Resume of Michael W Lucas Jr


St. Clair Shores, MI
contact via: mwlucas at blackhelicopters dot org

Summary:

Lead network/security engineer for high-availability systems
Author of critically-acclaimed OS, networking, and security books
Works with clients to architect and implement cost-effective solutions

Technical: I'm a network architect and systems administrator with extensive experience in designing, pricing, proposing, and implementing life-sustaining, manufacturing-sustaining, and mission-critical networks and Internet-based systems. My years of hands-on experience as a network engineer and systems administrator give me an excellent grasp of how these systems work in the real world, allowing me to make solid recommendations for solutions. I am extremely flexible, and can fit into any networking position where correctness and reliability are important.

Projects: I am an experienced project lead with a history of success in both implementation and migration projects.

Management:I have led independent, results-oriented, client-driven technical support, project, and operational teams at many different companies.

Sales:I work with sales staff and clients to define project technical requirements, write proposals for hosting solutions I architect to meet those requirements, and help present the completed solution to the client.

Educational: I have a college degree and both take and teach training courses. In August 2003 I received the Certified Information Systems Security Professional certification, the penultimate security certification.

Additional: I write articles for a variety of technical publications, and have authored five technical books with two more underway. A credits list is available separately.

Condensed skills list:

  • Solutions architecture
  • Network security
  • Sales proposals
  • Firewalls
  • Intrusion response
  • UNIX (since 1985)
  • Server-grade Microsoft operating systems
  • Networking hardware & protocols
  • ISP Infrastructure
  • Corporate Network Infrastructure Software
  • Documentation
  • Mentoring and Training

    Detailed Work History

    1-2006 to present:

    Network Manager, Western Hemisphere Global Datacenter, GKN Driveline:

    Managed global datacenter network facilities that provided services globally to 24x7 just-in-time manufacturing operation with plants throughout North and South America. Technical lead for network team. Responsible for MPLS network support throughout North and Central America. Work closely with outside security vendors to manage firewalls and routers.

    Major Projects:

    All projects listed were designed and implemented by myself.

  • ANX connectivity migration, requiring close work with internal EDI team and every external business partner.
  • Brought Driveline North America network into compliance with global standards, requiring: core firewall replacement, internal routing redesign, and security policy auditing. As part of this, assessed applications for compliance to global standards.
  • Remediation results of external security auditing.
  • Disaster recovery tests.
  • Modernization of network and server monitoring systems.
  • Migration of Web proxy services to global corporate standard.
  • Migration of DNS services to global corporate standard.
  • Identify and remediate network performance problems across the Americas.
  • Developed live failover systems for remote plant connectivity to central EDI systems.
  • Complete overhaul of datacenter physical facilities.
  • Complete replacement of external Internet connectivity.

    Security skills utilized:

  • security auditing
  • packet analysis
  • Netflow
  • Checkpoint

    Operating systems:

  • Windows 2003
  • Windows 2000
  • AIX
  • FreeBSD
  • Linux
  • Solaris
  • IRIX

    Network Skills utilized:

  • TCP/IP
  • SNMP
  • BGP
  • Netflow
  • Samba
  • standard Internet protocols (SMTP, HTTP, DNS, etc).
  • Cisco configuration
  • VLAN/802.1q
  • 802.11
  • Cisco
  • MPLS

    Application skills utilized:

  • Websense
  • Squid
  • Nagios
  • Sendmail
  • BIND
  • Apache

    Programming languages used:

  • Perl
  • UNIX shell

    3-2003 to 1-2006:

    Network Security Architect, LogicaCMG:

    There was no actual employer change; my employer, Great Lakes Technologies Group, was purchased by LogicaCMG.

    Architected hosting environment to meet or exceed Big Three automotive company requirements for confidentiality, integrity, and availability. Technical lead for support team, sole third level technical escalation. Developed accurate services cost model, contributing to rapid growth and expanding profit. Prepared technical aspects of sales proposals. Integrated diverse platforms from old Great Lakes Technologies Group network into global LogicaCMG network. Managed high-response network operations area. Implemented a wide variety of network security technologies on many different platforms.

    Security skills utilized:

  • penetration testing & security auditing
  • packet analysis
  • intrusion response
  • Checkpoint
  • IPFilter

    Operating systems managed:

  • Windows NT
  • Windows 2000
  • Windows 2003
  • BSD
  • AIX
  • Solaris 8,9
  • Linux

    Network skills utilized:

  • TCP/IP
  • SNMP
  • BGP
  • Netflow
  • Samba
  • standard Internet protocols (SMTP, HTTP, DNS, etc).
  • Cisco configuration
  • VLAN/802.1q

    Application skills utilized:

  • MS Exchange 2000
  • MS IIS 4.0/5.0/6.0
  • BIND
  • Sendmail
  • Apache
  • WebSphere

    Database skills utilized:

  • MS SQL server 2000
  • Oracle 8i
  • MySQL

    Language skills utilized:

  • Perl
  • shell
  • C/C++ (reading, not writing)

    5-2001 to 3-2003:

    Great Lakes Technologies Group/LogicaCMG:
    Contracted to Covisint

    10-2002 to present: Level 3 Support, Covisint Problem Solver team

    Responsible for database and server troubleshooting of Problem Solver application. Worked with a variety of automotive suppliers of various tiers to resolve technical problems with custom Covisint application.

    Skills utilized:

  • Solaris 2.8
  • SQL
  • network troubleshooting

    5-2001 to 10-2002: Auction Lead Technician

    Responsible for technical operations of Oracle Business Exchange at Covisint. This system handled purchasing auctions for Ford Motor Company and their suppliers. Responsibilities expanded to include technical operations of Covisint's Commerce One auctions, which have similar reliability and security requirements for DaimlerChrysler and General Motors auction procurement services.

    Time was divided evenly between system/server/application maintenance and client security requirements. As application confidentiality, integrity, and availability were absolute requirements, I spent large amounts of time evaluating access controls and maintaining the Covisint Application Security Review documents.

    Skills utilized:

  • Oracle Application Server
  • Solaris 2.6, 2.8
  • shell scripting and Perl
  • Microsoft Windows 2000
  • Microsoft SQL Server
  • basic SQL
  • Mentoring of support staff

    2-2000 to 5-2001:

    Network Architect, Great Lakes Technologies Group

    Managed network security to meet or exceed Ford, GM, and DaimlerChrysler developer requirements. Integrated diverse platforms into a single network. Worked with development teams to provide resources. Managed, mentored, and trained help desk and support staff to create state-of-the-art network support center.

    Security skills utilized:

  • penetration testing & security auditing
  • packet analysis
  • Checkpoint
  • IPFilter

    Operating systems managed:

  • BSD
  • Windows NT
  • Windows 2000
  • AIX
  • Solaris 8

    Network skills utilized:

  • TCP/IP
  • SNMP
  • BGP
  • Samba
  • standard Internet protocols (SMTP, HTTP, DNS, etc).
  • Cisco configuration

    Application skills utilized:

  • MS Exchange 2000
  • MS IIS 4.0/5.0
  • BIND
  • Sendmail
  • Apache

    Database skills utilized:

  • MS SQL server 7.0
  • Oracle 8i
  • MySQL

    Language skills utilized:

  • Perl
  • shell
  • C (reading, not writing)

    9-1999 to 2-2000:

    Great Lakes Technologies Group:
    contracted to GMAC/Argonaut Relocation

    General network support in migrations caused by GMAC buyout. Migrated Solomon financial databases from Novell 3 to NT 4.0. Designed and implemented internal file-system security and permissions.

    Skills utilized

  • Windows NT security
  • TCP/IP
  • Solomon
  • MS Exchange 5.5

    4-1997 to 9-1999:

    President, Exceptionet

    Consulted on intrusion response and Internet security for small to medium-sized businesses. Additionally, provided guidance on network and system management upon request.

    Clients included Lionel Trains, ClarkHill PLC, BASF, the Great Lakes Technology Group, Cardio-Vascular Clinical Associates, American Community Mutual Insurance, The Annis Group, and Verio Michigan.

    Security skills utilized:

  • penetration testing & security auditing
  • packet analysis
  • intrusion detection and response
  • IPFW
  • FWTK
  • Raptor
  • Checkpoint
  • Gauntlet

    Operating systems managed:

  • BSD
  • Windows NT 4.0
  • Linux
  • Solaris 2.6
  • HP/UX

    Network skills utilized:

  • TCP/IP
  • BGP
  • Samba
  • standard Internet protocols (SMTP, HTTP, DNS, etc).
  • Cisco configuration

    Application skills utilized:

  • MS Exchange 4.0-5.0
  • MS IIS 4.0
  • BIND
  • Sendmail
  • Apache
  • Radius

    Database skills utilized:

  • MS SQL server 6.0-7.0
  • Informix

    Language skills utilized:

  • Perl
  • shell

    5-1996 to 4-1997:

    Senior Network Engineer, Apex Global Information Services

    AGIS was a nationwide Internet backbone with several hundred T1 customers who required 24x7x365 service. I was the midnight shift manager and network security officer, reporting to only the Chief Technologist.

    Duties included: problem solving in LAN and nationwide WAN environments, using a variety of hardware, software, and protocols. Assisted enterprise clients resolve Internet-related issues, from ambiguous "network slowness" to intrusion response.

    Responsible for protecting the AGIS network from concentrated, persistent intrusion attempts from August 1996 until April 1997.

    Senior systems administrator for all UNIX systems. Trained all technical employees. Wrote all corporate technical, training, and customer manuals. Responsible for off-hours maintenance. Final point of escalation for customer issues during midnight hours.

    Security skills utilized:

  • Securing UNIX hosts on the open Internet
  • Intrusion recovery

    Operating systems managed:

  • BSD
  • Solaris
  • SunOS
  • Windows NT 4.0

    Network skills utilized:

  • TCP/IP
  • BGP
  • OSPF
  • standard Internet protocols (SMTP, HTTP, DNS, etc).
  • Cisco configuration

    Application skills utilized:

  • BIND
  • Sendmail
  • Apache
  • Radius

    Language skills utilized:

  • Perl
  • shell

    10-1995 to 5-1996:

    Network Engineer, Apex Global Information Services

    Started in phone support. Gradually assumed greater and greater responsibilities, culminating in my promotion to Senior Network Engineer.

    Skills utilized

    Telephone company relations.

    Responsible for resolution of customer problems.

    3-1990 to 10-1995:

    Library Technician, Okland University

    Responsible for cataloging books and periodicals. Maintained large cooperative database system (NOTIS) requiring complete accuracy. Assisted in computer and terminal maintenance. Used German, Russian, and Spanish language skills to properly catalog materials.

    Organizations:

    USENIX member

    FreeBSD Project committer


    Education:

    CheckPoint Certified Network Engineer, July 2004.

    Received CISSP certification, August 2003.

    Graduated Oakland University in May of 1995, with a BA in English.

    Return to the main page.

    copyright 2003, 2004, 2005 Michael W Lucas Jr. All rights reserved