
Rod X. Hu
- Senior Cyber Security Architect
- New York City, NY
- Member Since May 27, 2023
Senior IT Architect/Technical Manager of IDM, Middleware SOA, and ERP
-15+ years of IT experiences in enterprise business system design, implementation and administration.
-Specialize in Cyber Security with focus domains of Idnetity and Access Management suite.
-Familiar with enterprise ERP sysetm such as Oracle Fusion Applications and SAP.
-Exclusive consulting working experience with major consulting companies including IBM Global Consulting, Oracle Corp, Ernst & Young and Deloitte.
-Participated in the numerous full cycles of implementation projects in enterprise Identity access management, middleware and, global ERP system with fortune 100 companies and large organization, including United Airline, Astrazeneca, Amway, BOA Merrill Lynch, Saks Fifth Ave, Carlson Companies, Shaw Inc., Constellation Brand Inc., Herbalife, State California and Kaiser Permanente.
-Proven technical leadership skills include the ability to manage teams, lead the thoughts and actions and ability to multi-task, maintain an organized approach even when faced with high pressure or high-risk situations.
- High performers recognized by the major employers with numerous employee awards.
-Two Master degrees in MBA of Management of Technology and Computer Engineering.
-Oracle Certified Professional.
-Participant of Open Source projects, including Adempiere ERP, OLAT LMS and Joomla CMS
-Enterprise Identity and Access Management and Directory Store, including OIM, OIA, OAM, OAAM, SSO, OIF, OVD, OID and AD.
-Architect, implement and administer Oracle Fusion Middleware environment. Components include Weblogic cluster, SOA, OSB, BPM, OWM, ODI and SOA Governance, OSR, OER.
-Architect and implement large scale of corporate business systems, such as Oracle Ebusiness Suite, SAP R/3/MySAP/CRM, Integration with Oracle Weblogic Application Server SOA Suite, Oracle BI/Data warehouse, Oracle Enterprise Security/Identity Management, SAP NetWeaver/Integration, J2EE/EJB/AJAX/PHP
-Design and build large and maximum high available database with various flavors of database, especially Oracle RAC database.
-Design and develop web applications with Node.js, ADF, Struts framework and J2EE technologies.
2001,5 -- 2003,8 MBA Management of Technology
SIMON FRASER UNIVERSITY B.C, Canada
1990, 9 –1993,3 M.S. Computer Graphics and Pattern Reorganization
SHANGHAI JAOTONG UNIVERSITY Shanghai, China
1986,9 --1990,7 B.S Physics
Xiamen UNIVERSITY Fujian, China
Oracle Certified Professional
Sun Certified Developer
2005 IBM Outstanding Service Excellence Employee Award
2008 IBM Outstanding Service Excellence Employee Award
2009 IBM Outstanding Service Excellence Employee Award
2010 IBM Outstanding Service Excellence Employee Award
2011 IBM Outstanding Service Excellence Employee Award
Represent Deloitte to provide consulting service to large organizations and companies. They include:
Project: State California Employment Development Department (EDD) Identity Management Oracle Upgrade Project (08/2016-present)
Role: Senior IAM Architect
-Providing Technical Guidance for Oracle Identity Governance upgrade from Oracle IAM 10g to OIG 11gR2PS3, including infrastructure and platform transformation, data migration, connector re-deployment, request workflow build, and self-service and portal implementation.
-Deploying OIM/OAM/OAAM/OES cluster, LB, Revere Proxies, SSO agent.
-Participating the design and implementation of the portal, custom login and logout process.
-Designing and configuring OAM Application domains, Authentication/Authorization Policies, SSO agents, OAAM user profile registration, pre-authentication and post-authentication rules.
-Participating application integration design and system integration performance test.
Represent EY to provide consulting service to large organizations and companies. They include:
Project: T-Mobile OIM Troubleshooting Project (02/2016-08/2016)
Role: Technical and Delivery Manager
-Leading the efforts of reviewing T-Mobile OIM system, including the infrastructure architect, configuration, customization and connector implementation. The onboarded downstream applications include Active Directory, Exchange Server, O365, Workday, SAP GRC, SAP CRM, Watson, Samson and OID, etc.
- Determining the root cause of issues in AD and SAP GRC provisioning process, O365 de-provisioning process and Tibco integration with Workday.
-Troubleshooting the failures in the custom connectors by re-engineering the Java codes and reviewing the configuration of OIM entity components.
-Providing client with the recommendations of remediation, improvement and enterprise security enhancement.
Project: Kaiser Permanente IAM Reporting and Analytics Project (08/2015-02/2016)
Role: Implementation and Delivery Manager
-Leading the architecting, design and implementation of KP Identity data warehouse, including the Identity and access data ETL processes, Data processing and reporting.
- Analyzing the data model of the data sources and integrating with/onboarding the hundreds of target resources, including Oracle Identity Governance, RSA Aveksa, Peoplesoft, Epic/Epims, Dropbox, O365, etc.
-Leading the architecting, design and implementation of IAM Analytics solution including identifying the inappropriate entitlements and integrating with access certification processes, monitoring and alerting the inappropriate access activities in company applications and cloud environments, and performing the Role Mining and Access Rule Mining exercises.
- Participating in forming the KP IAM reporting and Analytics Strategy, compositing the Project Charter and Project Plan, and managing the onsite and offshore resources.
Represent Oracle to provide consulting service to large organizations and companies. They include:
Project: State California CDCR Identity and Access Management Project (02/13-08/2015)
Role: Senor IT Architect of Fusion Middleware Identity and Access Management
- Built and implemented OIM, OAM, SSO, OVD, OID, Web/Accessgate on reverse proxies, enterprise portal and custom Role and Entitlement Management.
-Deployed and configured OIM connector for MS Active Directory.
-Designed and implemented custom connectors for other enterprise application resources with provisioning and reconciliation processes, including resource forms, Adapters and scheduled tasks with J2EE.
-Designed and implemented identity and role/entitlement request and approve process with Oracle FMW SOA Suite, OSB and BPM Worklist.
-Designed and implemented enterprise group structure and policies and access policies.
-Customized Self-service and administrative UI pages with Oracle ADF and Struts2 framework.
-Conducted the performance tuning for integrated Oracle FMW, including Identity and Access Suite, middleware and resource applications.
-Participated implementing auditing and reporting for Identity and Access Management with OBIEE and BI Publisher.
-Formed the strategies, methodologies and procedures to migrate custom Role/Entitlement Management to OIA.
-Implemented enterprise SSO and identity Federation with Oracle Access Manager.
Project: Herbalife Global Order and Distribution Management Implementation Project (Oct/12-Feb/13)
Role: Senor Architect of Fusion Middleware SOA and Identity Management.
-Architected and built the Fusion Middleware environment with HA configuration including clustered Weblogic servers and failover standby site. The modules include ADF, OIM, SOA, OSB, OWSM, OIM and OAM.
-Provided analysis and strategies on system evolution of enterprise Identity Management, fusion middleware evolvement, and Oracle Ebusiness Suite.
-Conduct Pilot project of Oracle Identity Management Suite and Integration of enterprise identity store.
-Performed performance assessment and provided enhancement recommendation on entire Oracle Fusion Middleware environment.
-Prototyping integration solutions and middleware applications.
-Implement solution for purging SOA Suite Dehydration Store.
-Implementing middleware production monitoring solution with WLST scripting.
-Lead the administration activities to support middleware production and projects.
As a senior architect and senior application system administrator, have played the lead technical role in numerous large scale ERP, CRM, integration and Identity Management projects with major fortune 100 companies. The projects include:
Project: Saks Fifth Ave Global ERP Retail and corporate Identity and Access Management Implementation project (12/2011- 10/2012)
Role: Lead Architect and Administrator of Oracle Identity Management Suite , Oracle Fusion Middleware and Oracle Ebusiness Suite R12
-Planning, architecting, designing and building Enterprise Identity Management environment including Oracle Identity Management, Oracle Identity and Access Management and integration Middleware Oracle SOA suite, BPM.
-Planning, architecting, designing and building Fusion Middleware 11g in a HA cluster environment, including SOA suite, BPM suite, ADF, BAM, OWSM, ODI and OSR/OER SOA Governance suite.
-Forming integration strategy and integration pattern leveraging Oracle middleware technologies. The integrated parties include Oracle Ebusiness Suite, Oracle Retail, OBIEE and legacy system.
- Implemented with Single Sign on (SSO) and Identity Provisioning services with Oracle Identity management suite, including OIM, OAM, OID, OVD, OAM Webgate and EBS AccessGate. The security domain includes Oracle Ebusiness Site, Oracle Retail, OBIEE and Fusion Middleware.
-Consolidated identity stores and expose unified directory service with OVD.
-Implemented Oracle access manager for SSO and application authorization. Define the IT resources and rule-based access policies.
-Implemented corporate identity provisioning service with Oracle Identity Manager. Tools include User console, Identity Design console. Implemented and customized the connectors for provisioning target systems and enterprise applications.
-Planned, Designed and implemented Oracle Entitlement Server for Corporate system external authorization.
-Integrated with Oracle Enterprise Repository to manage and version corporate access policies.
-Utilized Oracle Identity Analytics to create rich reports and auditing on identities and accesses.
-Implement Identity Management reports and analytics for auditing and Identity governance.
-Leading on-shore and off-shore apps DBA team to provide support to project activities.
Project: Shaw Global JD Edwards and Integration Implementation project (10/2011- 12/2011)
Role: Fusion Middleware Lead Architect
-Designed Fusion Middleware 11g architecture as Shaw's corporate integration Platform. Provided system requirement analysis and system spec, bill of material and sizing design.
-Provided recommendations and POC on Enterprise Identity management with Oracle Identity Management Suite.
-Created detailed project plan for building Fusion middleware and recruited and trained fusion middleware administrator team.
-Installed Fusion Middleware 11g in a two-node cluster environment, including SOA suite, BPM suite, ADF, BAM, OWSM, ODI, OIM, OAM, OID and OVD and OSR/OER SOA Governance suite.
- Created Weblogic domains and optimize the performance by configuring OSB, BPEL, mediator, Workflow, Business rule service components, JMS, data source pool and resource adapters.
-Participated forming SOA application strategies, including integration pattern, deployment approach and artifact migration procedures.
-Participated in SOA, OSB and ODI interface design and build.
-Utilize AIA FP to implement Middleware error handling and notification.
-Deploy and configure ODI agents. Implement ODI interface and scenarios.
-Form SOA Governance strategies and implement OSR, OER and OWSM to manage enterprise IT service assets and securities.
-Performed Fusion middleware administrative actives, including artifact deployment and composite instance troubleshooting.
-Perform performance tuning and identify troublesome threads with various tools, such as Mission Control console, jvmstate and Samurai.
-Implemented distributed JMS service and durable topics and queues.
-Created code migration procedure with WLST and ANT scripting.
-Created dehydration store trim and purge procedures.
Project: Qlogic Oracle Ebusiness Suite upgrade project (06/2011-10/2011)
Role: IT Architect/Oracle Applications DBA Lead
-Defined the strategies and roadmap of upgrading Oracle Ebusiness Suite from 11.5.9 to 12.1.3 and created project plan with detailed upgrade steps. The main upgrade tasks include db upgrade from 9i to 10g, OATM, db upgrade from 10g to 11g, apps upgrade from 11.5.9 to 12.1.1, app upgrade from 12.1.1 to 12.1.3, converting single db instance to RAC, configuring multiple Apps nodes and PCP.
-Designed the architecture of target environment.
-Reduce the upgrade duration by improving the performance and optimize the procedures.
-Led and carry out the hands-on upgrade activities.
-Implement multiple Apps tier, RAC, PCP, OPP and EBS printing solution.
-Implemented DR solution with Oracle Maximum High Availability, including RAC database and Data Guard.
-Lead Apps DBA support activities including both offshore and on shore.
Project: Constellation Brand Inc. Global Master Data Management project (08/2010-05/2011)
Role: Senior IT Architect/ Fusion Middleware Administrator Lead
-Designed EBS and Fusion Middleware architecture in CBI Master Data Management (MDM) project. The modules included Oracle EBS Customer Data Hub (CDH), Product Information Management (PIM), Hyperion Data Relationship Management (DRM), SOA Suite, AIA and Oracle OSB.
-Installed and configured Oracle EBusiness Suite r12 and Oracle Fusion Middleware 11g with clusters.
-Participated in SOA applications design and formed request/respond, publish/subscribe and batch processing patterns.
-Participated in ADF applications design for MDM user change requests and batch job requests.
-Conducted performance tuning and troubleshooting with tools.
-Performed Fusion middleware administrative actives, including artifact deployment and composite instance troubleshooting.
Project: Amway Global Oracle Ebusiness Suite Implementation and Integration Project (05/2007- 08/2010)
Role: Applications Infrastructure Lead
-Designed system architecture layout and formed change control, instance cloning, patching and disaster recovery procedure.
-Implemented SSO solution for Oracle EBusiness Suite and integrated applications with Oracle Identity Management Suite.
-Built Oracle Ebusiness Suite and integration middleware SOA suite R12 on a cluster infrastructure complying with Oracle Maximum High Availability practise.
-Participated in integration between IBM Legacy system, Oracle EBS R12 and JD Edwards using Oracle SOA Suite.
-Participated in application customization and functional extension based on Oracle PL/SQL and J2EE technologies.
-Coordinated off-shore resources and trained and coached client Application DBAs and SOA Administrators.
AstraZeneca Product and Customer Master Data Implementation Project (11/2006 - 05/2007)
Role: Data Solution Architect
-Implement Customer Master and Product Master with Syperion, which validates, cleanses, converts and consolidates master data fed from source enterprise systems including SAP, Siebel and Microstrategy etc..
-Integrated Master Data Centre with Enterprise Database Warehouse and Business Intelligence for master data lookup.
MDS Diagnosis Global Oracle Ebusiness Suite Implementation Project (10/2006 - 11/2006)
Role: Applications DBA Lead
-Performed Infrastructure design and capacity planning for Oracle Ebusiness 11i.
-Formed instance strategy and built environment with lower to higher instances.
-Upgraded GL, AR, AP and HRMS family packages; Participated HRMS functional configuration;
-Provided training and performed knowledge transition to support team.
United Airlines Oracle Ebusiness Suite Custom Master Data Implementation Project (05/2006 - 10/2006)
Role: Oracle EBS Architect/Administrator
-Planned, designed and built Oracle Ebusiness 11.5.9 environments.
-Integrated Oracle Customer Data Hub with partner systems using IBM Middleware Websphere and MQ.
-Formed instance, security and patching strategies and change control, code migration procedures.
Carlson Companies Oracle Ebusiness Suite Implementation and support project (08/2005 - 05/2006)
Role: Application DBA Lead
-Participated Oracle Ebusiness business requirements analysis.
-Participated in transitioning the operation of Oracle Financials Applications from Carlson to IBM Package Delivery Organization.
-Identified transition items and preparing transition readiness checklist; engaging in on-site client knowledge transfer sessions;
-Formed IBM support NA and off-shore Indian team by interviewing apps DBAs and mentoring junior team members.
-Implemented the post-transition functional enhancement, including: reengineering lockbox processes and auto payment cycles.
-Revised responsibilities for new user community.
-Implemented EBS printing and performed daily technical and functional support.
Project: BC Ferries Oracle Ebusiness Suite Implementation Project (10/2004 - 08/2005)
Role: Senior Apps DBA
-The project included GL, AP, AR, FA, PO, PA, QA, INV, HRMS, MRP, and iProcurement.
-Responsible for cloning, upgrading, patching, database tuning, system administration, Oracle Workflow administration, concurrent manager administration, backup/recovery, troubleshooting, script development, code deployment and documentation.
-Implemented and deployed code for integration interfaces between Oracle applications and external applications such as Maximo, SmartTime timesheet application and Payroll system.
-Participated implementation, deployment and support of replication solution for distributed databases.
-As a solution architect in e-commerce department, participated in formulating ecommerce product strategies and evaluating underlying database and LDAP platforms.
-Implemented database and application clustering solution for Nortel Global Service Data Center.
-Designed and implemented database and LDAP for Nortel Application Service Provider (ASP) platform. Responsibility includes: disk subsystem configuration, High Availability and clustering solution, capacity planning, information analysis and data modeling, physical and logic schema design, and backup recovery strategy.
-As database expert on third tier support line, provided database solution and support to global customers. Maintained hundreds of internal and customers’ hosted database. The sizes of the database vary from gig bytes to tera bytes.
1998,3 ---- 2000,1 DBA/Unix Admin IT Consultant Kaos Consulting, WA
-As a database and Unix instructor, trained client’s IT staffs.
1993,3 ---- 1997,8 Software developer/Architect Sunleado Software Co. , Shanghai, China
-Started as a C++ developer in the telecommunication software development team.
-Promoted to Software Architect after two years. Led the software development. Streamlined the software development procedures and workflows. Formulated the company’s software development standard and policies.