SUMMARY

• Recognized Security and Grid Computing Specialist with 15+ years experience.
  
• Globus Alliance Lead Security Architect and Coordinator; caBIG's and ESG's Lead Security Architect; Security Consultant with many DOE, NSF and NIH/NCI projects.
• Author of numerous proposals that provide multi-million dollar project-funding from DOE, NSF & NIH/NCI.
  
• Program committee member, presenter, invited speaker, contributor, author and reviewer for many conferences, workshops, journals, and funding agencies. PhD&MS student mentor and advisor.

• Thorough understanding of the high-demanding security requirements within the academic Grid environments as well as the financial industry (Wall Street, J.P. Morgan and Citibank). Former Chief Architect of IBM’s flagship enterprise-level authorization framework product.
  
• Inventor, author and contributor of various influential security protocols and standards at IETF, Open Group, OASIS, and OGF.
  
• Resume: http://franks.fastmail.fm/franks-resume.html
  References: http://franks.fastmail.fm/franks-refs.html
  Presentations: http://franks.fastmail.fm/franks-pres.html

EDUCATION

EXPERIENCE

• Globus Alliance Lead Security Architect and Coordinator; caBIG's Lead Security Architect; Security Consultant with many DOE, NSF and NIH/NCI projects (GridShib, CDIGS, SciDAC, ESG, EGEE, TeraGrid, OSG, NEESGRID, LSST, Orion, caBIG).
• Designing and overseeing the open source Globus Toolkit (GT) development as lead Security Architect. Responsible for GT's innovative and sophisticated security implementation, which includes a pluggable and extensible authorization framework that supports different attribute and authorization assertion formats, and delegation of rights. Ensuring that GT conforms to security-related industry standards like WS-Security, PKI, X509/PKIX, SAML, XACML, and Shibboleth.
  
• Author of numerous proposals that provide multi-million dollar project-funding from DOE, NSF & NIH/NCI.
  
• Program committee member, presenter, invited speaker, contributor, author and reviewer for many conferences, workshops, journals and funding agencies. PhD&MS student mentor and advisor.

• Designed and implemented Identifier Services Framework to assign globally unique and resolvable identifiers to bio-medical data-objects for caBIG cancer-grid project based on CNRI's Handle System and conforming to OGF's WS-Naming standard.
• Inventor, author and contributor of various influential security protocols and standards (OASIS’ WS-Security, SAML, XACML, and WS-EX, OGF’s OGSA Architecture, Security Basic Profile, SAML for OGSI Authorization, WS-Naming)

• Consulted for major financial industry companies as well as security-related product companies. Architecture/design/code reviews, architecture/ design proposals, PKI/Kerberos deployment issues, designing/coding of secure audit framework.

• Responsible for architecture, design and development of the security infrastructure for the Eazel Services on Linux Client, Linux/Apache and Solaris/WebLogic/Oracle, deploying username/password and public key client-authentication over SSL, with a sophisticated authorization infrastructure on server to accommodate millions of subscribers and ever changing product features.

• Designed and developed system management prototype for Linux clients that used Perl-scripts that were dynamically downloaded on demand. The goal was to provide a task-oriented system management solution for novice Linux users.

• Responsible for Eazel’s Electronic Commerce implementation that deployed outsourced payment services; interim manager of the services engineering group; point person for legal issues concerning privacy and encryption; Eazel survival team member.

• Architected and designed Internet security products for start-up DASCOM. Critical contributor to product marketing strategy and business plans that made the products and company a success and ultimately led to the acquisition of DASCOM by IBM in 1999.

• Designed and invented a fundamental part of the breakthrough technology underlying DASCOM’s authorization framework product, which is now known as Tivoli/IBM’s Policy-Director/Access-Manager.

• Authored security standards related to PKI, SSL, S/MIME, and Kerberos/DCE that are published by the Open Group (X/Open) and the IETF (DCE RFC 68.4 Public Key Certificate Login (pkinit), Open Group's Authorization (AZN) API). Designed parts of CORBA security product that features interoperability between different ORBs and protected traced delegation with manageable policy administration. Designed distributed audit framework based on XML/XSL. Acknowledged specialist in the security field; presenter at security Conferences and author of articles in security trade journals.

• Designed and developed security technology in Tivoli’s security architecture group. Consulted with a select few of IBM’s biggest customers.

• Technical-Lead in pre- and post-sales engagements with Fortune 500 customers (Chase, BofA, FirstUSA, AT&T, State of Cal., Wells Fargo, Canon, T. Row Price, KLM, National Labs, Telstra, etc.), resulting in multi-million dollar sales.

• Presented IT industry developments to JPM’s management, managed relationships with technology vendors and standards organizations, represented JPM at the Object Management Group (OMG) and the Open Group (X/Open). Presented Corporate IT vision and direction to JPM internally, key vendors, and industry analysts. Negotiated multimillion dollar contracts with vendors.

• Worked with JPM’s Enterprise Architecture group to define the bank’s Technical Architecture based on 3-tier and Business Services/Objects. Investigated and introduced advanced technologies (Forté, Orbix, Java).

• Chaired team to adopt a standards based, middleware infrastructure for the enterprise (DCE/Encina vs. Tuxedo). Chaired team to evaluate IBM/Tivoli’s TME-10 and CA’s Unicenter TNG for enterprise-wide application, system and network management.

• Tested/investigated distributed computing technologies (CORBA, OO-DCE, Encina, OpenDoc); was OMG contact person; beta tested HP’s ORB-Plus; organized advanced C++ course.

• Was responsible for the design and development of generic network abstraction layers for system management and operation services, security services, journaling and transactional services. Served as derivatives business relationship manager.

• Managed the development of a prototype of a nationwide information system for the manufacturing industry (MANUNET)

• Actively participated on behalf of the institute in the National Information Infrastructure (NII) development efforts of Singapore’s IT2000 plan. Set up Gopher, WAIS and WWW information services, and an OSF/DCE project for the institute and university.

• Initiated and managed a project for a real-time trading system application using Object- Oriented Design/Development

• Organized and conducted courses on object oriented programming techniques, Smalltalk, and C++.

• Supervised team on sections of a multimillion dollar software project for a container shipping company, using Sun, C++ and Sybase. Acted as technical consultant for C++, Sybase and artificial intelligence software.

• Managed staff in social and educational programs servicing 50,000 Laotian refugees; counseled individual refugees; conducted camp-wide survey with staff of 60 para-social workers; taught English, mathematics, and political science classes.

• Directed $5 million project for design, construction, and testing of a linear accelerator for light ions; presented results at conferences and in leading scientific journals. Conducted research at Univ. of California, Berkeley, and Univ. of Frankfurt, Germany.

LANGUAGES