Working language: English
Years of IT Experience: 10 +
Canadian Citizen
U.S. Permanent resident
Certified Information Systems Security Professional (CISSP )
Mr. Hohenkirk has over eight years of network security experience with primary
expertise in the successful implementation of PKI, Encryption and LDAP and
Messaging projects. He developed extensive knowledge of various network security
products and effectively completed numerous large projects.
Mr. Hohenirk is a Senior PKI Systems Analyst. He currently consults with the
Department of National Defence (DND) in the implementation of an offline Root CA
as well as a sub-ordinate CA on the Classified Network Domain. This
implementation includes policy changes (CPS), and OID restructuring to comply
with the Government of Canada hierarchical tree structure.
As a consultant to DND Mr. Hohenkirk participated in other projects - namely the
migration and upgrade of their X.500 applications - and was instrumental in
writing business codes and technical specifications.
Earlier in his career he was employed with BCE Emergis in Toronto with a focus
on the development and operation of Government Secure Channel. Prior to BCE
Emergis, he was employed as a Team Leader in the PKI/LDAP infrastructure group
for Entrust Inc. in Ottawa.
N-Kript IT Solutions Inc.
Ottawa, Ontario
January 2006 to present
Department of National Defence (PKI Engineering Group)
As the Senior Analyst for the Department of National Defence (DND) PKI Group,
Mr. Hohenkirk is currently redesigning the Classified Domain architecture for the
DND secret domain. This architecture will provide digital ID as well as
encryption for the new DND Military Messaging Handling System that interfaces to
a new X.400 to XML message conversion portal/gateway. This XML Portal (CP-XP)
serves as a generic ACP123 bi-directional interface for external applications not
capable of processing ACP123 formatted messages.
The project development includes detailed documentation of the Certificate
Policy as well as the Certificate Practice Statement (CPS). This will comprise of
plans to change the structure of the DND OID tree as well as performing analysis
of an offline root certificate authority (CA) along with the proposed Sub CA.
Mr. Hohenkirk is also required to perform CA evaluations, CA specifications and
finalizing the server build documentation, server configuration, OS installation
procedures, backup/recovery procedures and OS hardening.
Valcom Consulting Group Inc.
Ottawa, Ontario
February 2005 to January 2006
Department of National Defence (X.500 Directory Services Group)
Mr. Hohenkirk was the X.500 Technical Analyst on DND X.500 Directory Migration
project in the Designated Domain. The project entailed upgrading five existing
Critical Path LDAP 4.1 to 4.2.5 directories for the Department of National
Defence that were used as a directory system that facilitated the retrieval of
Entrust X.509 certificates as well as email addresses for SMIME usage.
As the lead Technical Analyst he was instrumental in successful completion of
requirements from the implementation of Sandbox testing to migration to
production. This included updates to Architectural documents, Concept of
Operation (CONOPS), Standard Operating Procedures (SOP 's), Network diagrams
using Microsoft Visio as well as schema changes to conform to the Government of
Canada schema.
Mr. Hohenkirk also provided ad hoc facilitation of the daily maintenance of the
X.500 environment. He synchronized data flows between the Oracle database for
Peopelsoft, Unix and Active Directory to final destination that was the X.500
distributed directory. This consisted of manipulation of LDIF scripts and various
PERL scripts.
His expertise were also utilized during the inauguration of the DND Identity
Management Architecture where responsibilities included analyzing SQL code to aid
in the creation of business codes and technical specifications which served as
the basis for information flow for the Meta directory.
BCE Emergis
Toronto, Ontario
November 2003 to January 2005
PKI Infrastructure
Mr. Hohenkirk maintained the certificate authority for the federal government
online project Secure Channel which leverages the common registration
system (CRS) epass to access all government departmental applications, namely
Canada Revenue Agency (CRA) and Human Resource Development Canada (HRDC), and
promote integration between departmental services.
He implemented upgrades of JAR files for Truepass enabled digital ID creations
and recoveries and with successful completion within an aggressive schedule.
In addition, he installed PKI infrastructure for Statistics Canada Census Test
to provide citizens with an online option for questionnaires. This involved
creating policies and high level profiles using smart card and tokens (i.e.
Datakey, Chrysalis-ITS) and executing a compliant Root Key Generation Ceremony.
This project was successfully delivered an on-line option for Statistics
Canada's Census Test. It was the first time in the world that a national census
bureau provided an on-line questionnaire (to fill out and submit) to citizens.
The project helped to support the 2006 Census with 13.5 million households.
Entrust Inc.
Ottawa, Ontario
May 2001 to November 2003
PKI Infrastructure and (LDAP) Directory Integration
Mr. Hohenkirk supervised ten specialists on delivery of resolutions to
financial, health and government institutions. He identified individual strengths
within the team and delegated issues accordingly. This required monitoring team
limitations and recommending training in applications such as SQL, ORACLE, MS
Active Directory and VERITAS. Mr. Hohenkirk also demonstrated efficient
resolution by interceding on high severity/visibility issues including system
failures and certificate authority recovery scenarios.
In addition, he articulated team challenges to the in-house architect, developer
and product manager and collaborated on presenting the most effective resolution
to the client. On completion of resolutions Mr. Hohenkirk submitted technical
evaluations of team members to management.
September 1999 to May 2001
PKI Infrastructure and (LDAP) Directory Integration
Mr. Hohenkirk delivered resolutions for the certificate authority and X.500
directory issues of extremely high severity for the Entrust client base. This
encompassed targeting system architecture, upgrade, recovery, and/or
installations with bugs, maintenance patches and configuration.
Mr. Hohenkirk rebuilt environments including, but not limited to, Entrust/PKI
3.0 to Security Manager 8.0 with various X.500/LDAP applications. In addition, he
identified system issues from customer logs, audits and files and determined
resolutions referencing Entrust knowledgebase and liaising with in-house
developers when required.
The delivery of these resolutions demanded effective time management and
proficient translation of resolutions for technical and client reports for
submission to client/Entrust knowledgebase.
Royston Hohenkirk
27260 Los Altos #821
Mission Viejo, CA 92691
mailto:
Business * Information Systems * Honors Diploma
Algonquin College, 1999
Bachelor of Social Sciences
Sociology
University of Ottawa, 1995
Business Administration * Associate Degree
Bergen Community College (U.S.), 1992
(ISC2) CISSP, 2008
Oracle PL/SQL Fundamentals, 2005
Weblogic Server Administration, 2003
Websphere Server Administration, 2003
Cisco Security Boot Camp, 2002
Project management, 2002
Customer Relations,2002
Implementation and Administering Microsoft Windows 2000 Active Directory
Services, 2002
Sun Solaris 8 System Administration I, 2001
Informix Database Management, 2000
Critical Path Directory Boot Camp, 1999
Entrust Authority Security Manager Comprehensive, 1999
Hardware
o Cisco Concentrator
o Nortel Contivity Switch
o Check Point Firewall
Cryptographic Security Hardware
o Chrysalis Luna CA3/CA4
o Chrysalis LunaSA Security Appliance
o nCipher Cryptographic Hardware
o nCipher netHSM
o Active Card Readers and Tokens
o GemPlus Card Readers and Tokens
o iKey 2032 Token
o General Dynamics SMEPED/Blackberry Device
o Safenet Smart card middleware
x.500/LDAP Directory Applications
o Critical Path InJoin Directory Server
o Microsoft Active Directory
o iPlanet/Sun One Directory Server
o Siemens DirX
o IBM Directory Server
o Novell NDS e-directory
Entrust Security Software
o Entrust Security Manager
o Entrust Roaming Server
o Entrust Self-Administration Server
o Entrust TruePass Server
o Entrust Enrollment Server for VPN
o Entrust Enrollment for Web
o Entrust Administration Services
o Entrust Security Provider w/CAPI
Operating Systems
o Windows 95, 98, ME, NT 3.51, 4.0, XP and Windows 2000/2003
o RedHat Linux
o Solaris 2.5, 2.6, 7, 8, 9
o HPUX 10.20, 11, 11i
o AIX
Database Platforms
o Oracle 8i/SQL
o Informix 7.21, 7.23, 9.21, 9.41
o Microsoft Access
Web Servers/Application Servers
o IIS 5 and 6
o WebLogic
o WebSphere
o IBM HTTP Server
o SunOne
o Tomcat
Software
o Siebel
o Smart Card Logon
o Microsoft Windows NT DNS, DHCP
o Exchange 5.5 and 2000, 2003
o Microsoft Office
o Microsoft Visio
o VMWARE, Virtualbox (Virtualization)
Other
o X.509 Specifications (FCS) / Well versed in ASN.1 Encoding
o HTTP, SSL, TCP/IP, UDP, SSH, LDAP, FTP, NFS, IMAP, SMTP,LDAP ,DES,AES,
Triple-DES, RSA
|
