Stephen Miller Resume Sr. IT Solutions Architect

1. Stephen Miller swmps@yahoo.com
250 E 54th
Street (917) 704-5934
New York, NY. 10022 (212) 758-1051
Summary:
Information Technical Architect Engineer with over 26 years of experience in open systems
architecture from cloud platforms to “out of the box systems” to implementing proprietary product
lifecycle management policies and project management.
I've architected, engineered and implemented many environments, with emphasis on high
availability and virtualization, security, business continuity, monitoring and performance
management; various cloud initiatives including VM’s to, SaaS, PaaS and IaaS – platform
services; investigating many, however implementing Azure, AWS and open cloud systems.
Managed both technical support and level-1, 2, 3 engineering teams in highly available, critical
environments and supported vendor relationships and managed third party applications; including
retail (PCI3), market data providers, front (SOX) and back office systems and trade executions.
Technical Skills:
Operating Systems: UNIX / Solaris, HPUX Linux, CentOS, IRIX, AIX, Microsoft Windows, SaaS.
Cloud Services: Global and functional/Platform Azure Cloud and IaaS architect, SunGardAS,
APAC Dimension Data Hybrid (open-cloud) PROD/DR HK-Tokyo environments,
migrations from physical to VM to cloud, often including hybrid Colo Racks from
requirements; usually Networking equipment and circuit drops, VMWare hosts,
DMZ, virtual appliances, or DBMS related concerns. AWS Certified Cloud
Engineer.
Database/Application Servers: Oracle, Sybase, MySQL, PostSQL, Informatica, WebLogic, Java, Apache Tomcat
Clustering/High Availability: Virtualization (ESX/VM, nPar/vPar, hard/soft zones), VCS, Microsoft/SQL
Clusters, various load balanced solutions (F5-GTM/LTM GLB LLB VIPS),
horizontal and vertical application clusters; granular recovery, Global Load
Balancing with or 100/0 to active-active utilization and Advanced (Dynamic)
DNS, Autosys, MQueue, SAN and snapshotting technology, SRDF(a/s)
replication, modern data protection.
Backup Management: CommVault Simpana10v9, Globally OnPrem and Azure Blob aes256 replication,
Symantec NetBackup, CA BrightStor/ARCserve, SyncSort Backup Express
(BEX), EMC Legato, Tivoli Storage Manager, authored scripting solutions with
tar/dump, rcp, SCP, and others self-scripted.
Monitoring and Performance: HP OpenView (Performance Management), TeamQuest, SolarWinds, GlancePlus,
BMC Patrol/Predict, PROGNOSIS, Microsoft MOM SCOM, SCCM, Netcool.
Name/identification Services: AD, ADCS, ADFS, LDAP(S), Oracle IDM/OAM, SSO, DNS, NIS, MESA,
MSDB, TACACS.
Wireless and Mobility: 802.11a/b/n/a+c, aes256 SHA-2, AP/IAP, Aruba ClearPass, AirWave, Mobile Iron
(SaaS & OnPrem) /BYOD, 802.1x OnBoard, MAB (MAC Address).
Security and Authentication: MS PKI, RADIUS, Aruba ClearPass, Airwave, SSO, NAC, 802.1x, EAP-TLS,
SSL, VPN, SSH, Kerberos, Checkpoint, Juniper, Sunscreen SPF, Pix, RS/IDS,
Tripwire, OAM/OIM, CA signed certificates. SOX, PII, PCI compliance
successful scans with hardened OS.
Networking: TCP/IP, UDP / multicast, X.25, SNA 3270/X.25, FIX, TIBCO RV, MQ, Filter,
IPSec, VRRP, OSPF, VoIP, DMVPN, EDMZ (multiple methodologies.)
Programming/Shell Scripting: C, sh, csh, ksh, perl, PSH, PHP, Visual Studio, various proprietary
Cloud 4GL’s or web based configuration and dashboard interfaces.
References Available as well as Provided on LinkedIn public profile http://www.linkedin.com/in/swmps
1 | P a g e

2. Professional Experience:
Tory Burch, LLC. (Corporate) New York Metropolitan Area January 24, 2013 – December 13, 2015
Senior IT Solutions Architect (Systems Engineering)
• Integrated a multi-tier Microsoft 2008R2 PKI Enterprise design, for integrating with Cisco RADIUS and
Aruba ClearPass appliance suite; for ultimate secure, PCI compliant LAN and WLAN connectivity, using
best practices, FIPS and PCI 3 regulatory compliance.
• Completed Wireless Global EAP-TLS Aruba ClearPass LAN/WLAN security management for
approximately 2300 corporate devices with 802.1x and combinations of Windows 8 Server, Windows 7
Client, Mac OSX, and IOS (iPhone and iPad), as well as retail Guest (BYOD) access (approximately
double that value globally). Engineered, using Mobile Iron and SCEP, automatic PKI (CA03) certificate
renewal to Retail and Corporate OIS (iPhone, iPad) devices, and likewise to OSX with Casper.
• Successfully migrated NYC campus production assets to the SunGard Hybrid Cloud in PHL with (DR/BC)
in CO, including a hybrid cloud topology and supporting infrastructure (Direct connect redundant GB
Metro fiber ring).
• Redesigned the backup and offsite of data from tape to a “Modern Data Management framework” using
OnPrem 30-day deduped block level storage, and auxiliary; global Azure cloud solution for DR and total
off-sight independent restoration, as well as data retention, encryption of data at rest and data in flight; also
supporting necessary audit and legal hold capabilities in the required framework. All of these initiatives are
designed to be FIPS and PCI compliant and utilize aes256 deduped data from 6 global presences. This
single successful initiative has led to $1MM in annual savings.
• Day to day support, project management, RFP and SOW review and project or technology presentations.
.
McGraw-Hill Companies (S&P, MHE, Construction, Corporate) December 2010 – December 2012
Senior Solutions Architect (Systems Engineering)
• Successfully completed many solution designs from stakeholder inception, through multiple costing layers,
design stages, implementation, DR testing with failover, failback, Ops transition, and production warrantee.
• Created many solutions utilizing Weblogic Tomcat and .NET VMs, Oracle SQL, and MySQL DBMS, in
two and three tiered eDMZ network topologies, internal and cloud.; Solaris Unix, RHEL Linux,
Windows2008.
• Created many solutions involving Windows IIS and .NET as web and web/app servers for third party
solutions or access through data marts or reporting services such as Business Objects, Oracle EBS,
MicroStrategy, Informatica, Knova, and others.
• Architected many RHEL Solutions for Oracle 11gr2 RAC on ASM, migrating from Higher cost Solaris
VCS clustered implementations.
• Worked through new and supplemental firewall modifications in support of new applications, partner net
off-shore development resources and Neoteris Citrix access. This includes piloting DMVPN technologies.
• Virtualized many servers and services, consolidated to larger clusters/farms, and more recently
internal/private cloud hybrid and Amazon AWS for public and confidential data, mostly in the MHE
Educational space.
• Constant compliance with SOX, PCI and HIPAA regulations, utilizing an ITIL framework for PCLM.
Integrated Research Denver, CO. (with extensive travel) November 2008 – May 2009
Professional Services Engineer Consultant – Americas
• Created Solaris 10 zones (global/root, non-global/shared), installed oracle 10g into multiple zones, and
integrated each into 64-bit PROGNOSIS 9 monitoring and data collection.
• Scripted customer solutions (perl, ksh, sh), including PROGNOSIS extractors, DB collectors and data-set
summarization into RHEL, VMWare, Solaris zones, Oracle and Nonstop NSK related solutions.
• Installed instances of PROGNOSIS (8.5, 9) in multiple architectures (OS), features and topologies.
Merrill Lynch New York Metropolitan Area September 2007 – May 2008
Consultant - GMIT/TASS
- Enterprise Infrastructure Architect and Lead Solutions Engineer (LSE), Equities and Fixed
Income and Commodities (FICC).
References Available as well as Provided on LinkedIn public profile http://www.linkedin.com/in/swmps
2 | P a g e

3. - Liaison project manager (SCM) between technology (GTI) and business (GMI) to design,
coordinate and implement solutions for new and existing applications.
• Incorporated a firm-wide contingency and recovery (C&R) SLA and application footprint for next
generation, granular recovery (GR) contingency and Recovery (C&R). Collected 273 tier one trading
application candidates and converted all simple and several complex applications to GR enabled and
internally certified and SOX compliant. This included implementation of F5 3DNS/WideID, unique
storage sets per application function, and spanning storage sets with srdf to single replicated frames.
• Architected retrofit of applications and initiated a variety of server and database consolidation efforts to
firm-wide farm clusters, including Sybase/Solaris10, Oracle/Solaris10, Oracle/Linux as5, and Solaris10
utility containers (application servers) with Sun RISC VM and HP IA64 Blade Center (nPar, vPar VM)
• Engineered NAS and EMC LUN storage group consolidation (Premium+, Lite+, Lite, CASS, NAS),
thereby making granular srdf/asrdf (and tier 2 NAS) contingency failover configurations possible, as well
as providing significant cost savings to their respective specific business area cost centers.
• Managed a variety of server and database consolidation efforts to firm-wide farm clusters, including
Sybase/Solaris10, Oracle/Solaris10, Oracle/Linux as5, and Solaris10 utility containers.
Morgan Stanley (Head Quarters) NY, NY. April 2006 - March 2007
Investment Banking Division (IBD) Level II Support Engineer, Production Applications
• Architected a vendor entitlements engine for IBD, writing a scripted Perl/ldap, SQL and AD groups lookup
aggregation and delivery mechanism (perl/pgp) - triggered by an Autosys event scheduler, confidential
content delivered via encrypted Comet delivery service and monitored through a Netcool perl API.
• Managed vendor applications and external market data in enterprise fat and web driven, client applications.
• Performed an Autosys job migration project from Solaris to Linux; cataloging IBD unit’s 684 Autosys jobs,
identifying 126 candidates for platform migration, onto IBM and HP Blade Center technology.
• Managed multiple offshore teams responsible for approximately 70 applications in varying phases of
lifecycle development for Investment Banking (IBD), Global Capital Markets (GCM), and Real Estate
(MSRE) divisions within a global level II support team, executing daily ready for business (RFB) checks,
weekly and emergency change management turnovers as well as emergency break fix diagnosis and repair.
Sesame Workshop NY, NY August 2004 – May 2005
Consultant - Core Engineering, Architecture and Systems Administration
• Architected a new enterprise backup solution; a heterogeneous environment of 50 clients and five media
servers consisting of UNIX (Solaris/Irix/Linux), Netware and Windows (NT2000/2003) servers, including
Exchange, SQL, DB2 and open file agent extensions via switched 1GB channel sharing native read/write
and control access to multiple tape devices.
• Managed IBM installation and assisted implementation of a Blade Center consisting of Intel Xenon blades,
SAN booted to a LC channel FastT700 and tertiary 10 TB SATA storage array, in support of an IBM
Content Management System (ICMM) with DB2, Web Sphere and video on demand (VOD) applications.
• Engineered upgrade for multiple Oracle database and application servers, replacing legacy environment
with modern Sun servers with Oracle CPU based licensing and warm stand-by high availability.
Independent Patent Design NY, NY. 2003 - 2004
Patent Search, Application Process, Copyright Process Flow Identification and Authentication
• Architected and submitted patent application for “a proprietary elevator efficiency loading control system”.
Merrill Lynch New York Metropolitan Area 2002
Consultant (Sun Professional Services) – Infrastructure Project Manager
• Created and managed project plans from post 9/11 boilerplate templates, matching a discrete number of
available configurations to fulfill business unit requirements.
• Facilitated project plans though procurement, change request, asset allocation, and coordination of
functional silo activities to fulfill a successful completion.
References Available as well as Provided on LinkedIn public profile http://www.linkedin.com/in/swmps
3 | P a g e

4. Skillgames (Walker Digital; Priceline and Disney Cooperative NY, NY. and Stamford, CT. 2000 - 2002
Sr. Architect, Unix System Administration Manager
• Designed and implemented a 5x9 highly available load balanced collocated environment; including
Firewall and IDS clusters, VLAN segments trunked via host and Cisco Cat OC12 bridging, various
management and event notification systems, redundant multi-carrier 50 Mb internet vendor VPN MPLS,
redundant multi-SAN, (Various Filesystem Formats) multi-tiered DMZ for IPlanet, Weblogic, and
clustered Oracle OLTP, data mart, and SAP database repositories.
Merrill Lynch New York Metropolitan Area 1999 - 2000
Consultant - Sr. Systems Administrator (CICG/Equities Core Engineering Team)
• Built a new listed block trading web-reporting service in a productions client server environment.
• Designed a QA lab environment for equities server consolidation with decimalization expansion.
• Designed and Built RHEL highly available, clustered file and print server template.
• Built Windows IE Server, app server for mainframe MUNI bond data feed analysis and scrub functions.
Hollywood Stock Exchange Los Angeles, CA 1999
Consultant (Sun Professional Services) - Sr. Systems Administrator
• Audited network and system design, with respect to Sun Solaris Enterprise systems, Sun Storage and HA
clustering, correcting several system inefficiencies.
AIG (SunAmerica, Inc.) NY, NY. And LA, CA 1997 - 1999
Consultant - Sr. Systems Administrator / Sr. Architect
• Designed network and infrastructure components of SunAmerica’s Broker Dealer trading application,
Vision2020. Through whiteboard engineering analysis, recommending vendor specifications and
application requirements, through the development and beta-production site in New York, and final rollout
and implementation of the production environment in Los Angeles.
• Built VCS clustered Sun Oracle DBMS, dual Sun U60 SNA/X.25 gateways, DNS servers, Sendmail and
ftp servers (all Sun Solaris, Veritas foundation suite and DBMS HA fail-over (VCS)), Sunscreen SPF 200
Firewalls with SSL and SKIP/VPN encry7ption.
Merrill Lynch (Debt Markets) NY, NY. 1995 - 1997
Consultant - Sr. Solaris Systems Administrator
SIAC (ITPN / NYSE) New York Metropolitan Area 1995
HPUX Systems Administration, Shell Scripting and Disaster Recovery implementation
JP Morgan Chase (Equities Trading Floor) NY, NY. 1994
Consultant - Sr. Solaris Systems Administrator7
UBS (Associate Engineer, Systems Administrator), Equities Trading floor NY, NY. 1994
Lockheed Martin (Electrical Engineer, UNIX Systems Administrator) Denver, CO. and Orlando, FL. 1990 - 1994
Education:
• BS Engineering, Electrical Engineering, Colorado School of Mines 1990
• Minor Business Economics
Professional Development:
• Project Management Fundamentals I, II, Managing Offshore Projects.
• Certified Amazon AWS Technical.
• Various Cloud education, 2012 Cloud Expo, Amazon 101, 2012 Amazon AWS Cloud Expo, Puppet and
enStratus management, Cloud cross connecting via Equinix, SunGard and in APAC with Open Stack cloud.
• MSDE (MS Development Environment) ~ AFS, DSDB, Janitor, Pod cells, Kerberos authentication.
References Available as well as Provided on LinkedIn public profile http://www.linkedin.com/in/swmps
4 | P a g e

5. • Sybase, Informatica, RHEL Linux, Autosys, Filter, Market Data Distribution and Real-time Monitoring.
• Merrill Lynch development SNI GTAG VCS Clustering and (Solaris, EMC and Shark) SAN fabrics.
• SGI (level 1), Sun Microsystems (level 2) System Administration Sun Solaris Enterprise Tuning Course.
• Solstice Sunscreen SPF200 Training and development, Neural Network Chip Development Training
References Available as well as Provided on LinkedIn public profile http://www.linkedin.com/in/swmps
5 | P a g e

6. • Sybase, Informatica, RHEL Linux, Autosys, Filter, Market Data Distribution and Real-time Monitoring.
• Merrill Lynch development SNI GTAG VCS Clustering and (Solaris, EMC and Shark) SAN fabrics.
• SGI (level 1), Sun Microsystems (level 2) System Administration Sun Solaris Enterprise Tuning Course.
• Solstice Sunscreen SPF200 Training and development, Neural Network Chip Development Training
References Available as well as Provided on LinkedIn public profile http://www.linkedin.com/in/swmps
5 | P a g e