Mark Allen Earnest
mark@mystikos.org
Career Summary:I began my career as a Systems Programmer with The Pennsylvania State University's Administrative Information Services department. During my tenure there I was tasked with the installation, configuration, and maintenance of various zOS utilities and software packages. Over time, my role grew to include security architecture and development duties, where I designed and programmed several authentication/authorization related programs. My primary project was serving as the technical and development lead for Hydra, which is the University's secure DCERPC client/server framework for web based access to mainframe data and business logic.
In 2003 I was selected along with 9 other colleagues to form a new department called Emerging Technologies. We were tasked with investigating, prototyping, and aiding in the implementation of new technologies within the university. My role in this group has centered around security architectures involving SAML, PKI, Kerberos, XACML, and other related technologies. I served as the technical lead on projects such as the implementation of a university-wide web single signon system and inter-institutional federated identity management system. Most recently I co-designed and developed a SAML/PKI based identity management and access control architecture for Lionshare, a multi-million dollar peer to peer academic file-sharing application funded by the Mellon Foundation. I also provided security architecture consultation to various groups around the University and gave security related presentations nationally.
In September of 2006 I accepted a job as a consultant in the Identity Management Practice of Entology Inc. My role there has been to provide consulting support for Oracle Identity Manager, Oracle Access Manager, and various other security and provisioning related software tool to our clients. I have served as the technical lead on several large scale deployments. I have also done significant development against Oracle Identity Manager's API as well as the IDXML Web Services and Identity Event Plugin interfaces of Oracle Access Manager.
Technical Skills Summary:- Operating Systems: Solaris (7, 8, 9, 10), AIX (4.3.3, 5.0, 5.1, 5.2), Linux (all flavors), zOS, Windows 2000/XP/2003, OS X, and OpenBSD
- Programming Languages: C, Java, Perl, x86 Assembly, s/390 Assembly, JCL, XHTML/CSS, and REXX
- Protocols: DCE-RPC, SOAP, IDXML, 802.11, GSS-RPC, HTTP, NCPASS-TLI, and SASL
- Tools: Eclipse, Netbeans, Visual Studio, Nagios, VMWare Server
- Security Technologies: SAML, SASL, Kerberos, PKI, XACML, LDAP, DCE, SecurID, Biometrics, general cryptography, and federated identity management
- Servers: Sun One Directory Server, Oracle Internet Directory, Microsoft Active Directory, OpenLDAP, Tomcat, JBoss, BEA WebLogic, Oracle Application Server, Oracle Database 10g.
- Identity Management Applications: Oracle Identity Manager (9.0.1, 9.0.3), Oracle Access Manager, Internet2 Shibboleth, and UMich CoSign
- Mainframe Specific Technologies: FDR, ISPF, TSO, Natural, Adabas, Syncsort, NCPASS, and MXI
Entology Inc., 9/2006 ~ Present
Consultant - Identity Management Practice
My role at Entology is to serve as an Identity Management consultant focusing on Oracle's Identity Manager product (previously Thor Xellerate) and Oracle Access Manager (previously Oblix CoreID). During this time I have served as a Java developer and Oracle Access Manager consultant for a leading Pharmaceutical firm, as well as technical lead and developer on two large scale Oracle Identity Manager deployments
- Implemented a full life-cycle Provisioning system for Paetec Communications, utilizing Oracle Identity Manager. Directly responsible for the architecture and design process, as well as the overall implementation. Led a team of two developers on this engagement and served as the day-to-day lead and project manager for the engagement.
- Implemented a full life-cycle Web Services infrastructure for a leading Pharmaceutical firm, utilizing Oracle Access Manager.
- Developed several Identity Event Plugins to extend Oracle Access Manager's workflow functionality.
- Implemented password management functionality in OAM for the firm's largest client-facing application suite.
- Developed numerous "custom" connectors to backend systems, directories, and databases.
- Experienced in crafting Proof-of-Concept (POCs) builds to ensure the success and practicality of the Oracle Identity Management Suite.
- Experienced in the installation and configuration of OIM server.
- Experienced with cross-system identity mapping and reconciliation to OIM identity repository database.
The Pennsylvania State University, 1/2003 ~ 9/2006
Lead Systems Programmer - Emerging Technologies
My role in Emerging Technologies has been primarily security architecture research and development. I worked with many departments within Penn State both part of central IT and academic to develop and implement security architectures. I served as the technical lead on both the University wide single sign on implementation and our inter-institutional federated identity management project.
- Investigated and prototyped Penn State's unified web single sign on system
- Both aided in the development of, and led Penn State's implementation of Shibboleth: a SAML based federated identity management system created by Internet2
- Designed and built a SAML/PKI based identity management and access control architecture for Lionshare, a Mellon Foundation funded, peer 2 peer filesharing application
- Prototyped and developed several PKI infrastructure projects, as well as multiple factor authentication projects
- Active developer on several open source applications and libraries, including my own web log application focused on role based authorization and support for enterprise authentication systems
- Aided in the creation of a Shibboleth based, privacy-centric authentication/authorization infrastructure for the Penn State / Napster partnership. This architecture became the standard with which Napster interacts with Universities
- Responsible for equipment purchases totaling roughly $50,000 (servers, software, bladecenter)
- Responsible for administration of testing and production servers (IBM, Dell, & Sun) running Linux, AIX, Solaris, and Windows 2000/2003
- Responsible for administration of departmental IBM Bladecenter consisting of JS-20 and HS-20 blades
- Provided consulting on security related topics (SAML, authentication, authorization, PKI, secure RPC, Kerberos, etc) to various departments within Penn State, as well as presented on these topics locally and nationally
- Active presenter at Internet2 Member's Meetings and Campus Architecture & Middleware Planning workshops
- Participated in annual NIST/Internet2 PKI Research & Development Workshop
The Pennsylvania State University, 3/2000 ~ 1/2003
Senior Systems Programmer - Administrative Information Services
I was originally hired as a systems programmer tasked with maintaining Penn State's administrative and student information mainframe system. Over time my role grew to include software development and architecture development. In addition to both developing and porting security related libraries and applications to the IBM zOS operating system, I was responsible for the development and porting of the DCERPC based client/server architecture used for web based access to the University's mainframe housed administrative data and business logic.
- Lead development and porting of DCERPC based client/server framework for web based access to mainframe data, integrating Natural, Smalltalk, & DCE
- Developed libraries for Unix, Windows, and Java to allow two factor authentication from web applications using RSA SecurID tokens against PassGO's NCPASS product
- Aided in Disaster Recovery planning
- Ported several utilities to zOS and zOS Unix including PGP
- Responsible for installation, configuration, and maintenance of several zOS utilities including CA FDR, SyncSort, and MXI
- Acted as primary Unix/Linux support and consulting contact within the department as well as primary C developer
As a student at Penn State University I held several part time and wage payroll jobs with the University. At Penn State New Kensington I worked as a helpdesk consultant, assisted in computer lab setup and wiring, and redesigned the campus website. At University Park, I worked as a Mainframe Operator where I was responsible for processing output, running batch jobs, and loading magnetic media.
Outside of my career, I spent several years volunteering as a certified Field Team Leader and one year as the team commander for the Centre County Sheriff's Office Search and Rescue Team. Today I remain active as the webmaster and IT consultant handling all of the team's electronic communications needs (mailing lists, SMS callout, etc.)
Finally, I was one of the original members of the Penn State Linux User's Group and gave many presentations at meetings while I was at Penn State.
Education:
I graduated High School in 1996 and enrolled at the Pennsylvania State University later that year. After attending classes full time for three years I was hired by the University and have been sporadically taking classes part time since then. At my current rate of 3 credits a semester I will have my Bachelors Degree in 2008.
- Deer Lakes Jr/Sr High School: Graduated 1996
- The Pennsylvania State University: Bachelor of Science - Organizational Leadership: Anticipated Graduation 2008
References and salary history available upon request