Aidan Sneyd
Dublin,Ireland
Summary
Accomplished cybersecurity professional with expertise in encryption and cybersecurity standards, strategic thinking in cybersecurity, and cloud-based technologies. Demonstrates strong problem-solving and leadership skills, with a proven track record in programme development and team building. Adept at implementing cybersecurity practices in healthcare and providing consultation on cybersecurity solutions, ensuring compliance with regulations. Career goals include advancing the implementation of innovative cybersecurity solutions to enhance organisational security frameworks.
Overview
10
10
years of professional experience
Work history
Technical Cloud Architect / PM
Crown Prosecution Service (CPS)
11.2023 - 07.2024
- Company Overview: CPS have embarked on an ambitious Finance Evolution Programme with multiple streams of application activity largely based around Oracle Fusion ERP and a number of satellite applications covering areas as diverse as Supplier Portal P2P, Payroll, Analytics, Fees Payments as well as a broader Service Desk replacement along with a range of other streams.
- Engagement with Oracle Account and SME Teams as well as CPS internal Architecture / Cybersecurity to develop a solution for an MFA enabled deployment of Fusion Supplier Portal for up to 4000 external Suppliers employing unsecure EUDs.
- Identification and development of suitable waterfall plan for the implementation of Supplier Portal MFA in the existing Oracle OCI Cloud tenant CPS currently have deployed. Obtain Programme Board signoff for defined solution and budget.
- Leading design and delivery activities post planning for an off site Bulk Print Solution for CPS via the incumbent suppliers Konica / Minolta and SPS involving complex SFP based file transfer from the CPS estate to SPS AWS file store and onwards to AZURE based Digidocs end user facing application.
- Draft and peer review Oracle Fusion Supplier Portal P2P Solution to include both Oracle OCI Tenant design components as well as Cybersecurity Services (WAF, RBAC, LBAC, NGFW, DDoS and Whitelisting plus Cloud Guard etc.). HLD then underwent peer review with Architecture and CyberSecurity / emerging DevSecOps related functions as well as Oracle as key vendor including OCI Tenant Logical Design review and Landing Zone uplift.
- Detailed assessment of OCI Console for IDCS and IAM Domains plus Authenticator App selection and Functions.
- Author CPS wide Oracle OCI SaaS and PaaS HLD documentation covering entire Oracle OCI Tenant and multi-Cloud integration to AZURE, AWS and On premise.
- Provision of Cloud consultancy specific to Oracle OCI as well as MS AZURE Integration with IdM and federation A part of the focus.
- Analysis and communication of Oracle and 3rd party discovery mapping toolsets & 'Observability' strategy defn.
- Oracle Fusion ERP and Broader Service Management Process discovery and facilitation of revised ITIL framework.
- Assurance review of new SIEM and SOC Designs based on Fortinet FortiSIEM and FortiSOAR product offerings.
- CPS have embarked on an ambitious Finance Evolution Programme with multiple streams of application activity largely based around Oracle Fusion ERP and a number of satellite applications covering areas as diverse as Supplier Portal P2P, Payroll, Analytics, Fees Payments as well as a broader Service Desk replacement along with a range of other streams.
Technical Cloud Architect / PM
Crown Prosecution Service (CPS)
11.2023 - 07.2024
- Company Overview: CPS have embarked on an ambitious Finance Evolution Programme with multiple streams of application activity largely based around Oracle Fusion ERP and a number of satellite applications covering areas as diverse as Supplier Portal P2P, Payroll, Analytics, Fees Payments as well as a broader Service Desk replacement along with a range of other streams.
- Engagement with Oracle Account and SME Teams as well as CPS internal Architecture / Cybersecurity to develop a solution for an MFA enabled deployment of Fusion Supplier Portal for up to 4000 external Suppliers employing unsecure EUDs.
- Identification and development of suitable waterfall plan for the implementation of Supplier Portal MFA in the existing Oracle OCI Cloud tenant CPS currently have deployed. Obtain Programme Board signoff for defined solution and budget.
- Leading design and delivery activities post planning for an off site Bulk Print Solution for CPS via the incumbent suppliers Konica / Minolta and SPS involving complex SFP based file transfer from the CPS estate to SPS AWS file store and onwards to AZURE based Digidocs end user facing application.
- Draft and peer review Oracle Fusion Supplier Portal P2P Solution to include both Oracle OCI Tenant design components as well as Cybersecurity Services (WAF, RBAC, LBAC, NGFW, DDoS and Whitelisting plus Cloud Guard etc.). HLD then underwent peer review with Architecture and CyberSecurity / emerging DevSecOps related functions as well as Oracle as key vendor including OCI Tenant Logical Design review and Landing Zone uplift.
- Detailed assessment of OCI Console for IDCS and IAM Domains plus Authenticator App selection and Functions.
- Author CPS wide Oracle OCI SaaS and PaaS HLD documentation covering entire Oracle OCI Tenant and multi-Cloud integration to AZURE, AWS and On premise.
- Provision of Cloud consultancy specific to Oracle OCI as well as MS AZURE Integration with IdM and federation A part of the focus.
- Analysis and communication of Oracle and 3rd party discovery mapping toolsets & 'Observability' strategy defn.
- Oracle Fusion ERP and Broader Service Management Process discovery and facilitation of revised ITIL framework.
- Assurance review of new SIEM and SOC Designs based on Fortinet FortiSIEM and FortiSOAR product offerings.
- CPS have embarked on an ambitious Finance Evolution Programme with multiple streams of application activity largely based around Oracle Fusion ERP and a number of satellite applications covering areas as diverse as Supplier Portal P2P, Payroll, Analytics, Fees Payments as well as a broader Service Desk replacement along with a range of other streams.
Director and Cloud Consultant
PhoenixInfraCloud (UK) Ltd.
11.2022 - 08.2023
- Engaged with preliminary discussions and planning with a range of Public and Private Enterprises as well as a number of market Expansion and Digital Transformation programmes (Irish Water, FBD Insurance Ireland and number of UK Public Sector depts.).
Director and Cloud Consultant
PhoenixInfraCloud (UK) Ltd.
11.2022 - 08.2023
- Engaged with preliminary discussions and planning with a range of Public and Private Enterprises as well as a number of market Expansion and Digital Transformation programmes (Irish Water, FBD Insurance Ireland and number of UK Public Sector depts.).
Cloud and AZURE Technical Architect - IT Transformation Team
Xeinadin
08.2022 - 11.2022
- Company Overview: Xeinadin is an effective startup composed of approximately 120 firms across the UK and Ireland delivering a mixture of accountancy, taxation, business process and associated services.
- Core Landing Zone Design/s for the entire AZURE Tenant for all in scope subscriptions and AAD Design for inclusion in overall Tenant HLD.
- Design and migration of legacy Data Platform content via services such as AZURE SQL, Azure Data Factory and related authentication requirements plus security of data in transit from 100 plus external application instances.
- Support M365 and Sharepoint / Intranet programme teams as 3rd level advisory and fault resolution escalation POC.
- Engagement with key external IdP providers such as Okta in support of complex SaaS constellation Multicloud services.
- Engagement with key CISO Partner in the development of Cybersecurity strategy and incident response follow-ups.
- Lead the definition and delivery of enterprise wide MFA across core tenant / domain access via bulk AAD modifications.
- Lead in the accelerated design and delivery of AZURE AVD for VDI desktop delivery as well as Universal Printing.
- Lead in accelerated MDM / MAM Design for Intune as a component of Cybersecurity Strategy.
- Define detailed task content of IT Cloud Programme project planning in support of PM lead/s.
- Identify and engage with 3rd party Cloud Toolset vendors supporting documentation and compliance e.g. Cloudockit.
- Support deployment of initial IaaS application PoCs for VoIP in AZURE.
- Support group entities- possible breach incident investigation and liaison with external security partner vendor (Bridewell).
- Advise on development of AZURE/Cloud service roadmap and revised prioritization of AVD and MDM services.
- Xeinadin is an effective startup composed of approximately 120 firms across the UK and Ireland delivering a mixture of accountancy, taxation, business process and associated services.
Cloud and AZURE Technical Architect - IT Transformation Team
Xeinadin
08.2022 - 11.2022
- Company Overview: Xeinadin is an effective startup composed of approximately 120 firms across the UK and Ireland delivering a mixture of accountancy, taxation, business process and associated services.
- Core Landing Zone Design/s for the entire AZURE Tenant for all in scope subscriptions and AAD Design for inclusion in overall Tenant HLD.
- Design and migration of legacy Data Platform content via services such as AZURE SQL, Azure Data Factory and related authentication requirements plus security of data in transit from 100 plus external application instances.
- Support M365 and Sharepoint / Intranet programme teams as 3rd level advisory and fault resolution escalation POC.
- Engagement with key external IdP providers such as Okta in support of complex SaaS constellation Multicloud services.
- Engagement with key CISO Partner in the development of Cybersecurity strategy and incident response follow-ups.
- Lead the definition and delivery of enterprise wide MFA across core tenant / domain access via bulk AAD modifications.
- Lead in the accelerated design and delivery of AZURE AVD for VDI desktop delivery as well as Universal Printing.
- Lead in accelerated MDM / MAM Design for Intune as a component of Cybersecurity Strategy.
- Define detailed task content of IT Cloud Programme project planning in support of PM lead/s.
- Identify and engage with 3rd party Cloud Toolset vendors supporting documentation and compliance e.g. Cloudockit.
- Support deployment of initial IaaS application PoCs for VoIP in AZURE.
- Support group entities- possible breach incident investigation and liaison with external security partner vendor (Bridewell).
- Advise on development of AZURE/Cloud service roadmap and revised prioritization of AVD and MDM services.
- Xeinadin is an effective startup composed of approximately 120 firms across the UK and Ireland delivering a mixture of accountancy, taxation, business process and associated services.
Cloud Solution Architect – Covid Mitigation Programme
ATOS
Exeter
10.2020 - 03.2021
- Company Overview: ATOS Architecture and Design team largely stood down due to strategic realignment of Exeter University Roadmap for Cloud and 2021 / 2022 objectives.
- With the onset of Covid-19 the University was forced to develop solutions at speed in support of remote learning and accelerate the adoption of Cloud Services in support of said requirements.
- As a member of the Design and Architecture function I led the AZURE AS-IS reviews and TO-BE design including HLDs for Microsoft AZURE focused services.
- Microsoft Cloud Adoption Framework alignment including logical design and Metadata / costs and monitoring analysis.
- AZURE Windows Virtual Desktop (AVD) Service HLD Definition for student and staff remote working requirements.
- AZURE LAB Service HLD definition and stakeholder engagement to support blended onsite and remote learning requirements.
- Alibaba Global Connect CDN Service HLD design and JISC (UK ICT oversight) engagement for China based Students.
- Enterprise architect, BA and business owner engagement for EA development and governance activities.
- Security / Information Governance (IG) team engagement in support of On-Premise LAN /WAN/ Infrastructure refresh.
- Secure Data Research HUB initial design in response to critical new service development (WVD based) with hardened service design and including PEN Testing requirements.
- Assessment of 3rd party Cloud Analysis toolsets such as Cloudockit.
- Provide weekly / ongoing client facing reporting / updates and knowledge transfer.
- Review Service Catalogue and associated application portfolio with a view to AZURE /AWS migration planning from On Premise DCs.
- Support development of NHS DSPT and ISO 27001 based security and information control standards for Research projects.
- Provide guidance re: DevOps adoption and cross functional team instantiation.
- Participate in Kubernetes PoC planning activities.
- ATOS Architecture and Design team largely stood down due to strategic realignment of Exeter University Roadmap for Cloud and 2021 / 2022 objectives.
Cloud Solution Architect – Covid Mitigation Programme
ATOS
Exeter
10.2020 - 03.2021
- Company Overview: ATOS Architecture and Design team largely stood down due to strategic realignment of Exeter University Roadmap for Cloud and 2021 / 2022 objectives.
- With the onset of Covid-19 the University was forced to develop solutions at speed in support of remote learning and accelerate the adoption of Cloud Services in support of said requirements.
- As a member of the Design and Architecture function I led the AZURE AS-IS reviews and TO-BE design including HLDs for Microsoft AZURE focused services.
- Microsoft Cloud Adoption Framework alignment including logical design and Metadata / costs and monitoring analysis.
- AZURE Windows Virtual Desktop (AVD) Service HLD Definition for student and staff remote working requirements.
- AZURE LAB Service HLD definition and stakeholder engagement to support blended onsite and remote learning requirements.
- Alibaba Global Connect CDN Service HLD design and JISC (UK ICT oversight) engagement for China based Students.
- Enterprise architect, BA and business owner engagement for EA development and governance activities.
- Security / Information Governance (IG) team engagement in support of On-Premise LAN /WAN/ Infrastructure refresh.
- Secure Data Research HUB initial design in response to critical new service development (WVD based) with hardened service design and including PEN Testing requirements.
- Assessment of 3rd party Cloud Analysis toolsets such as Cloudockit.
- Provide weekly / ongoing client facing reporting / updates and knowledge transfer.
- Review Service Catalogue and associated application portfolio with a view to AZURE /AWS migration planning from On Premise DCs.
- Support development of NHS DSPT and ISO 27001 based security and information control standards for Research projects.
- Provide guidance re: DevOps adoption and cross functional team instantiation.
- Participate in Kubernetes PoC planning activities.
- ATOS Architecture and Design team largely stood down due to strategic realignment of Exeter University Roadmap for Cloud and 2021 / 2022 objectives.
ICT Transformation / Migration Consultant and Programme Lead (M&A Remote advisory role)
10.2019 - 03.2020
- Programme was placed on hold in mid-March due to COVID-19 uncertainty.
- Engaged to support an M&A review and design process involving a number of in-market and international investment Banks including due diligence, application / technology / partner roadmap assessments.
- Input provided to business case enhancement and likely ICT consolidation requirements under Transition and Transformation.
- The programme activities supported are T&M based and are covered under NDA currently.
- Scope of Work included complete ICT Infrastructure and Applications audit including operational operating model with specific reference to security and transition / transformation planning.
- Future TOM Hybrid Cloud migration and technology refresh planning post market readiness assessment for key Global Cloud and ICT vendor delivery capabilities in country.
- Tactical risk mitigation planning during acquisition and entity consolidation with reference to possible DLP concerns and inter entity data mapping in support of application consolidation and interoperability to achieve 'effect of single organization'.
ICT Transformation / Migration Consultant and Programme Lead (M&A Remote advisory role)
10.2019 - 03.2020
- Programme was placed on hold in mid-March due to COVID-19 uncertainty.
- Engaged to support an M&A review and design process involving a number of in-market and international investment Banks including due diligence, application / technology / partner roadmap assessments.
- Input provided to business case enhancement and likely ICT consolidation requirements under Transition and Transformation.
- The programme activities supported are T&M based and are covered under NDA currently.
- Scope of Work included complete ICT Infrastructure and Applications audit including operational operating model with specific reference to security and transition / transformation planning.
- Future TOM Hybrid Cloud migration and technology refresh planning post market readiness assessment for key Global Cloud and ICT vendor delivery capabilities in country.
- Tactical risk mitigation planning during acquisition and entity consolidation with reference to possible DLP concerns and inter entity data mapping in support of application consolidation and interoperability to achieve 'effect of single organization'.
Datacentre Migration Architect
European Patent Office (EPO)
The Hague
01.2019 - 05.2019
- Company Overview: EPO were in the process of delivering a number of major ICT initiatives one of which was a new Datacentre build in Luxembourg and sister programme for the migration of the application portfolio from Holland to x2 Luxembourg DCs.
- The role was assurance focused across a broad range of activities around DC design and application migration.
- Provided direct support to Programme Director via multi Programme Board covering DC Design, Mainframe Re-platforming and Application Migration Programmes.
- Support Datacentre Design and Migration planning for internal IAAS / PaaS build covering Compute, Networking and Storage functions.
- Largely based on HPE Compute and Storage, Synergy Compute and HPE 3PAR SAN technologies with the segmentation and fabric management provided via Cisco ACI SDN and Cisco NEXUS based core and leaf fabric elements.
- Application portfolio analysis across the core application set (JAVA / JBOSS) hosted on SUSE 12 and Win X Server portfolio applications which were largely COTS in the Wintel environments.
- Linux based application numbers were approx. 1200 and the Windows based application volume was approx. 600 applications.
- Large scale business critical search and analysis applications employed DB2 / Unix, MSSQL /Win as well as MongoDB.
- Migration Planning included all Microsoft System Centre components and related applications / utilities including SCCM / SCOM, AD and ADFS, Exchange, Sharepoint and all MSSQL based services along with MongoDB NoSQL application infrastructure stacks.
- Support the formation of a detailing application wave planning activity for the application set to To-Be Luxembourg DCs.
- Provide Oversight to the SDS (Software Defined Storage) solution based on Scality with approx. 8.4 PB of storage for primary application backups including IBM TSM.
- DR site planning and upgrade requirements including physical facility requirements for power, cooling and racking.
- Engagement with DEVSECOPS teams responsible for SPLUNK / NESSUS and related monitoring products to assure uplift of the CMDB for all in scope CI elements.
- Collaborate alongside Enterprise Architect team in the development of emerging strategies for O365 and developing Kubernetes PoC.
- EPO were in the process of delivering a number of major ICT initiatives one of which was a new Datacentre build in Luxembourg and sister programme for the migration of the application portfolio from Holland to x2 Luxembourg DCs.
Datacentre Migration Architect
European Patent Office (EPO)
The Hague
01.2019 - 05.2019
- Company Overview: EPO were in the process of delivering a number of major ICT initiatives one of which was a new Datacentre build in Luxembourg and sister programme for the migration of the application portfolio from Holland to x2 Luxembourg DCs.
- The role was assurance focused across a broad range of activities around DC design and application migration.
- Provided direct support to Programme Director via multi Programme Board covering DC Design, Mainframe Re-platforming and Application Migration Programmes.
- Support Datacentre Design and Migration planning for internal IAAS / PaaS build covering Compute, Networking and Storage functions.
- Largely based on HPE Compute and Storage, Synergy Compute and HPE 3PAR SAN technologies with the segmentation and fabric management provided via Cisco ACI SDN and Cisco NEXUS based core and leaf fabric elements.
- Application portfolio analysis across the core application set (JAVA / JBOSS) hosted on SUSE 12 and Win X Server portfolio applications which were largely COTS in the Wintel environments.
- Linux based application numbers were approx. 1200 and the Windows based application volume was approx. 600 applications.
- Large scale business critical search and analysis applications employed DB2 / Unix, MSSQL /Win as well as MongoDB.
- Migration Planning included all Microsoft System Centre components and related applications / utilities including SCCM / SCOM, AD and ADFS, Exchange, Sharepoint and all MSSQL based services along with MongoDB NoSQL application infrastructure stacks.
- Support the formation of a detailing application wave planning activity for the application set to To-Be Luxembourg DCs.
- Provide Oversight to the SDS (Software Defined Storage) solution based on Scality with approx. 8.4 PB of storage for primary application backups including IBM TSM.
- DR site planning and upgrade requirements including physical facility requirements for power, cooling and racking.
- Engagement with DEVSECOPS teams responsible for SPLUNK / NESSUS and related monitoring products to assure uplift of the CMDB for all in scope CI elements.
- Collaborate alongside Enterprise Architect team in the development of emerging strategies for O365 and developing Kubernetes PoC.
- EPO were in the process of delivering a number of major ICT initiatives one of which was a new Datacentre build in Luxembourg and sister programme for the migration of the application portfolio from Holland to x2 Luxembourg DCs.
Infrastructure Architect
CGI
Surrey / Leatherhead
06.2018 - 10.2018
- Solution Architect Team member focused on definition of central Government Secure Cloud Service providing IaaS / PaaS services underpinning CPS application hosting and CPS/MoJ/Police secure EMAIL.
- Assurance of Datacentre Design documentation (overall HLD) for VMWARE vSphere / ESXi 6.0 based IAAS / PaaS offering.
- Responsible for HLD and initial LLD requirement analysis and design for complex EMAIL and WEB PROXY migrations to new secure Datacentres.
- Scope for e-mail include PSNP header translation.
- Lead on key vendor engagement (Forcepoint and Fortinet) as well as internal Application and Hosting team design migration.
- Datacentre vendor design review for PSN / PSNP connectivity as well as AZURE / O365 services.
- GDPR data risk assessment for citizen and staff data using the Secure Cloud and secure EMAIL gateways.
Infrastructure Architect
CGI
Surrey / Leatherhead
06.2018 - 10.2018
- Solution Architect Team member focused on definition of central Government Secure Cloud Service providing IaaS / PaaS services underpinning CPS application hosting and CPS/MoJ/Police secure EMAIL.
- Assurance of Datacentre Design documentation (overall HLD) for VMWARE vSphere / ESXi 6.0 based IAAS / PaaS offering.
- Responsible for HLD and initial LLD requirement analysis and design for complex EMAIL and WEB PROXY migrations to new secure Datacentres.
- Scope for e-mail include PSNP header translation.
- Lead on key vendor engagement (Forcepoint and Fortinet) as well as internal Application and Hosting team design migration.
- Datacentre vendor design review for PSN / PSNP connectivity as well as AZURE / O365 services.
- GDPR data risk assessment for citizen and staff data using the Secure Cloud and secure EMAIL gateways.
Solution Architect / Enterprise Architect – Security and Infrastructure
National Grid, UK
01.2018 - 06.2018
- Acted as a member of the Solution Architect group focused on major business critical application migration within the core CNI (Critical National Infrastructure) function for the Electricity Transmission business.
- Core CNI balancing and settlement systems are bespoke applications integrated with broader Corporate application sets in support of end to end business processes internally and interfacing with an extensive market participant network both for supply and demand side interactions.
- Projects included Critical Balancing Mechanism (BM) Application refresh project – Application, RDBMS, Compute and Storage.
- Application API analysis for bespoke application portfolio included complex legacy application estate analyse and migration discovery and planning (32+ inter application interface analysis with multiple protocols per interface).
- Develop the application refresh strategy and HLDs for 3 major CNI hosted applications interfacing the core BM applications.
- This included application stack analysis and rehosting including Infrastructure, RDBMS, OS etc.
- Assurance of Oracle Cloud Team HLD designs to support application migration to OCI for 50+ existing corporate applications based on Oracle RDBMS versions with substantial licensing and operational benefits.
- Review of internal process, architecture model design patterns and documentation templates in support of design and transition activities ongoing and currently in the pipeline for new projects.
- Review of the major 3 DC Infrastructure including onsite / new DC and campus infrastructure as well as inter DC Ciena DWDM based solution for FC and IP services between major sites including DR.
- Initial security policies and procedures review with specific reference to partner connectivity and key vendor remote support capabilities such as the resilience HPE 3PAR SAN inbound 'call home' support capabilities.
- Complex HPE 3PAR SAN storage HLD and LLD design workshops lead HPE SME supported all environments.
- Design participant in refresh solution for internet base IPSEC VPN links and electricity network telemetry system.
Solution Architect / Enterprise Architect – Security and Infrastructure
National Grid, UK
01.2018 - 06.2018
- Acted as a member of the Solution Architect group focused on major business critical application migration within the core CNI (Critical National Infrastructure) function for the Electricity Transmission business.
- Core CNI balancing and settlement systems are bespoke applications integrated with broader Corporate application sets in support of end to end business processes internally and interfacing with an extensive market participant network both for supply and demand side interactions.
- Projects included Critical Balancing Mechanism (BM) Application refresh project – Application, RDBMS, Compute and Storage.
- Application API analysis for bespoke application portfolio included complex legacy application estate analyse and migration discovery and planning (32+ inter application interface analysis with multiple protocols per interface).
- Develop the application refresh strategy and HLDs for 3 major CNI hosted applications interfacing the core BM applications.
- This included application stack analysis and rehosting including Infrastructure, RDBMS, OS etc.
- Assurance of Oracle Cloud Team HLD designs to support application migration to OCI for 50+ existing corporate applications based on Oracle RDBMS versions with substantial licensing and operational benefits.
- Review of internal process, architecture model design patterns and documentation templates in support of design and transition activities ongoing and currently in the pipeline for new projects.
- Review of the major 3 DC Infrastructure including onsite / new DC and campus infrastructure as well as inter DC Ciena DWDM based solution for FC and IP services between major sites including DR.
- Initial security policies and procedures review with specific reference to partner connectivity and key vendor remote support capabilities such as the resilience HPE 3PAR SAN inbound 'call home' support capabilities.
- Complex HPE 3PAR SAN storage HLD and LLD design workshops lead HPE SME supported all environments.
- Design participant in refresh solution for internet base IPSEC VPN links and electricity network telemetry system.
Infrastructure Solution / Feature Architect
ING
Brussels
05.2017 - 10.2017
- Focused on the IT Risk AGILE EPIC Portfolio of High level features or projects and including all of the Infrastructure architecture components from DC, Gateways, Middleware (legacy Mainframe and MQ Series based), WAN, Branch and ATM (cash and cashless) network as well as major security monitoring solutions (HPE Arcsight SIEM).
- The main activities included Branch ATM network security analysis and redesign for 800 Branch offices and ATMs (3000+). Included in scope were management toolsets and technically securing the entire service.
- Strategic datacentre migration planning team member for the migration of all Belgian DCs to the Netherlands including WAN network transport, application migration and DC Compute / Storage capacity on the target VMWARE Private Cloud.
- Lead on Symantec Bluecoat CDN / Proxy Firewall LCM / upgrade (HLD and LLD) – one of the most complex deployments globally, solution included Advanced Threat protection (ATP), WAF, ETM (Encryption Transport Management) and complex proxy and caching in addition to CASB (Cloud security broker capabilities).
- Financial Markets Division security planning and overall network segmentation of the DCs and branches in line with PCI-DSS requirements for end of year 2017 and security assessment by (Belgian central bank and ECB).
- Firewall rationalisation and governance risk mitigation including 50+ firewalls from Checkpoint, Cisco and Juniper as well as Algosec policy and management tools sets in line with governance documentation reconciliation and guiding the operational network team members.
- Led Performance and capacity planning review process toolsets including Algosec, EMC SMARTS upgrade, Splunk, Netflow etc. as well as engaged Group Strategic solutions centred on ELK.
- LLD assurance review of existing and next stage national Arcsight SIEM deployment with particular focus on network and service assurance in preparation for major asset monitoring scope expansion to include applications.
- Design assurance of Proximus (WAN) and Getronics (LAN) network segmentation proposals as well as leading joint Proximus / Getronics / ING OPS design and review workshops including ATM VLAN migrations and mapping to new MPLS VRFs / VPNs as well as QoS model redesign.
- Support for finalisation of Record Bank service migration to ING natively including Workplace Services and DC consolidation activities.
- Participate in GDPR Architecture review workshops across the application & infrastructure on an ongoing basis.
Infrastructure Solution / Feature Architect
ING
Brussels
05.2017 - 10.2017
- Focused on the IT Risk AGILE EPIC Portfolio of High level features or projects and including all of the Infrastructure architecture components from DC, Gateways, Middleware (legacy Mainframe and MQ Series based), WAN, Branch and ATM (cash and cashless) network as well as major security monitoring solutions (HPE Arcsight SIEM).
- The main activities included Branch ATM network security analysis and redesign for 800 Branch offices and ATMs (3000+). Included in scope were management toolsets and technically securing the entire service.
- Strategic datacentre migration planning team member for the migration of all Belgian DCs to the Netherlands including WAN network transport, application migration and DC Compute / Storage capacity on the target VMWARE Private Cloud.
- Lead on Symantec Bluecoat CDN / Proxy Firewall LCM / upgrade (HLD and LLD) – one of the most complex deployments globally, solution included Advanced Threat protection (ATP), WAF, ETM (Encryption Transport Management) and complex proxy and caching in addition to CASB (Cloud security broker capabilities).
- Financial Markets Division security planning and overall network segmentation of the DCs and branches in line with PCI-DSS requirements for end of year 2017 and security assessment by (Belgian central bank and ECB).
- Firewall rationalisation and governance risk mitigation including 50+ firewalls from Checkpoint, Cisco and Juniper as well as Algosec policy and management tools sets in line with governance documentation reconciliation and guiding the operational network team members.
- Led Performance and capacity planning review process toolsets including Algosec, EMC SMARTS upgrade, Splunk, Netflow etc. as well as engaged Group Strategic solutions centred on ELK.
- LLD assurance review of existing and next stage national Arcsight SIEM deployment with particular focus on network and service assurance in preparation for major asset monitoring scope expansion to include applications.
- Design assurance of Proximus (WAN) and Getronics (LAN) network segmentation proposals as well as leading joint Proximus / Getronics / ING OPS design and review workshops including ATM VLAN migrations and mapping to new MPLS VRFs / VPNs as well as QoS model redesign.
- Support for finalisation of Record Bank service migration to ING natively including Workplace Services and DC consolidation activities.
- Participate in GDPR Architecture review workshops across the application & infrastructure on an ongoing basis.
Cloud & WAN Solution Architect
CAPGEMINI
Dublin
06.2016 - 01.2017
- CAPGEMINI provided a Dev / Test environment including development tooling (Atlassian JIRA / Confluence / CROWD / Git / Bitbucket etc.) to internal CAPGEMINI, BoI Development Partners and Bank of Ireland UAT end users for the Temenos core banking solution set.
- Specific responsibilities included but were not confined to Overview HLD document author / definition for AZURE PACK on Premise Solution for CAPGEMINI (DEV/TEST).
- Extensive technical / security design for CAPGEMINI EMEA INFRA Teams responsible for WAN and DC / Cloud Services including use of IPSEC and SSL / TLS encryption, Network segmentation and WAF capabilities.
- Included in scope was the use of inter application tier encryption and low level network segmentation based on LLD hosting VM / hosting design requirements.
- Design oversight with the Windows AZURE PACK Platform Team in Amsterdam re: security enhancements.
- Development of the interim Whitelisting Firewall Rulesets for CAPGEMINI DCs and BoI locations including change management submission definition and oversight then implemented by the CAPGEMINI India teams.
- Technical and Security assurance of the IBM Technical Design HLD for VMWARE’s Openstack Solution for Pre Prod and Production environments.
- Review included all of the Firewall, IPS / IDS, F5 Silverline LBS (DDoS), DC LAN logical design and approach to network segmentation as well as boundary protection for E2E connectivity and internet facing access controls.
- The environment included Fortinet, Cisco ASA and F5 LTMs / Silverline appliance as well as the underlying NEXUS 9K and edge switch / router devices guaranteeing full service resilience across the 2 primary DCs in Dublin.
- Technical Design Assurance support for Bank of Ireland and CAPGEMINI Security Design Workshops in support of Security Design Standards (PCI-DSS related) including specific focus on data leakage prevention and overall detailed client security policy definition versus technical implementation capabilities and options.
- Virtual NGFW Vendor product assessment and PoC for new virtual security appliances including Palo Alto, F5, Fortinet, 5nine, Checkpoint and others for content filtering / AV / Malware / DLP threat prevention in the AZURE hosting DCs.
- Internal Windows AZURE Pack Dev / Test Design of Network IP addressing and network segmentation.
- MPLS Capacity planning for Bank of Ireland connectivity to the CAPGEMINI DCs based on current utilisation data available and planned future application deployments.
- Cooperation in design support for the INFRA Platform Teams via workshops, face to face and daily interaction.
- Ongoing support for application development teams and application architects as required to deliver Dev / Test.
Cloud & WAN Solution Architect
CAPGEMINI
Dublin
06.2016 - 01.2017
- CAPGEMINI provided a Dev / Test environment including development tooling (Atlassian JIRA / Confluence / CROWD / Git / Bitbucket etc.) to internal CAPGEMINI, BoI Development Partners and Bank of Ireland UAT end users for the Temenos core banking solution set.
- Specific responsibilities included but were not confined to Overview HLD document author / definition for AZURE PACK on Premise Solution for CAPGEMINI (DEV/TEST).
- Extensive technical / security design for CAPGEMINI EMEA INFRA Teams responsible for WAN and DC / Cloud Services including use of IPSEC and SSL / TLS encryption, Network segmentation and WAF capabilities.
- Included in scope was the use of inter application tier encryption and low level network segmentation based on LLD hosting VM / hosting design requirements.
- Design oversight with the Windows AZURE PACK Platform Team in Amsterdam re: security enhancements.
- Development of the interim Whitelisting Firewall Rulesets for CAPGEMINI DCs and BoI locations including change management submission definition and oversight then implemented by the CAPGEMINI India teams.
- Technical and Security assurance of the IBM Technical Design HLD for VMWARE’s Openstack Solution for Pre Prod and Production environments.
- Review included all of the Firewall, IPS / IDS, F5 Silverline LBS (DDoS), DC LAN logical design and approach to network segmentation as well as boundary protection for E2E connectivity and internet facing access controls.
- The environment included Fortinet, Cisco ASA and F5 LTMs / Silverline appliance as well as the underlying NEXUS 9K and edge switch / router devices guaranteeing full service resilience across the 2 primary DCs in Dublin.
- Technical Design Assurance support for Bank of Ireland and CAPGEMINI Security Design Workshops in support of Security Design Standards (PCI-DSS related) including specific focus on data leakage prevention and overall detailed client security policy definition versus technical implementation capabilities and options.
- Virtual NGFW Vendor product assessment and PoC for new virtual security appliances including Palo Alto, F5, Fortinet, 5nine, Checkpoint and others for content filtering / AV / Malware / DLP threat prevention in the AZURE hosting DCs.
- Internal Windows AZURE Pack Dev / Test Design of Network IP addressing and network segmentation.
- MPLS Capacity planning for Bank of Ireland connectivity to the CAPGEMINI DCs based on current utilisation data available and planned future application deployments.
- Cooperation in design support for the INFRA Platform Teams via workshops, face to face and daily interaction.
- Ongoing support for application development teams and application architects as required to deliver Dev / Test.
Technical Architect, CPS (Crown Prosecution Service) ICT Restructuring Project
Crown Prosecution Service (CPS)
06.2015 - 12.2015
- Mixed role for HLD / LLD Design assurance and delivery of vendor solutions for LAN, WAN, Remote Access, Contact Centre, Mobile and VoIP services under the PSNC and PSNS procurements as awarded Q2 2015.
- Reporting to the Transition Manager and part of an 11 member team directly responsible for Transition oversight on behalf of CPS.
- Activities undertaken included Review and design assurance of Level3 WAN Instrumentation (Probes, Management Platforms and APM devices) for Capacity and Performance Measurements supporting contract SLA commitments.
- Extensive Design input to Level 3 MPLS WAN HLD (including DMVPN IPSEC overlay) plus Rollout and Cutover Migration Plans – primary and secondary DCs as well as inter WAN network to network interfaces (NNIs).
- Extensive engagement with internal and external security partners in the definition of policy and security safeguards across the entire CPS estate from DC to end user devices (EUDs).
- Extensive design input to Level 3 VoIP / UC HLD, User Experience Gap Analysis and supporting Service Management Design.
- Review and input to Level 3 LAN migration and management HLD plus Rollout and Cutover Schedules.
- Extensive review input to the Xerox Print Services HLD and LLD for large volume CPS secure printing.
- Specific attention given to Xerox service personnel access to CPS devices and potential to act as an 'attack vector'.
- CPS Application team engagement in support of application portfolio discovery–Oracle, Sharepoint and Bespoke Apps included as well as critical Contact Centre applications supporting CPSD 24x7 contact centre service.
- Included in scope was the clear identification of the use of SSL / TLS encryption and PKI support requirements and EUD device implications for certificate managed devices on the secure EUD builds CGI provided.
- Definition of the CPS Application WAN / LAN cutover testing methods for all critical business applications.
- Review of the present and future requirements for CPS Remote Access SSL / TLS VPN technology usage.
- Participation in post PFI contract Service Management Design Workshops to develop a seamless migration of contact centre and VoIP services between the existing and revised service models.
- 4G Mobility Strategy Assurance – MiFi and 4G rollout –covering security, SP Spectrum & device feature sets.
Technical Architect, CPS (Crown Prosecution Service) ICT Restructuring Project
Crown Prosecution Service (CPS)
06.2015 - 12.2015
- Mixed role for HLD / LLD Design assurance and delivery of vendor solutions for LAN, WAN, Remote Access, Contact Centre, Mobile and VoIP services under the PSNC and PSNS procurements as awarded Q2 2015.
- Reporting to the Transition Manager and part of an 11 member team directly responsible for Transition oversight on behalf of CPS.
- Activities undertaken included Review and design assurance of Level3 WAN Instrumentation (Probes, Management Platforms and APM devices) for Capacity and Performance Measurements supporting contract SLA commitments.
- Extensive Design input to Level 3 MPLS WAN HLD (including DMVPN IPSEC overlay) plus Rollout and Cutover Migration Plans – primary and secondary DCs as well as inter WAN network to network interfaces (NNIs).
- Extensive engagement with internal and external security partners in the definition of policy and security safeguards across the entire CPS estate from DC to end user devices (EUDs).
- Extensive design input to Level 3 VoIP / UC HLD, User Experience Gap Analysis and supporting Service Management Design.
- Review and input to Level 3 LAN migration and management HLD plus Rollout and Cutover Schedules.
- Extensive review input to the Xerox Print Services HLD and LLD for large volume CPS secure printing.
- Specific attention given to Xerox service personnel access to CPS devices and potential to act as an 'attack vector'.
- CPS Application team engagement in support of application portfolio discovery–Oracle, Sharepoint and Bespoke Apps included as well as critical Contact Centre applications supporting CPSD 24x7 contact centre service.
- Included in scope was the clear identification of the use of SSL / TLS encryption and PKI support requirements and EUD device implications for certificate managed devices on the secure EUD builds CGI provided.
- Definition of the CPS Application WAN / LAN cutover testing methods for all critical business applications.
- Review of the present and future requirements for CPS Remote Access SSL / TLS VPN technology usage.
- Participation in post PFI contract Service Management Design Workshops to develop a seamless migration of contact centre and VoIP services between the existing and revised service models.
- 4G Mobility Strategy Assurance – MiFi and 4G rollout –covering security, SP Spectrum & device feature sets.
Technical Architect and PM Mentoring
CGI
West Herts (NHS Trust)
11.2014 - 05.2015
- The engagement was conducted via the CGI GIS Central Infrastructure Project Team in support of the West Herts trust ICT Outsourcing contract awarded to CGI.
- The role involved reporting directly to the CGI head of Operations across all client accounts as well as member of overall WHHT ICT Programme Board.
- The scope of responsibilities included Campus Acute Hospital (x3) LAN / WAN HLD and LLD Design – core and access network upgrades.
- Review and design modification as well as configuration upgrades for the client’s Cisco ASA firewalls as well as migration of legacy Sophos proxies to CGI DC based internet and N3 facing gateways (Bluecoat / Websense).
- Migration of connectivity from the legacy BT COIN environment to the Virgin Media supplied MPLS WAN.
- End to end design of traffic flows from CGI DCs via Virgin Media WAN to WHHT Campus sites and onwards to the N3 central application set via the legacy BT COIN network and N3.
- Replacement of legacy firewall, proxy and DNS infrastructure from campus to CGI DC sites.
- Support e-mail, Wintel Server and all legacy server infrastructure migration from the major Campus site machine rooms to the CGI DCs.
- Selection and deployment of network analysis toolsets for Campus Site migration planning (Solarwinds).
- Campus site network discovery and LLD documentation including BCM / DR detailed planning.
- Access switch design and documentation for approximately 40% of the Campus Estates, physical, logical HLD / LLDs and completion of documentation in support of transfer to BAU management teams in CGI DCs.
- PoE and Wifi RTLS capable design and delivery for Campus sites with converged fixed LAN / Wifi (high density) deployment with Cisco WAPs and associated DC Infrastructure including Cisco ISE.
- Day to day support for the PM team leaders and supervision of on-site engineering teams.
Technical Architect and PM Mentoring
CGI
West Herts (NHS Trust)
11.2014 - 05.2015
- The engagement was conducted via the CGI GIS Central Infrastructure Project Team in support of the West Herts trust ICT Outsourcing contract awarded to CGI.
- The role involved reporting directly to the CGI head of Operations across all client accounts as well as member of overall WHHT ICT Programme Board.
- The scope of responsibilities included Campus Acute Hospital (x3) LAN / WAN HLD and LLD Design – core and access network upgrades.
- Review and design modification as well as configuration upgrades for the client’s Cisco ASA firewalls as well as migration of legacy Sophos proxies to CGI DC based internet and N3 facing gateways (Bluecoat / Websense).
- Migration of connectivity from the legacy BT COIN environment to the Virgin Media supplied MPLS WAN.
- End to end design of traffic flows from CGI DCs via Virgin Media WAN to WHHT Campus sites and onwards to the N3 central application set via the legacy BT COIN network and N3.
- Replacement of legacy firewall, proxy and DNS infrastructure from campus to CGI DC sites.
- Support e-mail, Wintel Server and all legacy server infrastructure migration from the major Campus site machine rooms to the CGI DCs.
- Selection and deployment of network analysis toolsets for Campus Site migration planning (Solarwinds).
- Campus site network discovery and LLD documentation including BCM / DR detailed planning.
- Access switch design and documentation for approximately 40% of the Campus Estates, physical, logical HLD / LLDs and completion of documentation in support of transfer to BAU management teams in CGI DCs.
- PoE and Wifi RTLS capable design and delivery for Campus sites with converged fixed LAN / Wifi (high density) deployment with Cisco WAPs and associated DC Infrastructure including Cisco ISE.
- Day to day support for the PM team leaders and supervision of on-site engineering teams.
Education
B.Sc - Physics- Hons
DCU
M.Sc - Computational Science – Hons
QUB
Belfast UKSkills
- Problem-solving
- Communication skills
- Team building
- Leadership
- Programme development
- [Type] troubleshooting
- Encryption and cybersecurity standards
- Knowledge of cybersecurity regulations
- Knowledge of cybersecurity solutions
- Cybersecurity consultation expertise
- Cybersecurity practices in healthcare
- Cybersecurity implementation
- Strategic thinking in cybersecurity
- Cloud infrastructure
- Cloud based technologies
Custom Section
Aidan Sneyd, 1968-04-23, Irish, EU Passport holder, +44 75 32 34 97 47, UK, +353 83 84 03 092, Ireland, aidan.sneyd@gmail.com, aidan.sneyd, Active, SC, Cleared, 2016-01-01, 7, BPSS, B.Sc, Physics- Hons, DCU, Dublin, Ireland, M.Sc, Computational Science – Hons, QUB, Belfast, Northern Ireland, Technical Cloud Architect / PM, Crown Prosecution Service (CPS - UK), 2023-11-01, 2024-07-31, CPS have embarked on an ambitious Finance Evolution Programme with multiple streams of application activity largely based around Oracle Fusion ERP and a number of satellite applications covering areas as diverse as Supplier Portal P2P, Payroll, Analytics, Fees Payments as well as a broader Service Desk replacement along with a range of other streams., Director and Cloud Consultant, PhoenixInfraCloud (UK) Ltd., 2022-11-01, 2023-08-31, Engaged with preliminary discussions and planning with a range of Public and Private Enterprises as well as a number of market Expansion and Digital Transformation programmes., Cloud and AZURE Technical Architect, Xeinadin, 2022-08-01, 2022-11-01, Acted as design and BAU support lead for a number of Cloud Services., Cloud Solution Architect, ATOS for University of Exeter, 2020-10-01, 2021-03-31, Led the AZURE AS-IS reviews and TO-BE design including HLDs for Microsoft AZURE focused services., ICT Transformation / Migration Consultant and Programme Lead, M&A Remote advisory role, 2019-10-01, 2020-03-31, Engaged to support an M&A review and design process involving a number of in-market and international investment Banks., Datacentre Migration Architect, European Patent Office (EPO), The Hague, Holland, 2019-01-01, 2019-05-31, Provided direct support to Programme Director via multi Programme Board covering DC Design, Mainframe Re-platforming and Application Migration Programmes., Infrastructure Architect, CGI, Surrey, UK, 2018-06-01, 2018-10-31, Solution Architect Team member focused on definition of central Government Secure Cloud Service providing IaaS / PaaS services., Solution Architect / Enterprise Architect, National Grid, UK, 2018-01-01, 2018-06-30, Acted as a member of the Solution Architect group focused on major business critical application migration., Infrastructure Solution / Feature Architect, ING, Brussels, Belgium, 2017-05-01, 2017-10-31, Focused on the IT Risk AGILE EPIC Portfolio of High level features or projects., Cloud & WAN Solution Architect, CAPGEMINI / Bank of Ireland, Dublin, Ireland, 2016-06-01, 2017-01-31, Provided a Dev / Test environment including development tooling to internal CAPGEMINI, BoI Development Partners., Technical Architect, CPS, Crown Prosecution Service, 2015-06-01, 2015-12-31, Mixed role for HLD / LLD Design assurance and delivery of vendor solutions., Technical Architect and PM Mentoring, CGI (Logica), West Herts, UK, 2014-11-01, 2015-05-31, The engagement was conducted via the CGI GIS Central Infrastructure Project Team., Technical Architect, CGI (Logica), CPS PSN Project Engagement, 2013-11-01, 2014-07-31, CGI (Logica) have been the Prime contractor for the COMPASS Programme., Principal Technical Architect, HMG Cabinet Office Public Services Network, 2008-10-01, 2013-10-31, Engaged alongside the Head of the Design Authority leading the definition and delivery of the entire Programme of work., Principal Consultant, Orange Business Services, 2007-09-01, 2008-09-30, The engagement involved an extensive review of the existing SDLC and functional parties’ responsibilities., Lead Architect & Chief Technical Officer, E-NVI Communications, Dublin, Ireland, 2005-02-01, 2007-06-30, This role was a varied and complex spectrum of responsibilities in a start-up environment., SCM System Consultant, LCM Moscow, 2004-02-01, 2004-12-31, A series of client engagements specific to the delivery of SCM and retail applications., European Data Migration Programme and PM, Sanford EMEA, 2003-01-01, 2004-02-28, Led a data migration and recodification team., IP Services Architect and Project Manager, AT&T Solutions, 1999-02-01, 2001-09-30, Establishing their European Operations and client engagement structures., IT Start-up Team Director, PepsiCo CIS, 1996-06-01, 1998-06-30, Oversaw all application and infrastructure delivery across the initial 42 cities targeted for market entry., IT Development / Start-up Manager, ESAT Telecom, Dublin, Ireland, 1994-10-01, 1996-06-30, Recruited to develop the ICT team and technology structure for a new entrant fixed and mobile carrier.
Personal Information
- Date of birth: 23/04/68
- Nationality: Irish, EU Passport holder
Websites
Timeline
Technical Cloud Architect / PM
Crown Prosecution Service (CPS)
11.2023 - 07.2024
Technical Cloud Architect / PM
Crown Prosecution Service (CPS)
11.2023 - 07.2024
Director and Cloud Consultant
PhoenixInfraCloud (UK) Ltd.
11.2022 - 08.2023
Director and Cloud Consultant
PhoenixInfraCloud (UK) Ltd.
11.2022 - 08.2023
Cloud and AZURE Technical Architect - IT Transformation Team
Xeinadin
08.2022 - 11.2022
Cloud and AZURE Technical Architect - IT Transformation Team
Xeinadin
08.2022 - 11.2022
Cloud Solution Architect – Covid Mitigation Programme
ATOS
10.2020 - 03.2021
Cloud Solution Architect – Covid Mitigation Programme
ATOS
10.2020 - 03.2021
ICT Transformation / Migration Consultant and Programme Lead (M&A Remote advisory role)
10.2019 - 03.2020
ICT Transformation / Migration Consultant and Programme Lead (M&A Remote advisory role)
10.2019 - 03.2020
Datacentre Migration Architect
European Patent Office (EPO)
01.2019 - 05.2019
Datacentre Migration Architect
European Patent Office (EPO)
01.2019 - 05.2019
Infrastructure Architect
CGI
06.2018 - 10.2018
Infrastructure Architect
CGI
06.2018 - 10.2018
Solution Architect / Enterprise Architect – Security and Infrastructure
National Grid, UK
01.2018 - 06.2018
Solution Architect / Enterprise Architect – Security and Infrastructure
National Grid, UK
01.2018 - 06.2018
Infrastructure Solution / Feature Architect
ING
05.2017 - 10.2017
Infrastructure Solution / Feature Architect
ING
05.2017 - 10.2017
Cloud & WAN Solution Architect
CAPGEMINI
06.2016 - 01.2017
Cloud & WAN Solution Architect
CAPGEMINI
06.2016 - 01.2017
Technical Architect, CPS (Crown Prosecution Service) ICT Restructuring Project
Crown Prosecution Service (CPS)
06.2015 - 12.2015
Technical Architect, CPS (Crown Prosecution Service) ICT Restructuring Project
Crown Prosecution Service (CPS)
06.2015 - 12.2015
Technical Architect and PM Mentoring
CGI
11.2014 - 05.2015
Technical Architect and PM Mentoring
CGI
11.2014 - 05.2015
B.Sc - Physics- Hons
DCU
M.Sc - Computational Science – Hons
QUB