Cynthia — Sr. Information Security Engineer

Charlotte, NC Consultant Working with Audit Support and using MS Excel for reporting consisted of doing VLOOKUPs for reporting to compare information that was in ACT and AIMS to make sure that everything (Applications, users) were compliant into what they were logging onto. Also using SQL developer, and studio to write a script to export information from both ACT and AIMS to use to an analysis in MS excel for data using VLOOKUP's. Also, I have helped to develop templates (because Wells Fargo just implanted ServiceNow two years ago) for the team site in order for the team to place Incidents, problem, and change request. The team also used SharePoint for documentation that we tied to OneNote for our information. Jon this team we used Jira for reporting for Audit request for internal and external auditors.

Working on this team we monitored (Bitdefender – Gravity Zone) with maintaining IT infrastructure as a third-party IT company for many companies such as Iron Mountain Police department, Fire department, Dito, Bravehearts and many more companies. The team's responsibility was to ensure that the network, servers, and applications for each were running smoothly and efficiently. We were also responsible for identifying and resolving any issues that arise in the IT infrastructure. Duties insisted of: ServiceNow – putting in incidents, and problem request. Monitoring the performance and capacity of computer systems, servers, and network infrastructure. Troubleshooting problems that arise in the IT infrastructure. Tracking and documenting all defects and resolutions in detail through a designated ticketing system. Escalating complicated issues to management, other IT resources, third parties, and/or vendors, as appropriate. Communicating with site technicians or third parties responsible for resolution. Performing regular checks on network hardware and software. Analyzing events to determine their significance and trigger the appropriate response. Providing technical support to end-users. Ensuring that IT services are available 24/7/365. Helped in the beginning phases with BitDefender (Automation-Gravity Zone) to monitor Alerts for Threat Modelling, Risk Assessment, Secure Development and Deployment.

Working in the IAM department, and meeting with Audit team to conduct walkthroughs for the different controls.

Contractor Charlotte, NC As an ACT (Access Certification Tool- automation) This tools was used to onboard all application with end users and to certify any entitlements and certifications) On-board Applications Systems Engineer 5, having worked in Enterprise Risk Management Technology - Access Management Solutions, with multiple teams, averaging 10-15 different groups, to help prepare their application data (information was coming from a Linux, Unix, or Windows server) to look at this information and drive the ACT on-boarding process to a state appropriate for certification and compliance with policy was indeed a great success. After onboarding applications over through NDM with the process consistent of building the scripts for the 251, 252,253, 254, and 255 for those applications, Wells Fargo moved from TSO to RACF, we were now responsible for user access for critical resources. We were using RACF to hold all access-control information. This involved building scripts using JCL. With every release, I was able to maintain a successful state for each application moving from test into production. I worked with technical teams from all lines of business within the bank to establish new transmissions of data used in the certification of user access to applications and systems. Duties consisted of: Excellent written and verbal communication skills - facilitated conference call meetings, project reporting on applications, MS Lync and MS Outlook email Mainframe batch ETL experience - used IPSwitch_FTP to move files to mainframe and check data integrity Mainframe SAS - understood how to locate abends and fix issues Mainframe security (top secret) - used TSO_ACT Built JCL scripts to define ACT to ART mapping in personal libraries and Test/Production environments to run batch processing on application files to prepare environment to send files to QA. RMS - to research applications Daily focus on mainframe security issues regarding RACF assessment and remediation Data analysis - compared and gathered file data against ICD (Internal Control Document) specifications to analyze quality, accuracy and linkage of files DAT (Data Acceptance Tested) of application files for Users, Resource, UserAttr, RsrcAttr and Config Created ART Request for applications - based on review of NDM Information coming from ACT Preparatory Questionnaire Surveys Report Manager Created documentation, check-list and flow charts - for ACT On-board process, Endevor, QA Batch for Service Accounts, NDM Service Request Setup and more Created database queries in DB2 and MSSQL- used MS Sequel Server Determined passed or failed transmissions in IBM NDM

Charlotte, NC Working on the EAM team on updating new PBL for auditing for all LOBs. Proficient with the use of many network security and management tools such as Active Directory and Magellan to access resources that were being access by internal employees. Worked also with Excel to extract information to set up spreadsheets to create new PBL description.

Charlotte, NC. Working with the Applications team implementing InterDyn to create an electronic procurement for the purchasing order system.

Charlotte, NC Working with the CHRAM (Corporate Human Resources Access Management) department with PeopleSoft Cleaning up roles and rows with in the application. Created sub site for CHRAM in SharePoint after a migration that needed clean up. Also granted provision for all HR new and existing employees in PeopleSoft, workforce analytic, active directory, and HRHD-Human resource helpdesk

Charlotte, NC Researching and examining current systems and consulting users Liaising between Business Stakeholders, and Technical Departments Writing software, documentation and operating manuals Testing and modifying systems to ensure that that they operate reliably Testing defects for codes working with Base24

Bloomfield, Michigan Henry Ford Hospital (Thru Walker Health IT) Analyzed the project requirements, available resources and end user's expectation to determine the outline for the EPIC module (willow, cadence, clarity) Customized the installed software to particular user's requirements while maintaining the quality standards Made sure the reports and statistics delivered by the software are accurate and consistent with the industry protocols Coordinated tasks with all team members and ensured all activities proceed in one direction Drafted progress reports at every stage of the project and documented every task Identified deviations in the project and counseled the clients to eliminate them Children's Hospitals of Minnesota (Thru Walker Health IT) Conducted cost benefit analysis of various ETL tools and technologies Created UNIX/Linux shell scripts, JCL mainframe procedures, and processes to extract data from databases such as DB2 and Oracle. Implemented complex transformations by creating custom transformations in addition to using built-in ones Oversaw unit and system tests and assisted users with acceptance testing Conducted peer design and code reviews and extensive documentation of standards, best practices, and ETL procedures. Experience with HP NonStop/Tandem development with skills in performing requirement analysis, design, and coding in switches- Base24. Cincinnati Children's Hospital Medical Center (Thru Walker Health IT) Assist with creation and maintenance all necessary documentation and training materials for EPIC Ambulatory application. Performed analysis, design, development and maintenance of the EPIC Ambulatory applications. Experience with EPIC user and provider record provisioning, including the development of role-based access, security classes, and user profiles Experience in EPIC Resolute product implementation and deployment Hands on experience with EPIC Hospital Billing and Ambulatory Experience with EPIC Healthcare Information Systems. Conducted user interviews, gathered requirements, and analyzed the requirements. Worked with the business team to collect the business requirements, security and service level requirements and documented them. Analyzed set behavior and contribution to business performance, critical business metrics & tracking underlying business trends using Business Objects. Working with different IT & Business groups to understand and determine the Impacts to the Data Warehouse and/or Data Marts for different projects Participated in the logical and physical design sessions and developed design documents. Designed new process flows for the existing system as well as for the enhanced system. Conducted and lead status report meetings with the business and the IT team on a weekly basis. Manage Scope and change throughout the life cycle of the product.

Southfield, MI Back to finish up windows 2008 migration

Bloomfield, Michigan Mercy Hospital of Toledo Ohio (Thru Walker Health IT) Responsible for delivering success in all phases of the iterative Software Development Life Cycle (SDLC) Gathering (user) functional requirements using various requirements modeling and UML tools including Rational Rose, Rational clear case and MS Visio Involved in Test Planning, Test Preparation, Test Execution, Issue Resolution and Report Generation to assure that all aspects of a Project are in Compliance with the Business Requirements. Conducting User Acceptance Testing (UAT) and documentation of Test Cases. Expertise in designing and developing Test Plans and Test Scripts. Interface with clients from Operations, Marketing, Sales, Technologies, and Outside Vendors and act as their customer interface point as the lead of the Projects.

Southfield, MI In the testing phase of Windows migration provided and collect of all Wells Fargo applications for inventory/ Analyzed/ Assess incompatibilities and migration options/ prepared for OS deployment with application Performed duties for migration of Windows 7 to 8. Such as data backup on existing PC, printer, scanners, and faxes/ data restore/ post-migration configuration. Worked with SharePoint in migration.

Led analysis for the North region Monitored and supported a growing network comprising of MS Exchange Server 2003, XP 2008 laptops and desktops in an Active Directory environment, including domain controllers, DHCP, DNS, and group Policies Worked with various engineering teams providing IT support for their projects Installed, maintained, and patched operating systems, including local customizations Implemented security policy to protect internal network against unauthorized access and provided provisions for disaster recovery in the event of successful intrusion/attack Implemented site system security audits; implemented system baselines per security profiles Improved system security through setup and ongoing maintenance of NetScreen-Security Manager Delivered a cohesive solution managing Juniper firewalls and containing all IDP software Researched, recommended and implemented network enhancements that improved system reliability and performance Performed duties of local Information Assurance Officer (IAO) Solid EPIC and Allscripts experience that includes participation in all phases of EMR implementation; project planning, workflow analysis, design, build, validate (DBV), "go-Live" training delivery, on-site support, and post go-live optimization. During these various stages of Epic and Allscripts implementation, I have worked with clinician staff including; physicians, nurses, patient service representatives, and also practice managers Strong experience with Telcor in working with laboratory and the vendor for go-live.

Toledo, OH, Applications Analyst, 1999 to 2009 Customer Service Analyst, 1996 to 1999 Computer Programmer, 1992 to 1996 Help Desk Analyst, 1990 to 1992 Provide for the independent facilitation of selection / design, implementation, maintenance, and support of critical information technology, equipment and processes used by the healthcare system and customers Experience in implementation of McKesson/Horizon – gathering requirements, testing, and deployment Experience in implementation, customization, upgrade and maintenance of PeopleSoft HRMS/HCM applications. Experience with PeopleSoft and HR are HR /NA and global payroll / base benefits / benefit administration / application Designed and implemented SMS and storage management tools and processes Maintained relations between the customer and the organization on all customer service and work order issues Answer client questions on installation, repair and maintenance and train end-users on system resources and applications Manage and lead efforts in the review, application and maintenance of local information assurance policies and procedures Resolve a history of problematic network failure by troubleshooting LAN/WAN connection among eight regional facilities Performed and create procedures for system security audits, penetration-test, and vulnerability assessments. Experience in working with a team to help manage real-time security vulnerabilities through IBM Vulnerability. Document/track risks (security vulnerabilities) and escalate new risks and obstacles to leadership. Designed SAS Programming with Java to develop cost effective applications Responsible for administering and supporting 800 Citrix server environments on Windows Server 2003/2008 Responsible for Terminal server builds and Citrix XenApp server deployments in both Physical and virtual environments Fulfilling service requests related to RACF (z/OS and z/VM), and Active Directory (users, groups, and permissions) in a Healthcare environment. Experience in Base24 HP Non-stop / Tandem environment. Work to development with TACL, C++. Working closely with other operation support team to improving process flow for Linux/Unix for McKesson. Designing and configuring system access rules and permissions within multiple environments to protect information resources within the enterprise Communicating with internal and external customers on access to various applications

Charlotte, NC Working with EPV (Enterprise Password Vault) to provide reporting and provisioning for all end users with privileged assess. These accounts were accounts with greater privileges than those of ordinary user accounts. This account allowed access to install or remove software, upgrade the operating system, or modify system or application configurations. The EPV tool was put in place to automate this access, and to also provide alerts, and reporting for the team.