Dave Moats, CISSP
resume@davemoats.com
Solutions oriented Information Security Professional with notable success in a broad range of corporate information systems initiatives. Played an integral role in the architectural design, solution development, and implementation of information security solutions in direct support of business objectives. Track record of increasing responsibility in the Information Security, systems analysis, development, and project management areas.   Hands-on technical experience leading all stages of system development efforts, including requirements definition, design, architecture, testing, and support.   Outstanding leadership abilities; able to coordinate and direct all phases of project-based efforts while motivating and leading project teams.   Adept at developing effective security standards and procedures, project documentation, and technical/business specifications.   Exceptional communication skills, effective interaction with customers who possess varied technical backgrounds and through this interaction, gather the data required to create a viable technically sound architectural design.   Created and implemented custom Windows system applications / services in order to fulfill security requirements when no off-the-shelf solution was available.   Ability to build lasting customer relationships, focusing on becoming the customer's trusted advisor.
Core Competencies
Customer Focus Anti-Virus Management Regulatory Compliance Application Development	Windows Security Windows System Development Research & Development Web Development	Identity Management User Provisioning Risk Assessment Windows Administration Automation
Professional Experience
03/08 - Present       Commercium Technology Inc.       Senior Consultant - Professional Services
Custom Identity Management Solutions Analyzed customer requirements and business logic. Created rules and data translations to ensure IdM solution met or exceeded business requirements. Developed and executed comprehensive test scenarios to ensure solution performed as expected. Created informational and implementation documents for customer. Built custom scripting modules that can be reused in future projects. Designed and developed custom SOAP over SSL data connector. Performed Critical Path Meta-Directory and MetaMonitor upgrades. Provided technical expertise needed to solve customer issues. Designed and developed a Java based connector for SAP Netweaver VDS. Technologies used during this period: Windows scripting PERL scripting ADSI Batch scripting Java LDAP HTML JNDI Java Script SQL Critical Path Meta-Directory Critical Path Directory Server Microsoft Active Directory Microsoft Exchange SAP Netweaver VDS
05/06 - 03/08       Critical Path, Inc.       Senior Consultant - North America Professional Services
Customer focused Meta-Directory implementations. Analyzed customer requirements to develop customized best-fit solutions. All solutions are designed to ensure maintainability; overly complex designs are continually reviewed until the best overall solution is created. Implemented these solutions using either the built-in (Grammar based) rules or Perl based script rules. Consistently met customer deadlines for design and implementation. Documented all changes and updates to existing systems. Developed and provided Advanced Meta-Directory training. Focused on Meta-Directory and its interaction with Active Directory / Exchange 2000. Training class presented to customers at their location. Created all training materials and manuals. Updated and provided Introduction to Meta-Directory training. Updated course material to correspond with current product line. Training customized to target audience's environment. Training class presented at customer's location. Provide Technical Sales support. Assist potential customers by providing Meta-Directory engineering knowledge. Developed and presented customer targeted / tailored demonstrations of Meta-Directory based solutions. Participate in sales meetings as the Meta-Directory SME. Part of the team that developed a web based Meta-Directory monitoring and reporting solution. This solution was written using Perl, CSS, and JavaScript is a PSO offering. Created and implemented a custom Exchange distribution group management solution. Group membership management based on data from HR information. Limited Active Directory queries to restrict possible impact on Directory. Group membership is modified using deltas only. Implemented custom data joining solution using SAP MaXware DSE product Leveraged MaXware product strengths to join data based on complex business rules. Created customized reporting solution using both scripts and integral product assets. Technologies used during this period: Visual Studio 2005 VB.Net Windows scripting PERL scripting ADSI Batch scripting LDAP HTML Java Script CSS CGI SQL Critical Path Meta-Directory Critical Path Directory Server SAP MaXware DSE Open DSE Microsoft Active Directory Microsoft Exchange
12/05 - 05/06       SolarWinds.Net       Software Developer - Northwest Arkansas Development Team
Focused development on new product line, to correspond with the use of the .Net 2.0 framework. Created robust multi-threaded windows services used to monitor and process various network related metrics. Converted existing code from the Microsoft .Net 1.1 framework to the .Net 2.0 framework. Ensured all code met all organizational design practices and standards. Designed a framework to ensure the product would allow for "Plug-In" based extensions. Created the standard "Plug-In" design, used to build the product "Plug-Ins". Designed and developed a new interface and logic for the installation and configuration process. Provided training and mentoring to junior team members. Technologies used during this period: Visual Studio 2003 Visual Studio 2005 VB.Net ASP.Net SQL Server 2000 SQL Server 2005 VB6 Classic ASP
08/05 - 12/05       Wal-Mart Stores, Inc.       Systems Engineer - Threat Research and Analysis Team
Researched possible internal threats, external threats, exposures, and security breaches. Designed and developed utilities to combat various security concerns / issues. Designed and developed various utilities to find and retrieve data / file information. Designed reporting solutions to display certain information in a management friendly format. Technologies used during this period: Visual Studio 2003 Visual Studio 6.0 DevPartner Studio C++ VB6 Win32 APIs Standard Template Library SQL XML Windows scripting Batch scripting EnCase
05/04 - 08/05       Wal-Mart Stores, Inc.       Systems Engineer - Security Architecture Team
Primary customer liaison with internal covered entities for Health Insurance Portability and Accountability Act (HIPAA) compliance project. Responsibilities include: Providing guidance and answers to HIPAA Security questions and compliance as it relates to internal policies, standards, and procedures. Interfacing with internal and external legal counsel. Working with internal auditors. Driving the resolution of any issues. Reporting to Privacy Official and Security Official on project status and issues. Integral part of the team that designed and performed the risk assessment and then generated the risk mitigation recommendations to ensure compliance with HIPAA. Participated in the development of a framework that was used to define the security best practices to follow during system evaluations. Performed system and software security analyses using the defined framework. Developed a multi-threaded windows service, designed to assist with identification and management of windows devices. Created Java class used to deteremine appropriate Active Directory domain controller to handle a specifc authentication / authorization request, used during initial login to an internal web portal that was accessed by over 1,000,000 users. Technologies used during this period: Visual Studio 2003 Visual Studio 6.0 DevPartner Studio C++ VB6 Standard Template Library (STL) Win32 APIs SQL XML Windows scripting Batch scripting JAVA JNDI
10/02 - 05/04       Wal-Mart Stores, Inc.       Systems Engineer - Global Directory Engineering Team
Lead for this team as it supported the Meta-Directory and Directory infrastructures and the data joining processes. Continuous communications with customers to ensure that the data in the directory met their needs and that the all issues were resolved in a timely manner. Main point of contact for all contractors working on the Global Directory system. consisted of multiple Critical Path Meta-Directory and Directory Servers. Trouble shot any identity or access related issues. Updated data join rules as discrepancies were discovered or as business rules changed. The customer facing directory contained over 1,000,000 user entries. The data join rules processed tens of thousands of changes daily. Project\Technical Lead for the Meta-Directory project. Assumed project manager role for Wal-Mart on this project while acting as the technical lead. Communicated with all stake holders on project issues, updates, and progress. Direct responsibility for all assigned personnel resources, associates and contractors. Ensured project milestones were completed as scheduled or schedule modifications were communicated to all parties involved in the project. Ensured all project documentation was completed to defined standards. Possessed final say for all technical implementation and data joining decisions. Data joined from multiple, worldwide, data sources based on extremely complex business rules. Custom data processing and manipulation scripts were created to facilitate the complex business rules. The final product was a Meta-Directory infrastructure that was redundant and highly available that supports 24/7 worldwide operation. Project\Technical Lead for the directory used by an internal web portal project. Project Management responsibilities: Communicated with all stake holders on project issues, updates, and progress. Direct responsibility for all assigned personnel resources, associates and contractors. Ensured project milestones were completed as scheduled or schedule modifications were communicated to all parties involved in the project. Technical Lead Responsibilities: Defined correct processing of business rules as defined for the portal project. Designed the directory structure that housed the portal related identity data. Architected all data joining processes required to keep the portal identity data up to date. This project was executed in parallel with the Meta-Directory project. Designed, developed, and implemented a secure Windows authentication mechanism for internal web applications. Designed, developed, and implemented a secure process for synchronizing Novell passwords, used by an internal password management application. Technologies used during this period: Visual Studio 6.0 C++ Visual Basic ADSI Win32 APIs Standard Template Library (STL) Windows scripting Perl scripting Batch scripting LDAP JAVA JNI JNDI Java RMI OpenSSL Critical Path Meta-Directory Critical Path Directory Server Tivoli Access Manager Tivoli Directory Server (SecureWay) Microsoft Active Directory Microsoft Exchange
04/02 - 10/02       Wal-Mart Stores, Inc.       Senior Systems Programmer - Workstation Security Engineering Team
Led this team while it provided technical support for AV software, settings, and updates. Continuous communications with customers to ensure that any virus scanner related issue was resolved in a timely manner. Architected and then implemented a process that deployed AV signature updates worldwide, 100,000+ devices, in a defined time frame; based on threat severity. Technical lead for any virus / virus scanner related issues. Designed, developed, and deployed a Windows user account provisioning application. User provisioning was based on defined business rules. User accounts were created, modified, or disabled user accounts in NT 4.0 and Active Directory Domains. Application designed to allow for easy migration from NT4 domains to an Active Directory domain structure. Member of the Incident Response team. Technologies used during this period: Visual Studio 6 C++ Visual Basic Win32 APIs LDAP ADSI SQL Standard Template Library (STL) Windows scripting Batch scripting
03/00 - 04/02       Wal-Mart Stores, Inc.       Senior Systems Programmer - Security Administration Team
Lead on project to provide a robust solution for virus protection on 100,000+ Windows devices. Member of the Incident Response team. Performed evaluations of Windows systems to ensure that all security requirements were met. Designed, coded, and implemented Win32 applications used to enforce company policies. Planned, developed, and implemented standard Component Object Model (COM) servers and COM DLLs for use in Web based applications. Designed, developed, and implemented a Java based reporting solution used to notify personnel about new and updated information concerning viruses. Shared responsibility for determining security and system settings for Windows 2000 and Windows XP desktop Operating Systems. Created solutions used to facilitate installations of software packages without expanding basic user permissions on Windows workstations. Provided Windows related technical assistance to various teams as required to solve stubborn issues. Technologies used during this period: Visual Studio 6.0 C++ Visual Basic ASP JavaScript Java HTML Win32 APIs COM / COM+ ADSI Standard Template Library (STL) Active Template Library (ATL) Microsoft Transaction Server (MTS) Windows scripting Batch scripting
04/98 - 03/00       Wal-Mart Stores, Inc.       Programmer - Security Administration Team
Member of a two person team that developed and implemented a multi-threaded windows service used to deter unauthorized modification or addition of software initially deployed on 20,000+ workstations. Member of the Incident Response team. Performed evaluations of Windows systems to ensure that all security requirements were met. Designed, developed, and implemented Win32 software that enforced IT security policies. Assisted with deployment of Windows NT 4.0, by providing administration, scripting, and programming support to the rollout team. Provided Windows related technical assistance to various teams as required when solving stubborn issues. Provided support to internal and external auditors while performing information system audits on Windows systems. Performed Windows NT 4.0, Novell 3.x, and Novell 4.x access troubleshooting and account administration. Technologies used during this period: Visual Studio 6.0 C++ Visual Basic ASP JavaScript HTML LDAP Win32 APIs ADSI Batch scripting Standard Template Library (STL) Active Template Library (ATL) Microsoft Transaction Server (MTS) C on HP-UX Shell scripting
Education
Bachelor of Science Degree in Computer Information Systems/Business Administration
Columbia College - Rolla, Missouri
Professional Training and Certifications
CISSP - Certified Information Systems Security Professional
Professional Affiliations
Member - Information Systems Security Association
Founding Member - Northwest Arkansas Chapter, Information Systems Security Association
Member - International Information Systems Security Certification Consortium, Inc.