Every named engagement

Digital Public Infrastructure Trust Platform — Single Point of Trust

Independent development · 2020 – Present · continued at PIR2-IT · Ref: Prj001

Contract / project brief Brochure

DLT-enabled, AI-supported, Zero Trust eGovernment platform designed for national-scale digital public infrastructure. Treats trust as a system property rather than a policy statement — centralising identity assurance, policy enforcement, evidence generation and service integrity. Architecture prototype (validated concept) applied to a European government transformation programme.

Key capabilities

• DLT evidence layer — immutable audit trails for transactions, access decisions and service states; verifiable receipts; real-time audit readiness
• Zero Trust as operating model — continuous authorisation, least privilege, policy-as-code enforcement, tamper-evident logging
• AI under governance — guided digital journeys, anomaly detection, case routing and explainable operational analytics; all outputs policy-bounded and reviewable
• Interoperability — legacy systems, APIs, event-driven patterns and cross-institution workflows under controlled compliance rules
• Cross-institution accountability at national scale — traceable decisions, structured evidence, aligned service integrity

Frameworks: Digital Public Infrastructure · DLT evidence architecture · Zero Trust (NIST SP 800-207) · AI governance / explainability · EU eIDAS interoperability

4× security posture · 4× elimination of operational dead time · 72% less duplication · 12% fraud reduction · 45% less information loss

Governance Execution Framework — GARI Accountability Architecture

Independent development · 2020 – Present · continued at PIR2-IT · Ref: Prj002

Contract / project brief Brochure

Execution-ready governance framework with AI-assisted oversight for public institutions and multilateral programmes. Transforms governance from recommendation-based activity into structured accountability architecture. Delivered across 35 institutional engagements; flagship reference programme: ~250–300 personnel, USD 45M+ annual budget.

Key capabilities

• Single Point of Institutional Clarity — aligns mandate, execution and oversight without centralising operational authority
• Auditability by default — decisions, processes and resource flows traceable through structured accountability chains and embedded reporting logic
• AI-assisted analysis — dependency mapping, anomaly and inefficiency detection, accountability-chain analysis, workflow optimisation; all outputs reviewable and institutionally controlled
• RACI-aligned governance layers, evidence-based execution monitoring and institutional learning loops
• Cross-institution integration for ministries, agencies and multilateral programmes

Frameworks: Governance execution architecture · Algorithmic audit principles · RACI · AI-assisted analytical oversight · Evidence-based execution monitoring

41 contracts renegotiated · 21 terminated · 29 irregularities identified · 6 non-operational positions · −36% OPEX · USD 1.33M costs avoided

Sensor Fusion & Autonomous Mobility Platform — Mission-grade AI

PIR2-IT · 2024 – Present · Ref: Prj004

Contract / project brief Brochure

Prototype AI platform combining high-performance computer vision, radar + camera sensor fusion and audit-ready reporting for regulated mission environments. Master–agent orchestration model with modular architecture. Currently in iterative hardening and integration validation.

Key capabilities

• Radar + high-performance camera fusion — improved confidence scoring, reduced false positives, anomaly detection
• AI perception and event detection optimised for edge deployment in demanding field conditions
• Multi-sensor detection picture: radar, RF direction finding, EO/IR cameras, acoustic — fused into single operating picture
• AI-assisted classification with confidence scoring, traceable evidence (time, location, sensor provenance, decision logs)
• Geofencing, policy-defined alerting and escalation workflows with human governance
• Automatic evidence trails and structured logs for oversight, accountability and post-event analysis
• GNSS-challenged resilience — redundancy and graceful degradation
• Zero Trust security across sensors, edge compute and services; tamper-evident logging
• V&V discipline: requirements → design → implementation → test evidence traceability; regression controls; configuration baselines

Boundary: detection, awareness, secure integration, governance, V&V. No weaponization or interception.

Prototype platform · Zero Trust · Audit-ready · Edge AI

Governed Autonomous Systems Architecture — AI-Enabled Modular UAS

PIR2-IT · 2024 – Present · Ref: Prj003

Contract / project brief Brochure

Modular AI-enabled UAS demonstrator built around a mothership coordinating multiple deployable sub-vehicles under governed operating logic. Treats autonomy as an engineering, governance and assurance problem — not novelty. Architecture, AI systems engineering, cybersecurity, integration and V&V delivered as a validated demonstrator for regulated operational environments.

Key capabilities

• Mothership + sub-vehicle distributed operations — modular subsystem boundaries for reconfiguration, maintainability and lifecycle control
• Edge AI onboard: real-time perception, situational awareness, sensor fusion and tracking to reduce false positives
• Autonomy support for routing, task allocation and contingency handling within non-lethal, governed scope
• Multi-vehicle coordination; anomaly detection and interference awareness
• Predictive health monitoring for reliability and maintainability across test cycles
• AI outputs logged, traceable and explainable — designed for oversight and post-event review
• Threat-informed design, Zero Trust principles, security-by-design
• Traceability from requirements to architecture, implementation and test evidence; configuration baselines; decision logs
• Resilience in GNSS-challenged environments through graceful degradation
• Interoperability considerations aligned with coalition and multi-stakeholder environments

Boundary: architecture, AI systems engineering, cybersecurity, integration, governance, assurance. No weaponization or interception.

Advanced demonstrator · Modular · Distributed · Explainable AI · Zero Trust

23 international and Romanian banks — transformation & cybersecurity

PIR2-IT · Worldwide · 2024 – Present

Contract / project brief Brochure

Large-scale banking transformation and cybersecurity programmes — core-banking migrations, data-centre consolidation, cybersecurity modernisation. 19 of the 23 are FSB-designated G-SIBs; client identities withheld under confidentiality.

23-bank portfolio

Enterprise PAM / IAM — satellite + Azure AD + AD FS

PIR2-IT · Worldwide · 2024 – Present

Contract / project brief Brochure

Enterprise PAM/IAM solutions integrating satellite networks, Azure AD and on-prem AD FS — improving privileged-access governance and authentication security.

—

Palo Alto · CyberArk · CrowdStrike · DLP · SIEM · DDoS

PIR2-IT · Worldwide · 2024 – Present

Contract / project brief Brochure

Product Owner & senior technical authority across cybersecurity platforms (Palo Alto, CyberArk, CrowdStrike, DLP, SIEM, vulnerability management, DDoS). Automation and advanced diagnostics.

MTTR reduced by up to 58%

Romanian Ministry of Energy — AI engine + energy modelling

PIR2-IT · Romania · 2024 – Present

Contract / project brief Brochure

AI natural-language engine and online energy-system modelling platform supporting EU energy-transition planning.

—

eJustice AI — Armenia 2025–2026 (Phase 2 AI Agentic Upgrade)

PIR2-IT · Armenian Government & National Police · Yerevan · 2025 – 2026 (direct continuation of 2014–2015 UNDP/EU programme)

Contract / project brief Brochure

Phase 2 AI agentic upgrade for the National Police criminal justice platform — direct continuation of the 2014–2015 full-lifecycle eJustice programme. Deliverables: AI case routing and decision-support (NLP-based); EU AI Act governance framework (bias assessment, transparency, auditability, human-in-the-loop safeguards); national trainer certification in responsible AI; supervision and audit of implementation.

EU AI Act compliance framework · ~€60M programme (cumulative Phase 1 + 2)

eJustice AI — Georgia 2026 (Phase 2 AI Agentic Upgrade)

PIR2-IT · Georgian Government · 112 Emergency Services / eJustice · Tbilisi · 2026 (direct continuation of 2014–2015 UNDP programme)

Contract / project brief Brochure

Phase 2 AI agentic upgrade for the 112 Emergency Services / eJustice platform — direct continuation of the 2014–2015 full-lifecycle programme. Deliverables: AI dispatch optimisation and predictive resource allocation; AI transparency and accountability framework; national trainer certification in AI adoption; supervision and audit of implementation.

UNDP / EU frameworks · ~$50M programme (cumulative Phase 1 + 2)

AI Governance & Agentic eJustice — 35 States (EU AI Act Aligned)

PIR2-IT · Worldwide · 2024 – Present

Contract / project brief Brochure

AI-enabled eJustice and DPI governance across 35 states, fully aligned to the EU AI Act. Scope: NLP case routing and triage; predictive court scheduling; AI-assisted legal document processing; automated cross-border judicial cooperation flows (e-CODEX/ECRIS-compatible); digital evidence chain-of-custody; citizen-facing identity-verified portal; human-in-the-loop safeguards; full audit trails. National governance domains: justice and law enforcement, public administration, healthcare, financial regulation, energy and critical infrastructure, defence. Full ToR lifecycle delivered (diagnostic → vision → architecture → governance → roadmap → delivery → M&E → supervision and audit → continual improvement).

Role: supported clients in producing financing, M&E and supervision documentation required by multilateral institutions — no direct contract with WBG, JBIC, Asian Development Bank or EBRD.

Frameworks: WBG | JBIC | ADB | EBRD | EU | FIDIC

Digital Public Infrastructure — 35 States

PIR2-IT · Worldwide · 2024 – Present

Contract / project brief Brochure

eIDAS-compatible digital identity and trust services; data exchange and interoperability (API/iPaaS/ESB/eventing); e-signature, electronic notary, and national PKI; citizen-facing portals. Phased roadmaps, funding strategies, M&E frameworks, and supervision of implementation for each engagement across 35 states. Professional services delivered throughout the full project lifecycle for the majority of citizens in each country.

Role: supported clients in producing financing, M&E and supervision documentation required by multilateral institutions — no direct contract with WBG/ID4D, UNDP/UNOPS or EBRD.

Frameworks: WBG ID4D | EU Structural Funds | FIDIC | UNDP/UNOPS

eAI-PR / MAPE — AI Publishing Governance Ecosystem

PIR2-IT · UN · NATO · EEAS · IBM context · 2024 – Present · Ref: Prj005

Contract / project brief Brochure

AI-driven publishing governance ecosystem of specialised AI personas under strict human-in-the-loop design, serving content strategy across editorial, multilingual, compliance and performance dimensions. Built on experience at UN, NATO, EEAS and IBM. Orchestrated via LangGraph · AutoGen · AWS Bedrock · Azure AI Studio. One consolidated implementation ~45% of full scope in production with four further modules in active testing. Scale: ~1,000–3,000 platform users; 200–600 concurrent operators; 27+ languages.

Five capability groups

• A — Editorial Excellence: multi-tier automated editing, intelligent abstracting, narrative fluency tuning, multimodal asset blueprinting, AI graphics, editorial scheduler, content classification.
• B — Logical Auditing & Credibility: mathematical/logical sanity auditing, source verification and provenance mapping, dynamic citation engine, reputation intelligence and OSINT. KPI: −27% content/governance errors; zero statistical hallucinations before publication
• C — Institutional Alignment & Political Risk: geopolitical sensitivity screening, diplomatic localisation (border/territory nomenclature enforcement, dual-agent back-translation, confidence scoring for human veto), EU AI Act / ISO 42001 / NIST AI RMF compliance. KPI: zero reputational/political incidents
• D — Web Performance & Real-Time Interaction: behavioural click/heatmap tracking, real-time KPI dashboarding, A/B testing automation, deep engagement scoring. KPI: +32–45% active users; +21% UX optimisation
• E — Format Analysis & UI/UX: automated layout auditing, WCAG accessibility scanning, multi-device responsive QC. KPI: consistent cross-device reading experience worldwide

Stack: LangGraph · AutoGen · AWS Bedrock · Azure AI Studio · Adobe Analytics · GA4 · Hotjar · EU AI Act · ISO/IEC 42001 · NIST AI RMF

−27% errors · +32–45% active users · USD 3.9M structural value optimised · 27+ languages · zero diplomatic incidents

Open-source government interoperability platform

PIR2-IT · 2024 – Present · prototype to production

Contract / project brief Brochure

Federated data exchange (X-Road / GovStack-aligned), API-first and event-driven integration, Zero Trust, sovereign cloud and data residency, mTLS and end-to-end encryption, verifiable credentials and policy-as-code governance — post-quantum ready by design.

Government interoperability & data exchange — hub and federated patterns

Multi-country · 2024 – Present

Contract / project brief Brochure

Base-registry integration (population, civil registration, cadastre, vehicle, business) through centralised govESB hubs or federated X-Road-style exchange, chosen per country readiness; canonical models, adapters and mediation, real-time and batch exchange, message-level signing and encryption (JWS / XAdES), mTLS and HSM-backed keys; once-only, life-event service design.

39 data structures / schemas defined

Cross-border judicial data exchange — e-CODEX / ECRIS

EU member states · 2024 – Present

Contract / project brief Brochure

Decentralised, federated exchange of criminal records and judicial-cooperation data between member states — distributed nodes, no central data store — with identity-verified access and digital-evidence chain of custody.

National eHealth data exchange — HL7 / FHIR

Romania · national programme

Contract / project brief Brochure

ePrescription, electronic health record (eHealthFile) and national vaccination-registry exchange between hospitals and the national health-insurance fund — consent-based, role-governed sectoral data sharing.

20M-record vaccination registry

Country data-exchange diagnostics & reference architectures

Multi-country · 2024 – Present

Contract / project brief Brochure

Diagnostics of governance, institutional readiness and technical maturity; maturity-ladder roadmaps; reusable reference architectures and integration patterns; technical specifications, ToR and procurement documents for IFI-funded data-exchange components. Technical inputs for World Bank and other IFI operations (Aide-Mémoire, ISR, technical annexes, ToR).

Quantum-safe migration & cryptographic agility

Sovereign and regulated institutions · Middle East & Europe · 2024 – Present

Contract / project brief Brochure

Quantum threat assessment, cryptographic inventory and migration roadmaps to NIST post-quantum standards; crypto-agility for PKI, HSM-backed key management and trust services; board-level quantum strategy for sovereign clients.

NIST PQC (FIPS 203 / 204 / 205) roadmaps

Post-quantum roadmap for national PKI & ePassport trust services

Romania · national PKI

Contract / project brief Brochure

Quantum-safe migration roadmap for the national PKI behind the biometric ePassport and eID — root and subordinate CAs, CRL / OCSP and HSM-backed keys — sequenced to protect long-lived identity credentials against harvest-now-decrypt-later risk.

Quantum-readiness advisory for a Gulf sovereign digital programme

Gulf government · 2025 · quantum-safe migration & hyperscale advisory

Contract / project brief Brochure

Quantum-readiness plan bridging the client's cryptography team and procurement board: risk prioritisation, migration sequencing, vendor requirements and governance — the plan the client defended before national-security oversight.

Telemedicine & agentic AI — 52 hospitals

DSU · University Emergency Hospital Bucharest · Târgu Mureș · 49 further EU / non-EU hospitals · 2019 – Present

Contract / project brief Brochure

Tele-consultation and tele-triage, emergency-care coordination with DSU, and AI decision, workflow and diagnostics support at the point of care; integrated over HL7 / FHIR, DICOM and IHE; EU AI Act / ISO 42001 governance with human-in-the-loop clinical safeguards. Started at the Innovation Center, scaled at PIR2-IT.

52 hospitals

Affordable AI-for-health package for low-income countries

Low-income countries · in development

Contract / project brief Brochure

Low-cost, human-in-the-loop health-AI package: tele-triage for primary care, image and lab-result interpretation, prescribing-safety checks, referral management, commodity forecasting and early-warning analytics; offline-first, multilingual, with federated learning so health data stays in-country.

Payment DPI & government-to-person benefit cards

National programmes

Contract / project brief Brochure

National payment interoperability and G2P rails — instant payments, TransFond clearing connectivity, ISO 20022 — with benefit-card programmes linked to identity and eligibility registries.

6M subsidy cards · 8M social-aid cards

AI-driven governance engine

Independent development · 2021 – Present · continued at PIR2-IT

Contract / project brief Brochure

AI engine for accountability, transparency and decision traceability in public- and private-sector organisations: links strategic objectives, policies, responsibilities and measurable outcomes into one governance model, with risk, compliance and audit support — the foundation of GARI.

Agentic AI for IT service operations

Banking and defence clients · 2024 – Present

Contract / project brief Brochure

Multi-agent orchestration (LangGraph, AutoGen, CrewAI) and LLM reasoning integrated into ServiceNow ITSM — incident, problem, change and asset — with RAG, human-in-the-loop controls and audit guardrails.

AIOps & agentic decision support

Banking, defence and public sector · 2024 – Present

Contract / project brief Brochure

Self-healing operations — anomaly detection, bottleneck identification, predictive incident classification and automated remediation integrated with monitoring and CI/CD — plus an agentic module generating ROI, TCO and scenario comparisons for investment decisions, strictly human-in-the-loop.

Pro-bono & reduced-fee DPI advisory for low-income countries

Low- and middle-income countries · ongoing

Contract / project brief Brochure

Free or reduced-fee technical advisory where budget constraints would otherwise stall critical interoperability and DPI work — diagnostics, roadmaps and implementation guidance.

Capacity building & national trainer certification

Across roles · 1996 – Present

Contract / project brief Brochure

Trainings, workshops and coaching for government, institutional and industry teams, incl. national trainer certification in responsible AI (Armenia 2025–2026, Georgia 2026).

62 trainings · 100+ presentations

Internal IT programmes — cost, PMO, governance, sourcing, optimisation, ERP, risk

PIR2-IT · 2024 – Present

• Cost optimisation — Portfolio rationalisation — 978 components assessed, 324 retired, 297 consolidated; up to US$1.9M savings.
• PMO implementation — Portfolio KPI dashboards across cost, reliability, risk and delivery (SLA / SLO, MTTR, change success, TCO, backlog flow).
• IT governance — TOGAF ADM governance with an architecture review board; COSO / ICFR-aligned controls — 100% evidence completeness, audit cycle −33%.
• Smart-outsourcing optimisation — Joint and sub-contracting delivery with top-tier partners while keeping the advisory role vendor-neutral; KPI-based supplier management.
• Hardware & software optimisation — Standardised canonical models, API contracts and event schemas; infrastructure and licence consolidation across client estates.
• ERP implementation — ICFR-style controls on SAP, PeopleSoft and Oracle EBS touchpoints — reconciliation, audit trails, error handling.
• Risk analysis — ServiceNow GRC; AI model-risk management under the EU AI Act and ISO 42001; donor-investment and fiduciary risk frameworks.

US$1.9M savings · audit cycle −33%

NATO CS-NDW — Governance Framework · Cloud Adoption · DevSecOps

NATO / NCIA · NDW / CPS · The Hague · 2023 – 2024 · Ref: interim Section Head

Defined and operationalised the governance framework for the Content Services — NATO Digital Workplace (CS-NDW) programme. Covered cloud adoption strategy, security cloud architecture and DevSecOps integration across a classified NATO environment.

• CS-NDW governance framework — decision authority, accountability chains, escalation paths, ARB integration
• Cloud adoption roadmap for NATO classified and unclassified environments — hybrid cloud boundaries, policy-as-code
• Security cloud architecture — Zero Trust alignment, classification-aware access controls, compartmentalisation
• DevSecOps pipeline design — security gates, automated compliance checks, release governance in NATO Secret domain
• STANAG and NAF alignment across architecture decisions; CD&E methodology applied to capability requirements
• Stakeholder governance across 32 NATO nations — executive reporting, audit evidence, decision registers

Frameworks: NAF · STANAG · NATO INFOSEC · Zero Trust · DevSecOps · CD&E · PRINCE2 · ISO 27001

📄 Letters of recommendation available · Named contacts provided upon request · NDA applies to classified details

NATO NDW / CPS — Content Collaboration Section (interim head)

NATO / NCIA · The Hague · Aug 2023 – May 2024

Contract / project brief

Interim Section Head accountable for the end-to-end service lifecycle of Content Collaboration platforms (Semantic MediaWiki and associated). Direct accountability for SLAs / OLAs across classified environments, service-change governance, CAB representation, KPI definition and reporting.

Key activities

• Coordinated and monitored 2nd- / 3rd-line support, incident investigation and root-cause resolution
• Served as first point of escalation for major incidents affecting the services
• Coordinated change enablement and release / deployment, representing services at CABs by delegation of the SAO
• Authorised new release packages and supported transition into service operation
• Defined and reported KPIs and associated service metrics; proactively monitored them

Frameworks: NIST 800-53 · ISO 27001 · ITIL v3 (service lifecycle) · PRINCE2

SLA / OLA portfolio · classified environments

NATO content-collaboration hybrid-cloud migration

NATO / NCIA · The Hague · 2023 – 2024

Contract / project brief

Migrated all NATO content-collaboration systems to hybrid cloud. Immutable / audit-ready versioning patterns. PAM/IAM, SIEM/SOAR and GRC platforms integrated with satellite and terrestrial networks for mission-critical environments.

Key activities

• Designed secure-infrastructure architecture aligning controls with NIST 800-53 and ISO 27001
• Delivered 3rd-line operational support and advanced troubleshooting across classified estates
• Integrated satellite-enabled PAM/IAM with SIEM/SOAR and GRC for cross-domain access governance
• Translated complex security-architecture concepts into actionable guidance for stakeholders

Frameworks: NIST 800-53 · ISO 27001 · Hybrid-cloud reference architecture

—

InfoSec policy, phishing exercises & PII handling

NATO / NCIA · The Hague · 2023 – 2024

Contract / project brief

Oversaw all InfoSec policies tied to Content Collaboration lifecycle management. Designed and led phishing / social-engineering exercises and awareness training. Managed privacy complaints and internal risk registers. Conducted internal audits and served as escalation point for incidents affecting PII.

Frameworks: ISO 27001 · GDPR · NIST CSF · NATO information-handling directives

—

Integration backbone & portfolio rationalisation

NATO / NCIA · The Hague · 2023 – 2024

Contract / project brief

Integration backbone (API / iPaaS / ESB / event-driven) and IAM across classified and unclassified domains; 821 components assessed, 369 retired and 115 consolidated into a governed target landscape. Interface and dependency inventory for cross-domain exchange; 29 data structures / schemas defined.

US$3.9M value

Internal IT programmes — cost, PMO, governance, sourcing, optimisation, ERP, risk

NATO / NCIA · 2023 – 2024

• Cost optimisation — Standardisation and self-service across collaboration services — US$3.9M value.
• PMO implementation — SLA / OLA portfolio with KPI definition, reporting and proactive monitoring; budget up to OPEX US$41M / CAPEX US$24M.
• IT governance — COSO / ICFR-style controls (RACI, evidence standards, segregation of duties, change traceability); CAB representation.
• Smart-outsourcing optimisation — KPI-driven vendor scorecards for 2nd / 3rd-line suppliers.
• Hardware & software optimisation — 821 components assessed — 369 retired, 115 consolidated into a governed target landscape.
• ERP implementation — Oracle EBA (travel & expense) touchpoints and corporate-platform integration within the collaboration estate.
• Risk analysis — Risk registers, PII-incident escalation and InfoSec risk treatment across classified environments.

US$3.9M value · 821 components

EEAS Cyber Security & Architecture programme

EEAS · Brussels · Jun 2022 – Jul 2023

Contract / project brief

Co-led the EEAS Portfolio Manager of Infrastructure function focusing on technical aspects, integration and operation of critical mission systems. Defined yearly EEAS portfolio (Technical Coherence, Digital Transformation, Cyber Defence) and aligned projects / programmes for cross-EEAS coherence.

Key activities

• Led 32 matrix reports across apps migration, networking, satellite and cybersecurity engineering
• Deployed NGFW (Palo Alto, FortiGate, Check Point), WAF, IDS/IPS, sandbox, EDR, DLP, vulnerability management, PAM, IAM and DDoS protection
• Served as escalation point for 3rd-line troubleshooting and architecture validation; single point of contact with vendor 3rd-line
• Established cloud-governance frameworks, cost-optimisation and performance-monitoring practice
• Performed TOGAF modelling, architecture and design across capability targets, operational requirements and interoperability requirements

Frameworks: TOGAF · ISO 27001 · GDPR · NIST 800-53 · COBIT · ITIL · IIBA · IREB · PRINCE2 · Agile

Team 50+ · multi-domain portfolio

EU BICES — intelligence networking

EEAS · Brussels · 2022 – 2023

Classified — details withheld.

EU Intelligence Applications

EEAS · Brussels · 2022 – 2023

Classified — details withheld.

EEAS C3 — cyberspace requirements & architecture

EEAS · Brussels · 2022 – 2023

Classified — details withheld.

EU Space & satellite security architecture

EEAS · Brussels · 2022 – 2023

Contract / project brief

Security architecture for EU Space programmes and hybrid satellite / terrestrial networks. PAM/IAM, SIEM/SOAR and GRC platforms integrated with satellite communications for mission-critical EU operations.

Frameworks: ISO 27001 · NIST 800-53 · TOGAF · PCI DSS · GDPR

—

EEAS Disaster Recovery Centre

EEAS · Brussels · 2022 – 2023

Contract / project brief

Disaster Recovery Centre design and implementation for EEAS critical mission systems. RTO / RPO definition, failover testing and continuity evidence.

Frameworks: ISO 22301 · ISO 27031 · NIST CSF

—

EEAS Document Management System

EEAS · Brussels · 2022 – 2023

Contract / project brief

Document Management System architecture and secure integration for EEAS, with traceability and audit-ready versioning across institutional content lifecycle.

Frameworks: ISO 27001 · GDPR · ISO/IEC 24760 (identity) · TOGAF

—

EEAS Oracle EBS upgrade with encryption & identity governance

EEAS · Brussels · 2022 – 2023

Contract / project brief

Secure cloud migration and Oracle E-Business Suite upgrade with embedded encryption (AES-256), tokenisation, identity governance and data-protection controls.

Frameworks: ISO 27001 · PCI DSS · GDPR · NIST 800-53

—

EEAS apps migration & hybrid-cloud adoption

EEAS · Brussels · 2022 – 2023

Contract / project brief

Cloud-security and architecture programmes across AWS, Azure and GCP. Apps migration combined with containerisation, serverless and hybrid-cloud patterns for scalability, automation and operational resilience.

Frameworks: AWS Well-Architected · Azure CAF · GCP Cloud Adoption · DevSecOps · ITIL v3 · ISO 27001

—

Network backbone & integration consolidation

EEAS · Brussels · 2022 – 2023

Contract / project brief

12 networks / 267 devices consolidated under iWAN / PAN with Zero Trust segmentation; integration estate consolidated (ESB / iPaaS / API / event-driven); 224 components assessed, 91 retired, 116 consolidated. Orchestration and event-driven choreography across EU institutional systems and delegations.

US$1.4M savings

Secure multi-domain network & C4 architecture

EEAS · Brussels · 2022 – 2023

Contract / project brief

Multi-domain (classified / unclassified) network architecture, secure data exchange and interoperability with partner systems for multinational operational collaboration; NAF and Federated Mission Networking concepts; high-availability secure communications.

Internal IT programmes — cost, PMO, governance, sourcing, optimisation, ERP, risk

EEAS · 2022 – 2023

• Cost optimisation — Rationalisation and backbone consolidation — US$1.4M savings.
• PMO implementation — SAFe / Agile portfolio delivery — PI planning, backlog governance, quality gates; business cases and stage gates.
• IT governance — Yearly infrastructure portfolio definition with benefits realisation; budget up to OPEX US$29M / CAPEX US$14M.
• Smart-outsourcing optimisation — Multi-vendor delivery governance with operational and programme controls.
• Hardware & software optimisation — 224 components assessed — 91 retired, 116 consolidated; 12 networks / 267 devices consolidated.
• ERP implementation — Oracle EBS and PeopleSoft touchpoint integration with ICFR-style controls.
• Risk analysis — Risk assessment of cloud migrations and security architecture (ISO 31000, NIST 800-53).

US$1.4M savings

U.S. DoD — JEDI / JWCC / JADC2 — Cloud Access Management (CAM)

Innovation Center · 2019 – 2022

Classified — details withheld.

IT audits & security assessments — banks & multinationals

Innovation Center · 2019 – 2022

Contract / project brief

Lead IT audits and security assessments for clients across Financial Services (Citibank, DB, Group Société Générale, Raiffeisen), Service Industry, Public Sector (Interpol, EU), Healthcare, and Manufacturing (Mercedes-Benz, Airbus).

—

Cyber Crisis Management programme

Innovation Center · 2019 – 2022

Contract / project brief

Advise, implement and manage the Cyber Crisis Management programme — strategic crisis decision-making, large-scale crisis response.

—

SIEM platforms with AI / ML threat-hunting

Innovation Center · 2019 – 2022

Contract / project brief

Operate SIEM platforms with threat-hunting capabilities. Combined proactive and reactive incident management using AI, Machine Learning, Elastic Search, cloud technology to rapidly adapt and respond to cyber disruptions. Real-time decisioning for ongoing security incidents.

—

Global Security Operations Center oversight

Innovation Center · 2019 – 2022

Contract / project brief

Oversee Global SOC positions in daily tasks and projects. Selection of technology (cloud, SOA, etc.), devices and software for the network and information security infrastructure. Cryptographic key management in support of the CIO function.

—

CyberPro — AI-driven cybersecurity platform

Innovation Center · 2019 – 2022

Contract / project brief

Designed, developed and operationalised "CyberPro", an AI-driven cybersecurity platform integrating SIEM (Splunk, QRadar), SOAR (Cortex XSOAR, IBM Resilient), EDR (CrowdStrike, Carbon Black, Defender for Endpoint) and DLP (Symantec, Microsoft Purview) for real-time threat correlation and automated incident response.

Key activities

• Network defence with Palo Alto, FortiGate, Check Point, IDS/IPS (Snort, Suricata), Zscaler, Proofpoint
• Unified risk dashboard integrating SIEM + GRC metrics
• Third-party risk assessments, policy mapping, SOC 2 / ISO 22301 business-continuity validation
• ISO 27001 audit readiness, PCI DSS gap analyses, GDPR compliance

Frameworks: ISO 27001 · PCI DSS · NIST 800-53 · ISO 22301 · SOC 2 · GDPR · COBIT 5 · ITIL v3

+53% improvement · 1,750+ hours saved

IBM Zero Trust · micro-segmentation · HSM key management

Innovation Center · 2019 – 2022

Contract / project brief

Zero Trust architectures, network micro-segmentation and encryption programme (TLS 1.3, AES-256, HSM-based key management) for defence and financial-services clients of the Innovation Center.

Key activities

• Architected hybrid and multi-cloud environments (Azure, AWS, GCP) with secure connectivity, monitoring and identity governance
• Centralised IAM (Azure AD, Okta, CyberArk PAM) with cloud-native monitoring (Azure Sentinel, AWS GuardDuty, Security Hub)
• Enforced secure-design standards across requirements, design and deployment with teams of 25+ engineers / architects

Frameworks: Zero Trust (NIST 800-207) · ISO 27001 · NIST 800-53 · PCI DSS · TOGAF

—

IBM DevSecOps pipeline — containers + secrets management

Innovation Center · 2019 – 2022

Contract / project brief

Containerised workloads (Docker, Kubernetes, OpenShift) with DevSecOps pipelines (Jenkins, GitLab CI/CD, HashiCorp Vault) enforcing security-as-code across Innovation Center delivery.

Frameworks: DevSecOps · CIS Kubernetes Benchmark · OWASP · ISO 27001 · NIST 800-53

—

Telemedicine & AI for emergency medicine

DSU · University Emergency Hospital Bucharest · Târgu Mureș · 2019 – 2022

Contract / project brief

Telemedicine and AI systems for the Romanian emergency-medicine ecosystem, integrated over HL7 / FHIR and DICOM with governed, human-in-the-loop AI — later scaled to 52 hospitals at PIR2-IT.

SCOMAR v2 — maritime surveillance C2 modernisation

Romanian MoD / Border Police · 2020

Contract / project brief

Architect and technical project manager for the second version of the Black Sea maritime-surveillance command-and-control system: C2 modernisation with interoperability to legacy sensors and systems, high-availability secure communications and hybrid infrastructure for mission-critical services.

Integration platforms & secure data-exchange patterns

Innovation Center · 2019 – 2022

Contract / project brief

Enterprise integration, orchestration and event-driven choreography (ESB / iPaaS / API / event-driven) across defence, banking and public-sector data sources and suppliers; reusable integration and security reference architectures; encryption and key management in transit and at rest.

62 data structures / schemas defined

Application rationalisation & network unification

Innovation Center · 2019 – 2022

Contract / project brief

601 applications assessed, 131 retired and 198 consolidated; 12 networks (121 devices) unified under iWAN / PAN and Zero Trust; data governance and canonical standards.

US$2.6M savings

WHO collaboration — digital supply chain for health

Industry-side contribution · 2019 – 2022

Contract / project brief

Contribution from the industry side to collaboration with the World Health Organization on digital supply-chain transformation and information management for health.

AI policy & digital-strategy advisory — Romanian Government and EU programmes

Romania / EU · 2020 – 2023 · B2B advisory

Contract / project brief

Research and advisory on the impact of AI and emerging technologies on national and institutional strategy; enterprise-architecture, cybersecurity and smart-outsourcing / IT-procurement advice aligned with EU programme rules and national policy.

Internal IT programmes — cost, PMO, governance, sourcing, optimisation, ERP, risk

Innovation Center · 2019 – 2022

• Cost optimisation — Application-estate rationalisation — US$2.6M savings.
• PMO implementation — PoC → MVP → production delivery pipeline with portfolio governance for delivery squads of 25+.
• IT governance — Data governance (ownership, classification, lineage) and ISO 27001 audit readiness.
• Smart-outsourcing optimisation — Sourcing model balancing internal capability and external partners for client delivery.
• Hardware & software optimisation — 601 applications assessed — 131 retired, 198 consolidated; 12 networks (121 devices) unified.
• ERP implementation — Enterprise-system integration standards — canonical models, API contracts and event schemas.
• Risk analysis — Unified SIEM + GRC risk dashboards; third-party risk assessments.

US$2.6M savings

eGovernment Blockchain engine — designed, sold & integrated into IBM

Innovation Center · 2019 – 2022

Contract / project brief

Conceptualised a state-of-the-art Blockchain engine tailored for e-government — cryptographic assurance, controlled access models, immutable evidence trails. Successfully negotiated the sale to IBM and coordinated its integration into IBM's global public-sector solution stack.

Frameworks: Hyperledger Fabric · Quorum · Corda · ISO/IEC 24760 · TOGAF · NIST 800-53

—

UN SIEM platforms — real-time AI / ML threat-hunting

UN HQ / OICT · 2016 – 2019

Contract / project brief

Designed, implemented and operated UN SIEM platforms with real-time, automated threat-hunting capabilities. Combined proactive and reactive incident management using AI, ML, Elastic Search, cloud. Real-time decisioning for security incidents.

—

UN hybrid cloud (Azure + AWS), IoT, DLT, big data, virtualization

UN HQ / OICT · 2016 – 2019

Contract / project brief

Drove cloud requirements, security controls and implementation (Azure and AWS), IoT, DLT, big data, virtualization, Office 365, BCP, code development, DevSecOps. Aligned security, technology, application and financial/business processes to new cloud environment and mobile.

Significant cost savings via Microsoft / Oracle / Cisco renegotiation

DevSecOps automation — security in the continuous-delivery pipeline

UN HQ / OICT · 2016 – 2019

Contract / project brief

Automated DevSecOps with security and vulnerability detection in the continuous-delivery workflow. Every build checked every time. Risk assessment based on actual libraries called in context of the environment and dependencies.

—

United ID — UN System inter-agency harmonisation

UN HQ / OICT · 2016 – 2019

Contract / project brief

Worked at Enterprise level to increase system-wide harmonisation on ICT matters through inter-agency mechanisms (United ID). Common ICT security approaches and solutions (processes, standards) for the entire UN System. Liaised with Finance, HR and internal-affairs units across UN — Umoja system.

—

UN blockchain community & strategy

UN HQ / OICT · 2016 – 2019

Contract / project brief

Created a blockchain community and acted as leader to develop a strategy for the UN. Spoke at UN events on Digital ID solutions / blockchain and digital currencies, TechNovation Day: Blockchain.

—

UN M365 E5 Security Suite deployment

UN HQ / OICT · 2016 – 2019

Contract / project brief

Deployment of Microsoft 365 E5 Security Suite across UN workforce — DLP, MFA, Intune MDM, Conditional Access — supporting the global cybersecurity and digital-workplace transformation.

Frameworks: Microsoft Zero Trust · ISO 27001 · NIST 800-53 · GDPR

—

UNOPS Oracle EBS R12 upgrade — tokenisation & database encryption

UNOPS · 2016 – 2019

Contract / project brief

Oracle E-Business Suite R12 upgrade across the UNOPS estate with tokenisation and database encryption embedded, aligning ERP security to PCI DSS-grade controls.

Frameworks: PCI DSS · ISO 27001 · NIST 800-53

—

UN active-active data-centre architecture

UN HQ / OICT · 2016 – 2019

Contract / project brief

Active-active data-centre architecture with automated failover using VMware SRM and Azure Site Recovery. Tested results: 99.98% availability, RTO < 4h, RPO 15 min.

Frameworks: ISO 22301 · ISO 27031 · NIST CSF

99.98% availability · RTO < 4h · RPO 15 min (tested)

UN Smart-Outsourcing programme (SOC · infrastructure · DevSecOps)

UN HQ / OICT · 2016 – 2019

Contract / project brief

Smart-Outsourcing programme covering SOC, infrastructure and DevSecOps operations. Delivered USD 3.2M OPEX savings while maintaining PCI DSS Level 1 compliance.

Frameworks: ITIL v3 · PCI DSS · ISO 27001 · COBIT 5

USD 3.2M OPEX savings

UN enterprise agreements — Microsoft + AWS with security / performance KPIs

UN HQ / OICT · 2016 – 2019

Contract / project brief

Negotiated enterprise agreements with Microsoft and AWS embedding performance and security KPIs. Yielded ~20% annual cost optimisation across UN workloads.

Frameworks: Vendor governance · Microsoft Cloud Adoption Framework · AWS Well-Architected · ITIL v3

~20% annual cost optimisation

UN Zero Trust + security-awareness enterprise programmes

UN HQ / OICT · 2016 – 2019

Contract / project brief

Enterprise-wide Zero Trust programme combined with security-awareness training, improving organisational resilience and compliance maturity. ISO 27001 / PCI DSS / GDPR / SOC 2 audit findings reduced by 35% within one year.

Frameworks: Zero Trust · ISO 27001 · PCI DSS · GDPR · SOC 2

-35% audit findings within 1 year

ICJ & ICC — International Courts Digitalisation (The Hague)

UN HQ / OICT · International Court of Justice & International Criminal Court · The Hague · 2016 – 2019

Classified — details withheld.

UNAT & UNDT — Digital Justice Strategy & Target Architecture

UN HQ / OICT · UN Administrative Tribunal & UN Dispute Tribunal · New York · 2016 – 2019

Classified — details withheld.

18-Country Digital Public Services Programme — Asia & Africa

UN HQ / OICT · Afghanistan, Bangladesh, Cambodia, Ethiopia, Kenya, Myanmar, Nepal, Pakistan, Rwanda, Senegal, Tanzania, Uganda, Zimbabwe & others · 2016 – 2019

Contract / project brief

Digital public services, national identity infrastructure, e-governance platforms, and capacity building across 18 UN member states in Asia and Africa. Professional services delivered throughout the full project lifecycle — diagnostic, strategic vision, governance framework, phased roadmap, target architecture, change management plan, M&E framework, supervision and audit of implementation — for the majority of citizens in each country.

OPEX US$56M / CAPEX US$12M (UN HQ portfolio)

Digital workplace product cycle

UN OICT · 2016 – 2019

Contract / project brief

Voice-of-customer → roadmap → governed releases for the UN digital workplace, with WCAG-aligned accessibility.

120,000 users (95% of workforce)

Network backbone consolidation & application rationalisation

UN OICT · 2016 – 2019

Contract / project brief

42 networks / 469 devices consolidated under iWAN / PAN with segmentation and defence-in-depth; 408 applications assessed, 181 retired, 175 consolidated.

US$2.1M savings

Digital banking & cybersecurity for the UN — collaboration with an affiliated financial institution

UN HQ · 2016 – 2019 · 250K+ members in 120+ countries

Contract / project brief

Hybrid multi-cloud for mission-critical banking applications with Zero Trust and micro-segmentation; product ownership of cybersecurity platforms; 80% of workloads migrated to hybrid cloud with PCI DSS Level 1 maintained.

MTTR −55%

Internal IT programmes — cost, PMO, governance, sourcing, optimisation, ERP, risk

UN HQ · 2016 – 2019

• Cost optimisation — Rationalisation US$2.1M; Smart-Outsourcing USD 3.2M OPEX savings; ~20% annual cost optimisation on Microsoft / AWS agreements.
• PMO implementation — KPI lifecycle governance — intake → prioritisation → delivery → run → retire; budget up to OPEX US$56M / CAPEX US$12M.
• IT governance — ISO 27001 / SOC 2 / COSO controls — −35% audit findings in year one.
• Smart-outsourcing optimisation — Smart-Outsourcing programme for SOC, infrastructure and DevSecOps operations; Microsoft, Oracle and Cisco renegotiations.
• Hardware & software optimisation — 408 applications assessed — 181 retired, 175 consolidated; 42 networks / 469 devices consolidated.
• ERP implementation — Umoja (SAP) and Oracle EBS R12 touchpoints — tokenisation, encryption and ICFR-style controls.
• Risk analysis — Enterprise risk management (ISO 31000, UN risk-management framework).

US$2.1M + US$3.2M savings

NNHQ Target Architecture & ICT migration

NATO HQ / NCIA · Brussels · 2015 – 2016

Contract / project brief

Coordinate with NNHQ Transition Office (HQTO) for migration of personnel and equipment into the NNHQ. Coordinate with ANWI project (Infrastructure-as-a-Service hosting all business and applications). Comment and propose ICT migration paths. Maintain ICT technical drawings, space allocation and inventory. Contribute to NNHQ Target Architecture (TA) → Baseline Architecture (BA).

US$110M component (NATO Certificate of Appreciation)

ANWI / AVI / ESS contractor coordination

NATO HQ / NCIA · 2015 – 2016

Contract / project brief

Coordinate with NNHQ contractors — Active Network Infrastructure (ANWI) for IaaS, Audio-Visual Infrastructure (AVI), Electronic Security Services (ESS). Vendor relationships and IT-related contracts.

—

Disaster recovery + 90% server virtualization

NATO HQ / NCIA · 2015 – 2016

Contract / project brief

Designed and executed first disaster-recovery centre fail-over. Successful DR plan and business continuity plan. Led server virtualization effort — virtualized 90% of systems infrastructure. AIS audits and system accreditation for classified systems.

—

Internal IT programmes — cost, PMO, governance, sourcing, optimisation, ERP, risk

NATO HQ · 2015 – 2016

• Cost optimisation — Procurement-alternative studies for the new-HQ migration.
• PMO implementation — Programme / project boards and decision-support briefings for a US$110M component of the NNHQ programme.
• IT governance — Target → baseline architecture (TOGAF) and change-request governance.
• Smart-outsourcing optimisation — Coordination of ANWI, AVI and ESS contractors; requirements re-shaped jointly with the prime supplier.
• Hardware & software optimisation — 90% of systems infrastructure virtualised; ICT service inventory for migration.
• ERP implementation — Business and technical requirements for corporate applications moving into the new HQ.
• Risk analysis — AIS audits and accreditation support for classified systems; DR and continuity planning.

90% virtualised

INTERPOL Global Complex for Innovation — IT Security Advisor (via contractor)

Independent Advisory · Singapore · Jan 2015 – Sep 2015 · 90 working days · via a top-tier international management consultancy, Singapore

Contract / project brief

Led six task forces to deliver strategy, observations and recommendations for enhancing institutional, operational, legal and technical frameworks for digital identity and cybercrime. Business analysis, strategic and security challenges, new concept and strategy translated into business and technical requirements for the National Cyber Review II (NCR) — spanning 196 INTERPOL member states. Drafted methodology for cyber-defence policy, concepts and capabilities at national level. Engagement via a top-tier international management consultancy, Singapore — no direct INTERPOL contract.

National Cyber Review II · 196 member states

Senior IT Adviser — EU Regulation 910/2014 (eIDAS)

Groupe Société Générale · EU · Jan 2011 – Sep 2015 · 140 working days

Contract / project brief

Senior IT advisory framework contract on Regulation (EU) No 910/2014 — electronic identification and trust services for electronic transactions in the internal market (repealing Directive 1999/93/EC).

—

SSEDIC — Single European Digital Identity Community (5-year programme)

IBM · EU · 2009 – 2015

Contract / project brief

5-year consultation period with 200+ European and international eID experts and stakeholder organisations. Recommendations and roadmap for the Single European Digital Identity Community supporting Horizon 2020.

—

Emergency services architecture — Georgia (112)

UNDP & EU Advisory · Tbilisi, Georgia · Oct 2014 – Oct 2015 · 50–90 days

Contract / project brief

Architecture, coding, security, operation and data-protection of emergency services. Enterprise Architecture Strategy & Roadmap. Technical roadmap for emergency video-call service. BMC Remedy Suite + Kinetics framework. Established a Center for Secure Information Systems & Digital Identity. Trained the trainers. http://112.ge

US$50M committed

National digital identity for Armenia — Police IT system

UNDP & EU Advisory · Yerevan, Armenia · Mar 2014 – Oct 2015 · 60–90 days

Contract / project brief

Armenian Government & Armenian Police — new IT system: digital identity architecture, cyber-security, data centre, DRC, personal data protection, risk management. Single secured and unified information environment (e-Governance). Roadmap and budget for interoperability with criminal justice, voting, idCard, passport, cadastre, justice, car registration, insurance.

US$60M committed

Digital identity, people registration & voting — Afghanistan

UNDP · Kabul, Afghanistan · Aug 2013 – Jul 2015 · 75 days

Contract / project brief

Validate business model, functional requirements, and obtain support for new digital identity management for people registration and voting. Solution Design Team management. Technical roadmap for implementation. Lead consulting team (3 experts). Risk assessment and mitigation.

US$36M budget

ECB cloud / digital architecture & digital currency

ECB · Frankfurt, DE · Sep 2014 – Nov 2015 · 120 working days

Contract / project brief

Lead Solution Design team for modern cloud / digital and digital-currency architecture. Identify and document business flows, data exchanges, identity authorisation and security level. Integrations with European and governmental agencies. Updated Business Continuity Plan.

—

ENISA — National Cyber Security Strategy framework

ENISA · EU · Aug 2013 – Dec 2013 · 60 working days

Contract / project brief

Member of expert advisory group defining the National Cyber Security Strategy (NCSS) framework and action plan to improve security and resilience of EU national infrastructures and services. Part of the task force ensuring that national eIDs work for cross-border public-service access in EU.

—

Cernavoda NPP (Nuclearelectrica / SIVECO) — IT Advisor

Groupe Société Générale · Romania · Sep 2013 – Aug 2015 · 190 days

Contract / project brief

Restructured entire SMS system (BMC 8.5 → 9), new workflows. Reengineered processes for Change & Service Request, Unified Event Management with event correlation, Service Catalogue and Service Level Management. Cyber-security audit per NRC Title 10 §73.54, NRC RG 5.71, NEI 08-09, NEI 13-10, 10 CFR 73.54, NIST SP800-53/82, ISO 2700x. Audit of DCS, HMI, PLC, RTU, SCADA. 100% audit compliance achieved.

—

Document Management & Portal System — Romanian Immigration

Groupe Société Générale · Romania · May 2013 – Aug 2013 · 69 days

SMC implementation based on IBM Tivoli Suite. Classified-environment requirements shaped the information-security and technical design (Approved products, certification, homologation). Solution design with Azure cloud, Microsoft 2008 Suite, MS SQL 2008. Custom software development (700 person-days). WEB Services / XML integration. Enterprise IBM servers, Enterprise SAN, LTO, LAN/WAN, CA IAM, PKI. Established small PMO.

—

IT Health System — ePrescription, ePatientFolder

Groupe Société Générale · Romania · Sep 2013 – Aug 2015 · 90–120 days

Contract / project brief

Solution design with Oracle WebLogic and DB 11g. Custom software development (700 person-days, Java). Integration via Web Services / XML. IBM Cloud, Mobile devices, VMware, Oracle Finance, BPM, IBM servers, Enterprise SAN, LTO, LAN/WAN, IAM Oracle, PKI, BCP. Data centre relocation. SAP NW Identity Management implementation. Center for Secure Information Systems with trained trainers. ISO 2700x compliance support. PMO setup.

—

Romanian election IT system

Romania · 2011 – 2015

Contract / project brief

Scope and budget definition and solution-design team lead: Oracle WebLogic / DB 11g with 400 person-days of custom .NET development, web-service integration with existing systems, data protection and security, enterprise infrastructure; RFI / RFP and contract strategy; audit.

National IT disaster-monitoring system

Romania · 2011 – 2015

Contract / project brief

Solution design with 900 person-days of custom Java development on Oracle WebLogic / DB 11g; integration, data migration, business continuity and disaster-recovery centre; procurement strategy (single vs multi-supplier lots) and quality-assurance system.

Large-scale WiMAX programme — enterprise architecture & design authority

UN-funded programme · 2013 – 2015

Contract / project brief

Defined, audited and developed the enterprise-architecture strategy and roadmap and acted as design authority for the transformation programme (broadband, M2M, cloud services).

MM4P (Mobile Money for the Poor) — technical appraisal

UN programme · 2013 – 2015

Contract / project brief

Technical review of project descriptions, ToR and partner agreements; on-site appraisals of proposed partners; technical evaluations and endorsements; performance targets and review of partner business and pilot plans.

Internal IT programmes — cost, PMO, governance, sourcing, optimisation, ERP, risk

Framework contracts & BRD · 2011 – 2015

• Cost optimisation — BRD Cost Efficiency Programme — >€5M / year savings, target exceeded by 11%; 39% IT cost savings in year one; US$1.9M rationalisation.
• PMO implementation — Enterprise PMO at BRD — 27 project managers and 20 change / service-management experts; PMOs created for national eHealth and immigration programmes.
• IT governance — Enterprise-architecture standards, principles and roadmap; IT budgeting for a budget above €40M; 120+ audit recommendations closed (89%).
• Smart-outsourcing optimisation — Procurement strategy — COTS vs custom, fixed price vs time & materials, single vs multi-supplier lots.
• Hardware & software optimisation — Data-centre and recovery-centre optimisation (+27% efficiency); 300 servers and 350+ applications in scope.
• ERP implementation — Core banking (Finacle / Flexcube) architecture; Microsoft EPM enterprise project-management platform for 110+ users.
• Risk analysis — Risk analysis of financial and statistical data; post-implementation and security audits.

>€5M / year · 39% Y1 savings

VAUBAN — IT PMO Head / IT Director, Banking Transformation

Groupe Société Générale · Bucharest · May 2011 – Aug 2013 · Full-time

Contract / project brief

PMO effective operation, IT Strategic Planning and Banking Transformation Programme. Set-up Center for Secure Information Systems. Enterprise Architecture Strategy & Roadmap. Coordination with PMOs/CSICs in Croatia, France, Bulgaria, Moldova. New Core Banking — INFOSYS Finacle / Oracle Flexcube. Cards & alternative channels (Mobile/Internet Banking, WU@ATM, WU@POS, prepaid). 900+ servers, 550+ applications, 120+ audit recommendations closed (89%).

US$63M budget · 39% IT cost savings in Y1 · US$1.9M rationalisation savings

BRD — cybersecurity architecture & audit remediation

BRD — Groupe Société Générale · 2011 – 2013

Contract / project brief

Multi-tier cyber-security architecture (firewalls, WAF, hardening, security tooling, processes and policies) across 300 servers and 350+ applications, with business-continuity plan; data-centre and recovery-centre optimisation (+27% efficiency).

120+ audit recommendations closed (89%)

BRD — enterprise PMO & Cost Efficiency Programme

BRD — Groupe Société Générale · 2011 – 2013

Contract / project brief

Created the enterprise PMO (27 project managers, 20 change / service-management experts); PRINCE2 / PMI / ITIL portfolio methodology for 10,000+ users; IT budgeting for a budget above €40M; Cost Efficiency Programme launching the bank-transformation programmes.

>€5M / year savings · target exceeded by 11%

Transfond — electronic payment & inter-banking compensation

IBM · Romania · 2008 – 2011

Contract / project brief

IT system for electronic payment (T24, Murex, TI+) and inter-banking compensation. Process design and compliance with international mechanisms. Data protection. PCI-DSS & ISO 27001 certification. 30T transactions/day. 99.9998% availability.

—

IBM Data-Center — Tier 4 (~8000 m²)

IBM · Romania · 2009 – 2011

Contract / project brief

Led from business case through Go Live: new IBM Data-Center (~8000 m², 99.995%/year). Defined and implemented business and operational processes. Service Catalogue, Budget management, SLA monitoring. Service-provider processes for PaaS, AaaS, SaaS, IaaS (cloud private, hybrid, public). ISO 27001/27002 risk assessment. PCI-DSS & ISO 2700x certification support.

SD consolidation: 45 small SD → 1 central · €500K/year saving

ECB · EU · CE · ING · Citibank · JPM · Raiffeisen · Société Générale · CEC Bank

IBM · Multi-country · 2008 – 2011

Contract / project brief

IT Risk Analysis System (ISO 2700x). Solution design of new Core Banking. Cloud private/public PoC. Data centre relocation, HW/SW/MW/NW/SAN consolidation. Set-up Business Intelligence Competence Center (Data Architecture, Quality, Governance, BI & Executive Dashboard).

—

Raiffeisen — Risk & Card upgrade + CSIS

IBM · Romania · 2008 – 2011

Contract / project brief

Upgraded Risk Analysis System (Murex), Card System (Murex), RISC and x86 server infrastructure. Center for Secure Information Systems: SIEM, DB Security, ISMS & ISR, MDM, Managed Security Services. Process improvement (ITIL).

—

Romanian Ministry of Internal Affairs — National Cyber Security

IBM · Romania · Oct 2008 – May 2011

Contract / project brief

Large-scale cyber-defence system (>€4M, EU funds). Unitary mechanism of reaction and response to security incidents. Risk reduction, knowledge, capabilities and decision mechanisms in the Romanian Government. 250 offices / 500,000 assets across the country. Service Management System (Tivoli Business Service Manager), SLA monitoring. ISO 2700x, NIST. http://www.natowatch.org/node/1532

>€4M (EU funds)

Romanian Electronic Passport — sovereign programme

IBM · Romania · Aug 2008 – Nov 2010

Contract / project brief

Architecture + project management of large-scale system covering full ePassport lifecycle. Sensitive environment. Training for 500+ users. 4 main sites / 4 Tier-3 data centres, 45+ offices in Romania, 250+ offices worldwide. Business continuity. New business and operational processes. ISO 27001 risk assessment, audit, policy.

>€30M

Romanian National Agency of Cadastre & Land Registration

IBM · Romania · 2008 – 2011

Contract / project brief

Roll-out of enterprise IT system (infrastructure, application, business processes) for cartographic products and Ortophotoplan coverage (GIS), cadastral plans, topographic plans for the entire country.

>€7M

Single Window — cross-border trade Romania / EU

IBM · EU + Romania · 2008 – 2011

Contract / project brief

European Commission and Romanian Ministry of Finance. Single Window application and infrastructure (design, project management, training, change management). Set-up Business Intelligence Competence Center.

>€2.3M (EU funds)

IBM Blue Gene Supercomputer

IBM · Romania · 2008 – 2011

Contract / project brief

Only supercomputer of its size in Romania and one of 3 in Central / Eastern Europe at the time. 13.9 TFlops compute power: 1024 processors, 4096 cores, 4 TB RAM, 32 I/O nodes.

—

National ePassport programmes (multi-country)

IBM · Romania · Moldova · Bulgaria · Slovenia · Poland · Spain · Hungary · Egypt · Nigeria · UAE · 2009 – 2011

Contract / project brief

Subject-matter expert for national biometric travel-document architecture, secure issuance chain, ICAO-compliant chip personalisation, PKI trust services, border-control integration.

Multi-country sovereign programmes

National eID and citizen identity (multi-country)

IBM · Romania · Moldova · Bulgaria · Croatia · Poland · Slovenia · Spain · Hungary · Egypt · Nigeria · UAE · 2009 – 2011

Contract / project brief

Sovereign citizen-identity platforms — authentication, credential issuance, national PKI integration. End-to-end Digital Public & Private Business — citizen onboarding and cross-border eID access (eIDAS interoperability).

Multi-country sovereign programmes

National eHealth — patient registration & ePrescription

IBM · Romania · Moldova · Ukraine · Armenia · Georgia · Greece · 2009 – 2011

Contract / project brief

Patient registration, ePrescription, EHR exchange, identity-linked patient access, audit-ready clinical data flows.

—

Cadastre / land-registry digitalisation (multi-country)

IBM · Romania · Bulgaria · Moldova · Ukraine · Hungary · 2009 – 2011

Contract / project brief

Sovereign land-registry digitalisation — geospatial data integrity, registration workflows, judiciary and notary interoperability.

—

eJustice Romania

IBM · Romania · 2009 – 2011

Contract / project brief

Citizen access to justice services based on digital identification.

—

National PKI Romania

IBM · Romania · 2009 – 2011

Contract / project brief

Root and subordinate CAs, certificate lifecycle, trust anchors for sovereign identity and document services.

—

EURODAC + Asylum DB

IBM · EU · 2009 – 2011 (advisory continuing)

Contract / project brief

Senior IT Adviser on EURODAC — fingerprint datasets to determine responsibility for examining asylum applications across EU States.

—

Telekom Romania — NGN, MPLS, M2M, OSS/BSS upgrade

IBM · Romania · 2008 – 2011

Contract / project brief

Framework contract upgrade and extension of NGN, MPLS, M2M, OSS/BSS. Whole-system transformation. IT Security audit (ISO 27001).

FwC >€30M

IBM + Vodafone — M2M / Cloud & Virtualisation / IoT PoC

IBM · Worldwide · 2009 – 2011

Contract / project brief

Proof of concept for M2M system: private hosted virtualisation (VMware ESX / IBM POWER LPAR) and private cloud PoC (2010–2011), M2M connectivity, AaaS, BSS/OSS integration and transformation plan. Security architecture.

—

IBM EMEA Center of Excellence — Defence & Security (internal CoE leadership)

IBM · Worldwide / Bucharest · 2008 – 2011

Contract / project brief

Led the IBM EMEA Center of Excellence for Defence and Security. Defined and managed business and technical requirements; architected / designed critical military systems; co-led development, verification and validation across 28+ IT upgrade / migration projects.

Key activities

• Defined yearly IBM Portfolio across Technical Coherence, Digital Transformation and Cyber Defence
• Performed TOGAF modelling, architecture and design across capability targets and interoperability requirements
• Direct support of national / international / multi-national C2, C3, C5 activities
• Collaborated with 146 national / international military and civilian organisations including 36 Centres of Excellence

Frameworks: TOGAF · COBIT · ITIL · PRINCE2 · RUP · ISO 900X · ISO 27K · ISO 31000 · NIST · C2I / C3I / C4ISR / C5I · VMware ESX/vSphere · IBM POWER LPAR · IBM z/VM · Hyper-V · Virtualisation architecture

28+ IT upgrade / migration projects · 146 orgs · 36 CoEs

IRIS — SNCFR National Railway Digital Transformation

IBM · Societatea Naţională a Căilor Ferate Române (SNCFR) · Romania · 2008 – 2011

Contract / project brief

Enterprise IT architecture for national railway digital transformation. Scope: safety-critical systems, passenger services, operations infrastructure, and IT/OT integration. Architecture definition, technology roadmap, and delivery oversight for one of Romania's largest state-owned transport enterprises.

IBM Romania national programme

SCOMAR v1 — Black Sea maritime surveillance C2

Romanian MoD · 2008

Contract / project brief

Architect and technical project manager for the first version of the Black Sea maritime-surveillance command-and-control system: multi-sensor integration, secure communications and multi-agency data exchange.

National interoperability backbone — SOA / ESB / govESB

Romania · 2008 – 2011

Contract / project brief

Government interoperability over SOAP / XML web services and SOA / ESB, evolving to a government ESB: ePassport, eID, eCadastre, eHealth and civil registration interoperating over national PKI and trust services for once-only data reuse; WS-Security, XML-DSig / XAdES, ebXML.

48 data structures / schemas defined

Bank data-centre relocation & consolidation

Commercial banks · Romania · 2008 – 2011

Contract / project brief

Data-centre relocation, application and infrastructure consolidation, ITIL service catalogue, business-continuity plan and BI upgrade; new Tier-4 data centre (1,500 m²) and new IT security concept.

−32% applications · −26% servers

SAP audit & consultancy — oil and gas

Oil & gas client · 2008 – 2011

Contract / project brief

Led the audit and consultancy team for an SAP solution in the oil and gas sector.

Bid design for NATO, banking and security tenders

IBM · 2008 – 2011

Contract / project brief

Solution design, compliance and pricing for bids to NATO, banks and security agencies; specifications and SOWs for contractors.

€3M in new contracts won

Internal IT programmes — cost, PMO, governance, sourcing, optimisation, ERP, risk

IBM · 2008 – 2011

• Cost optimisation — 25+ projects a cumulative 9 months ahead of plan, saving €3.72M; IT cost-saving programme — 27% year-one savings sustained for three years.
• PMO implementation — Active in the IBM worldwide PMO Centre of Excellence; project boards and steering committees up to C-level.
• IT governance — TOGAF-based solution design; 100% traceability (requirements → tests → approvals → deployment) and 99%+ acceptance.
• Smart-outsourcing optimisation — Specifications and SOWs for contractors and consultants.
• Hardware & software optimisation — −32% applications and −26% servers after data-centre consolidation; rationalisation across 1,000+ applications.
• ERP implementation — SAP audit and consultancy (oil and gas); core-banking, card and BI upgrades.
• Risk analysis — IT risk-analysis system (ISO 2700x); ISO 27001 risk assessments.

€3.72M saved · 27% Y1 savings

C2 / C3 / C5I — critical military systems

IBM EMEA CoE Defence & Security · Worldwide · 2008 – 2011

Contract / project brief

Direct support of national and multinational C2, C3 and C5 activities. Architecture and design of critical military systems across 28+ IT upgrade and migration projects, with development, verification and validation; 146 military and civilian organisations supported, including 36 Centres of Excellence.

Frameworks: C2I · C3I · C4ISR · C5I · NAF · STANAG

Motorola Center of Excellence for Cybersecurity (CoE-CS)

Motorola · Worldwide · 2006 – 2008

Contract / project brief

Developed and led Motorola CoE-CS. Strategy and design of major systems initiatives around information security worldwide. Recognised as main pillar — invested in: US$18M (2006) and US$26M (2007). 35 experts directed; 23 new experts hired with 108 internationally recognised certifications.

US$18M (2006) + US$26M (2007)

Crypto-X program — digital / biometric identity & authorisation

Motorola · Worldwide · 2006 – 2008

Contract / project brief

Established the Crypto-X programme and digital / biometric identity and authorisation initiatives. Coordinated Linux software developers across USA, Canada, Brazil, China, India, UK, France, Germany on cores, peripherals and device drivers (crypto devices, digital identification, IP Security protocols).

—

Motorola estate cyber-rationalisation + CSIS

Motorola · Worldwide · 2006 – 2008

Contract / project brief

Assessed >3,000 legacy applications, consolidated 839. Defined Motorola Cybersecurity policy and standards (defence-in-depth · segmentation · least-privilege). Redesigned Internet Access Point and network topology (firmware rules, VPNs, router security, SSL). Established Center for Secure Information Systems (CSIS). Implemented Motorola's first internal/external cybersecurity audit and compliance program.

—

Oracle PeopleSoft — HRMS, FMS, SCM, CRM, EPM

Motorola · Worldwide · 2006 – 2008

Contract / project brief

Implemented Oracle PeopleSoft (HRMS, Financial Management Solutions, SCM, CRM, Enterprise Performance Management) and Oracle ESB at organisational level.

US$45M budget executed