Profile of Clint Crigger

Clint Crigger

Madison, WI - 53521 United States of America

Expertise :
Job Type :
Position :

Resume

SUMMARY

Clint has over 20 years of wide-ranging established leadership in Information Technology security, analysis, architecture, project management, mentoring, solution design, implementation and support. His position as Principal Security Analyst for Innovative IT Architects has included the roles of Management Consultant, Web Security Analyst, Enterprise Systems Architecture, Network Engineering, Identity Directory and Security Architect, Java application server escalation support and member of the Web Application Architects supporting development teams. His projects have involved IT strategy and planning, information and infrastructure security, security assessment and review, identity and access management, project management, performance tuning, load testing, incident response, architecture planning, analysis and implementation. These roles have required the ability report daily to the offices of CIO and VP and still roll up the sleeves to provide hands-on leadership and mentoring to security, infrastructure and development teams.
Clint has proven experience in industries ranging from Federal and State Government, Aeronautics, Aerospace, Department of Defense, Fortune 50, Banking, Health Care, Manufacturing and non-profit.
CORE COMPETENCIES
Application Development and Security Architecture and Analysis
CMMI, CobIT, SDLC, ISO 17799 Stds
COOP/COG Disaster Planning
Enterprise Network Design, Analysis, Assessment
Identity, Credential and Access Management
IT Leadership or Management
Java Application Servers WebSphere, Tomcat, JRun, JBoss
LDAP Novell, Microsoft, Netscape, OpenLDAP Management Consulting or Advisor
Resource and Project Management
Web Security and Content Filtering
Security Architecture, Design, Implementation and Support
Single Sign-on and Federated Security
Staff Development, Mentoring and Training
Web Asset Management and Security

PROFESSIONAL EXPERIENCE

1993 - Present

Principal Security Analyst

Innovative IT Architect , LLC President

May, 1999 - June, 2008

Analyst

State of WI Dept of Trans Madison , WI Innovative IT Architect , LLC President

Provided business and technical leadership in the area enterprise IT architecture and security analysis with a specific focus on information security, identity and access management, application architecture, strategic vendor and product analysis and LDAP Directory design and support. Served in an advisory capacity to department management for highly visibility initiatives. Appointed to serve as part of the Application Architects team responsible for project security oversight from design review to post implementation audit.
Provided business and technical leadership in the area enterprise IT architecture and security analysis with a specific focus on information security, identity and access management, application architecture, strategic vendor and product analysis and LDAP Directory design and support. Served in an advisory capacity to department management for highly visibility initiatives. Appointed to serve as part of the Application Architects team responsible for project security oversight from design review to post implementation audit.
Enterprise AD Architecture - Served in an Architectural Advisor capacity on the Wisconsin Enterprise Active Directory Architecture Project. This included working with teams to obtain a consensus on a strategy for a state-wide Active Directory Infrastructure. Worked with a smaller team to develop and document the design.

Delegated Administration - Led the project and serving as the principal architect for entitlement. Developed and deployed a role based access control RBAC mechanism that allows N tiers of delegation to provision applications to internal and external organizations and administer grained entitlements for external facing and internal business applications.
DSI API - Principal architect for entitlement and lead back end developer for a Directory Services Entitlement API that enabled applications to implement either Mandatory Access Control MAC or Discresionary Access Control rules leveraging a role based access control RBAC mechanism that allows N tiers of delegation, N-Tiers of application based virtual inheritance, extreme scalability, the ability to provision applications and administer grained entitlements for external facing and internal business applications.
State wide IAMS Project Served in an Architectural Advisor capacity on the Wisconsin Enterprise Identity and Access Management Project.
Enterprise AD Architecture - Served in an Architectural Advisor capacity on the Wisconsin Enterprise Active Directory Architecture Project. This included working with teams to obtain a consensus on a strategy for a state-wide Active Directory Infrastructure. Worked with a smaller team to develop and document the design.

WisDOT Extranet Project - Performed design, planning, project leadership and implementation of WisDOTs Extranet infrastructure, LDAP based authentication and LDAP based authorization to the method and record level. This included the design and implementation of a of java security API that supported extremely rapid determination of either DAC or MAC security in the context of millions of users, with explicit role occupancy in a many to many relationship in dozens of role instances for potentially fractions of millions of entitling entities data owners or principals. This infrastructure included java applications, WebSphere Application Server, IIS and Apache, LDAP directory services, synchronizing with RACF and Active Directory, iChain and L4 switching from Cisco. Supported large web volumes of web traffic, thousands of concurrent LDAP connections per server in target availability, confidentiality and performance requirements.
Java Development Architect or Security Analyst for a broad range of secured applications, those that dealt with credentials, PII, law enforcement, public safety, fiscal transactions, court records, property titles, criminal information, health information, etc.

March, 2001 - March, 2002

Dept of Administrator

State of WI Madison , WI Innovative IT Architect , LLC President

Lead Security Analyst or Management Consultant WAMS, IDM, Identity External Facing in the Directory and Security Section at DOA Department of Administration.

Enterprise identity, directory and security liaison representing the Department of Administration to other agencies, providing application and infrastructure security design consulting, developer training, to jump-start agencies, provide enterprise escalation support and review security controls and mechanisms, perform security assessments.

Provided architectural and technical leadership in the area of identity and access management and security, providing expert technical direction in the planning, design and implementation of services for the State of Wisconsin. Responsibilities included providing guidance to Dept of Administration and Agency management teams, assistance in planning and coordinating the state's Web Access Management System WAMS. Duties included planning and coordination of the strategic design and implementation of the State's eBusiness infrastructure core applications and components and internal enterprise infrastructure. Provided consultation to state agencies and business partners on design, developer training, testing and implementation of selected secure web applications.
Chaired the enterprise Directory Change Control Group, working with agency staff and enterprise administration staff to insure that the impacts of security infrastructure and directory modifications are understood and the integrity of the state's identity and access management infrastructure is maintained.
Active participation in setting the technical direction for the state's deployment of identity and access management services, setting the direction for the use of said technologies, establishing guidelines and crafting policy recommendations to department management, serving as application architect during the development phase.
Presenter a numerous State wide management conferences and sessions on Application Security, Identity and Access Management.
Instructor State of WI TechForce Academy Security.

September, 1997 - March, 1999

Lead

Lockheed Martin EIS Marietta , GA Innovative IT Architect , LLC President

Senior Consulting Network Engineer Provided project management, network consulting and engineering services to the Lockheed Martin community located in connection with Air Force Plant #6 at Dobbins Air Force Base in Marietta, GA. EIS provides support services for the Lockheed Martin operating branches.

Project Manager or Technical Lead on several projects, a 3000+ user NT multi-master domain rollout part of a 125000 user infrastructure ; supporting the Engineering community. Clients accessed resources via Unix Workstations, X-Terminals, NT Workstation, Win95 and Macintosh. Unix Workstation/Xterm access to Win32 Apps achieved via Win32 apps running on Citrix WinFrame/MetaFrame Application Servers utilizing Xwindows. This project met all major milestones and received favorable remarks from the LMASC Engineering Office, Aeronautics EIS Sector Director and Aeronautics CIOs Office.

Serve as Senior Technical Engineer for all Connectivity issues for the server and desktop support organizations and the principal point of contact between the Network Support organization WAN, MAN and the Server or Desktop groups.
Senior Intel Server representative representing Marietta for the rollout of an Enterprise Implementation of NT Server in a Multi-Master domain structure for a 225000 user environment.

v Provided both technical and project management leadership to a team of 9 Systems Engineers.

v Produced project and budget status to both LMAS Engineering office of VP and LMEIS CIO.
v Developed and implemented consistent development, test, implementation and V and V procedures.
v Managed and system design, testing and application integration for COTS and custom applications into a v Multi-User NT Winframe/WTS environment, testing, V and V Verification and Validation and managing user/customer expectations.
v Established, organized and chaired a bi-weekly Server Consolidation meeting for the LMAS Engineering organizational technical POC Point of Contact personnel that established clear communications and cultivated support from in the customer community.
v Analyzed existing network infrastructure and established network connectivity/bandwidth requirements ; v Interviewed, evaluated and responsible for hiring recommendations.
v Developed, tracked and maintained project plan and schedule and track progress.
v Develop and maintained tools, scripts, utilities and procedures as necessary.
v Researched, developed and published corporate standard for providing general office connectivity to Foreign National Personnel.

v Implemented web based network and network device monitoring and management, providing SLA auditing and reporting, event notification, alarm or trap disposition and remote management, configuration, inventory and application installation. This project resulted in a web site visible from in the corporate firewall that provided both current and historical system availability, fault identification, system failures and cradle to grave performance both numerically and graphically by functional organization.

1995 - September, 1997

Network Manager

Rutherfordton , NC Feburary Innovative IT Architect , LLC President

Management Advisory Network Manager in North Carolina for the enterprise from a 5 building campus, involves several HP-UX systems and IBM 4381 running VSE, W95 PC's and Laptops, WAN Links, redundant links to ISP's, Hand-held IR Terminals, large robotics based cutters NFS, AS400 Intranet and Extranet Web Servers and Novell and NT Servers.
Network, WAN, Network and Systems Management and Architect reporting to the VP of Information Technology.

In response to increased business needs, re-designed and expanded a 3 segment bridged network supporting 40 PCs 1 small HP-UX server and 1 Novell Server spread over 3 buildings, into a switched and routed campus area network with WAN links to external sites, redundant routed links to multiple ISPs, WAN links, supporting campus area users and over 2500 authenticated users remotely domestic and international via Dial Up Networking, VPN and Internet connectivity HTTP, SHTTP, SMTP.
Proposed, engineered and implemented a desktop platform re-engineering and deployment project with the following results : Annual cost savings estimated at $153050.00
Reduced average tickets from 252/month to 161/month resulting in a 36% reduction in Trouble Tickets, representing an estimated annual cost savings of $ 26200.00.
Increased usability of Dialin Service with following results 4th Qtr 95 compared to 4th Qtr96 : Usage of Service in Number of Connections Increased 674%
Usefulness of Service in Hours Connected Increased 919%
Information Accesses in Mbytes Transferred Increases 690%
Designed and recommended using Web Server technology over traditional dial-in pool and WinView/WinFrame technology for Sales Force Automation purposes. Cost savings are estimated at $ 92000.00 Initial + ongoing cost savings of $ 162000.00 or yr.
Recommended and implemented an Intranet Server using internal resources costing $ 45000 less than the lowest external bid.
Designed, developed and implemented a sales force report delivery application that eliminated an estimated 520 man hours or yr while reducing the information delivery delay by 2.5+ days each week.
Size of User base increased 700% in 24 months, while quality of service and level of services provided has increased while achieving a decrease in network support personnel. Initially the network was supported by 3 desktop technicians, 3 systems admins and 2 consultants. In September of 1997, the entire support staff consisted of 1 desktop technician, 2 system admins 1 Novell, 1 Unix.
Completed network, connectivity and support plan for implementing and supporting via remote management methodologies a garment design facility located in New York, workstation configuration and administration, in addition to server and router management.

November, 1989 - July, 1994

Systems Analyst

NASA Marshall Space Flight Cntr Huntsville , AL

Team Leadership BOEING was the prime contractor for NASA at Marshall Space Flight Center in Huntsville, AL, providing Computational Mission Space Flight Mission Services, all inter-center data and video networking and all network management for the agency and localized responsibilities to provide both laboratory and office automation technologies to the Space Flight Center community.