Security Architect

• Oct 2023 - Present

Solution Architect

• Mar 2021 - Sep 2023

Lead Solution Architect for the Active Directory and DNS Uplift Program of work, which includes the following 4 x project delivery streams: 1. Active Directory Uplift Project – uplift the on-premises AD Forest’s and Domains to the latest Domain Functional Level (DFL) and Forest Functional Level (FFL). 2. DNS Uplift Project Stream – integrate on-premises DNS with AWS Route 53 and leverage the AWS Route 53 Resolver DNS Firewall to filter insecure DNS requests. 3. Azure AD Password Protection - Enforce Azure AD Password Protection for on-premises Active Directory Domain Services. 4. Decommission ADFS – Implement Password Hash Synchronisation (PHS) from on-premises AD to Azure AD to enable the decom of ADFS. Lead Solution Architect for the Microsoft System Centre Configuration Manager (SCCM) replacement project. The Target State Architecture for this project is to replace SCCM’s current Windows Server patching and reporting capabilities with Azure Arc and use the Ansible Automation Platform hosted in AWS to replace SCCM’s software deployment capability. Consistently delivered the required Architecture Artefacts for the AD/DNS Uplift Program, including: 1. Architecture Governance Forum (AGF) packs and presentation to Heads of Strategy and Architecture and Principal Architects for endorsement at AGF. 2. Solution Architecture Documents (SAD’s). 3. Key Design Decision (KDD) artefacts on confluence. Show less

Solution Architect

• Apr 2019 - Mar 2021

Infrastructure and Security Transformation Programme. Infrastructure and Security Transformation Programme.

Platform Architect

• Oct 2013 - Apr 2019

Worked on NAB’s Cloud Migration Program. Focused on database migration patterns to migrate on-premise Oracle, SQL, Sybase, DB2 and MySQL databases to MariaDB or PostgreSQL hosted in AWS, Azure and GCP. Worked on hosting the NAB Data Hub in AWS. Highlights include architecture and implementation of: - Batch layer using S3 buckets for Raw, Curated and Conformed data. - Streaming layer using Kafka. - Informatica tools including - Big Data Management (BDM) for batch ETL, Enterprise Data Catalog (EDC) to capture technical metadata, Axon Data Governance to capture business metadata. Other projects worked on: SWIFT payment gateway architecture to meet an RPO=0 and RTO=30 minutes. - built on IBM P series hardware using PowerHA clusters. - DR failover/failback automated using Ansible Tower. - Teradata Remediation Program - Implement Teradata Unified Data Architecture (UDA) comprising of Hortonworks Hadoop, Teradata Datawarehouse and Aster Discovery Platform. - Digital Access Platform – Implemented the Oracle Identity and Access Management stack for use across NAB’s digital channels (Internet Banking, NABConnect, Wealth etc.). - NextGen NABStratus Program – The focus of this program was to move NAB’s core banking platform from ageing HP Blade Infrastructure onto Oracle Engineered systems (ExaLogic, Exadata and ZFS Backup Appliances). - Infrastructure Transformation Program (ITP) to transform NAB’s applications from legacy networks and hardware onto NAB’s Infrastructure on Demand (IOD) platforms. Specific program streams worked on were: - Aviva and Advantage Transformations - East Melbourne Datacentre (EMDC) Transformation – Due to NAB moving out of their East Melbourne/DR Datacentre this stream's focus was to transform all applications from East Melbourne to IOD in the new datacentre. There were a large number of Wholesale and Retail applications that were transformed as part of this program. Show less

Solution Architect

• Feb 2013 - Sep 2013

Responsible for delivering relevant architecture deliverables aligned with the associated Energy Australia project life cycle. Provided Architecture governance and oversight until the project was successfully completed. Lead Solution Architect for the following projects at Energy Australia: Windows 7 MOE Program – The Windows 7 MOE Program was established to move Energy Australia’s desktop fleet from Windows XP to Windows 7. Completed the following 3 x Conceptual Architecture/Solution Overview documents: • Application Delivery Service - Deliver packaged applications via SCCM 2007. Apps requiring remediation to work on Windows 7 will be virtualised using VmWare ThinApp. • Image Creation Service – Creating an automated Windows 7 build. • Platform & Personalisation Delivery Service – Deliver the automated Windows 7 build using SCCM 2007. Capture “user state” using the User State Migration Tool (USMT). Darryl also assisted program and project managers with engagement and governance of IBM to deliver components of this program. Disaster Recovery (DR) Program – The DR Program was established to provide DR capability for existing systems. Darryl was the Program Architect on the DR Program. Worked across the following project streams of the DR Program: Exchange 2010 DR Project – The solution was required to meet the target RPO and RTO as defined by the business: • RPO - as close to zero data loss as possible. • RTO - able to send and receive email within 4 hours. Delivered the Conceptual Architecture for this project. Firewall Upgrade Project – Implement a highly available Firewall solution with automated failover/failback between Production and DR Datacenters using Cisco Adaptive Security Appliance (ASA) firewalls. Delivered the Conceptual Architecture for this project. Nexus Program (SAP Refresh), worked on completing the Nexus SAD with SAP. Show less

Infrastructure Solution Architect

• Jul 2011 - Feb 2013

Lead Infrastructure Solution Architect for the following projects at ANZ: - Risk and Security Program (RaSP) – Darryl worked on the following Streams within RaSP – Data Loss Protection (DLP) & Certificate and Key Management Capability (CKMC). - Listed Equities and Derivatives Automation – As part of its expansion strategy, the ANZ Equities Derivatives business unit had decided to become a derivative warrant issuer and market maker in Hong Kong. The key deliverables for this project was the implementation of a state-of-the-art electronic trading and market making platform. - Pacific Remote Access Solution – The purpose of this initiative was to provide a remote access solution for 200 ANZ Executives spread across the Pacific. - Vietnam Credit Card Embossing – This project was for ANZ Vietnam to move it’s credit card embossing vendor from New Zealand to Vietnam. - ANZ Connect (Vostro/Nostro) Remediation – Remediate an old/unsupported ANZ Connect application onto Shared/Virtual Infrastructure. - Disaster Recovery Automation Tool – CA’s Process Automation Manager (PAM) was the chosen workflow tool to automate the running of disaster recovery test’s and in the event of DR a real DR failover and failback. - Siebel Server Sync for Microsoft Exchange (SSSE) – The aim of this project was to implement SSSE to integrate Microsoft Exchange with Siebel to synchronise referrals and appointment bookings for the ANZ Branch network. - Small Business Loans (SBL) Remediation Program – This was a risk remediation program tasked with refreshing the existing legacy Small Business Loans platform. The SBL Platform was used for Case Management (Tibco Staffware) and Document Management (Tower IDM) running on Sun Fire E25K and V240 Servers, running Solaris 8 & 9 and using Oracle 9i. The plan was to move to Filenet 4.5 for Document Management and move the Case Management functionality to PEGA or install a new instance of Tibco iProcess v11.3.1. Show less

Solution Architect

• Jan 2011 - Jul 2011

Responsible for the following: • Consulting with NAB’s Business Units to capture project requirements • Scoping the IBM deliverables for a project and agreeing the scope with NAB • Writing a New Services Order (Proposal) which covers what IBM will deliver and associated cost. An In-depth understanding of the project’s requirements is required in order for the most appropriate solution to be provided to NAB. Responsible for the following: • Consulting with NAB’s Business Units to capture project requirements • Scoping the IBM deliverables for a project and agreeing the scope with NAB • Writing a New Services Order (Proposal) which covers what IBM will deliver and associated cost. An In-depth understanding of the project’s requirements is required in order for the most appropriate solution to be provided to NAB.

Infrastructure Designer/Architect – Strategy, Architecture & Service Planning

• Oct 2008 - Dec 2010

Infrastructure Solutions would typically be based on Windows, Red Hat Enterprise Linux or Sun Solaris platforms. As well as Storage - EMC SAN and/or NAS, LAN/WAN, and if required High Availability models and Cross Site DR. Lead Infrastructure Designer/Architect for the following projects at NAB: - Information Loss Protection Program – involved from the RFP stage where I was engaged to write an Infrastructure Order of Magnitude (OOM) to compare the three shortlisted vendors. Once RSA was selected, responsible for writing the Infrastructure High Level Design for Phase 1 – Email Interception and Phase 2 – Datacenter Monitoring. - Computer Assisted Telephone Interview (CATI) System for NAB’s Call Center. The application selected was SPSS’s Dimensions Application. - Connect Direct Refresh Program – The program essentially built a new virtual Connect Direct Platform and migrated legacy file transfer jobs to the new platform. - McAfee Anti-Virus/HIPS Solution for the NAB Australian region using ePO 4.5. - Pre-production test environment to simulate NAB’s Tier 3 – Hobo and Tier 4 – Branch environment for project’s to use. - IP Telephony Call Reporting Solution using the Atea Application. - Stategy Science Solution. NAB signed a deal with Fair Isaac to purchase its Strategy Science solution for Cards Credit Line Management. The solution involved Decision Optimizer and Model Builder for Decision Trees which allowed NAB analysts to develop new credit line strategies optimized for profit. - National Online (NOL) – Replacement of Rotek PC’s with Thales SafeSign Servers for end-user authentication. Show less

Technical Consultant

• Feb 1998 - Dec 2006

Technical Consultant within HP Consulting & Integration, focused on Architecting Microsoft Infrastructure Solutions based on Windows 2000/2003 and Exchange 2000/2003 as well as Security solutions - Security Reviews. Identity Managment etc. Microsoft Infrastructure Security SME. Held a number of roles within Hewlett Packard Australia across Customer Support, Managed Services and Consulting and Integration bringing a depth of technical knowledge and flexibility to architect solutions to meet clients business requirements. Show less