS400, DEC Vax , Linux and RS6000 AIX systems) in six separate data centers connecting 90+ WAN sites.

·   Redesigned WAN Infrastructure to streamline structure The WAN had been a heterogeneous mix of separate Frame Relay clouds and three vendors’ point to point links The new WAN infrastructure is a single Vendor Frame Relay cloud This change increased throughput to remote offices by 5 times while reducing telecom costs by over 20%.

·   Created RFP for data network again in 2002 to take advantage of aggressive competition to improve network performance while cutting data line costs by over 35%

·   Implemented Network Management solutions that included (HP OpenView, Heriox’s EQ Server Monitoring and Cisco CWSI Monitoring)

·   Analyzed telecom expenditures in several regional offices, installing new telecom services, line types and LD providers to save $250,000 per year in telecom expenses.

·   Developed and documented systems architecture and implemented a fiber backplane for SAN/NAS access

·   Implemented secure wireless LAN at several sites including corporate, NE design studios

 

 IT Security:

·   Implemented CheckPoint VPN-1/FireWall-1 on both hardened windows servers and on Nokia

·   Implemented Dragon Intrusion Detection Sensor (IDS) at corporate office

·   Planned and implemented a comprehensive, integrated and auto-updating Anti-Virus solution using McAfee on desktops and file servers, Trend’s ScanMail on the Exchange servers and Sophos on the SMTP gateway

·   Led the cross functional team that designed the SAP Security groups, Transaction Codes

·   Performed security audits on internal and external company network and implemented automated log

·   Performed risk assessment audits implementing best practices policies and procedures

·   Designed E-Commerce infrastructure utilizing Microsoft MSIB including MS Content Manager Server, Commerce Server, Application Center, SQL Server 2000

·   Designed and implemented the company’s first Internet connection This design included a Checkpoint Firewall w/ DMZ, Intrusion Detection Sensor, MailSweeper SMTP gateway, Web Server w/ SSL, FTP Server, Sophos Antivirus, and Trend Content Filter and

·   Implemented a Citrix Secure Gateway Application Portal and load balanced server farm

·   Led efforts to protect corporate data and systems through creating and enforcing information security policies and procedures that limited ability to copy or send data out of the company

·   Installed Red Hat Linux w/ Apache as web server’s configured TomCat ServLet application servers to run web enabled ERP application.

·   Managed Enterprise Application Integration (EAI) project, transforming data from disparate applications, databases and web sites into XML

Application Development:

·   Designed, developed and implemented SAP ERP  to remote sites, including Portal access for company vendors and partners, designed data flow requirements for integration and troubleshoot issues

·   Managed Application Development teams working on SAP applications, eCommerce sites and security

·   Implemented QA Test Lab Incorporated Red Hat Linux Servers, Windows Servers, SQL Server, Cisco Routers, Checkpoint FW, Citrix MetaFrame XP, SAP

Back Office implementations:

·   Designed and implemented MS SMS Server with MS SQL Server 2000 to deploy applications remotely, performed PC SW/HW inventories Utilized MS MOM to monitor SMS and SQL Server.

·   Developed Active Directory tree structure and implemented Windows 2000 Advanced Server with SQL Server 2000 Enterprise Edition to support Integra Mortgage database

·   Installed and administered ADP HRizon payroll server and Integra mortgage underwriting system both running on MS SQL Server.

·   Upgraded Oracle Financial Modeling System (FMS) to Oracle 9i and implemented all company controllers

·   Integrated three separate financial databases into one multidimensional data warehouse

·   Implemented HP StorageWorks SAN for ERP and Exchange.

·    

 

TECHNICAL SKILLS:

 

OPERATING SYSTEMS:  CISCO IOS, NX-OS, JUNIPER JUNOS, RH LINUX, VMWARE ESXi, MICROSOFT WINDOWS

               WIDE AREA NETWORK, METROPOLITAN AREA NETWORK, LOCAL AREA NETWORK,

                                                 INTERNET, INTRANET, EXTRANET, DATA CENTER TECHNOLOGIES

HARDWARE COMPONENTS,

AND MONITORING TOOLS

ROUTERS/SWITCHES

·   CISCO CATALYST SWITCHES 2900, 3500, 3900, 6500; CISCO ISR G2, 9000 SERIERS;  NEXUS 5K, 7K SERIERS; JUNIPER MX, EX, QFX, SRX SERIERS

 

SECURITY/FIREWALLS

·   CISCO ASA

·   JUNIPER SRX

·   F5 Load Balancer

·   CHECKPOINT

 

VIRTUAL CLOUD SERVICES/WIRERLESS

·   CISCO CSR 1000v, ASR 9000

·   CAAS, IAAS, PaaS

·   VMWARE VSPHERE CLIENT

 

STORAGE DEVICES/MONITOR TOOLS

·   SAN; NAS

·   CISCO NETFLOW; HP OPENVIEW; RIVERBED (OpNet)

PROTOCOLS/TOPOLOGY:

WAN/LAN TECHNOLGIES AND PROTOCOLS

 

·   ATM, DECNET, ETHERNET, FDDI, FRAME RELAY,

IPX-XPS, ISDN, NETBUI, SNA, SONET, T1, T3,

FIBEROPTIC CABLES, COAXIAL CABLES, RADIOWAVES, TWISTED WIRE CABLES, TCP/IP, TOKEN RING, X.25, Xdsl, BGP, IPV4/V6 MULTICAST, OSPF, EIGRP, IS-IS, VxLANS, MPLS CLOUD VPN, ACLS, VOIP, SIP, PSTN,

802.11ac, 802.11n, 802.11a/b/g, 802.11i, dot1x and 802.11