Paul Costello

• Guided InfoSec project teams in implementing new IAM/PAM processes and applications, including Sailpoint and Thycotic (Delinea)
• Developed and documented workflows for new environments
• Initiated and documented procedures for stricter security standards in network and database security, and the remediation of existing issues
• Collaborated with cross-functional teams, external service providers, vendors, and business organizations to enhance security and assess risks (PCI, NIST, AWS Security Hub, etc.)
• Identified and resolved security risks, aligning with the strategic roadmap
• Directed the implementation of security standards and best practices
• Oversaw the improved AWS Security Hub scores across the organization
• Led the implementation of Tufin for network operations and security
• Created and implemented a project plan for the deployment of Guardium for database monitoring
• Assisted senior management in helping to bring TracFone information security posture, processes, standards, and guidelines to more-closely mirror those used within Verizon.
• Coordinated resources across multiple departments and teams as needed for successful completion of projects.
• Identified risks associated with each project and developed strategies for mitigating those risks.
• Built and established strong partnerships with teams, vendors and contractors.
• Developed and maintained project plans, timelines, and budgets.
• Managed multiple projects with competing deadlines simultaneously.
• Developed and updated project plans to document objectives, technologies, schedules, and funding.
• Identified needs and coordinated resource allocation to deliver quality standards on time and within budget.

• Led project teams and planned stages within an Agile software development environment
• Managed scope, timeline, and cost of projects, addressing risks and issues
• Monitored progress, ensuring deadlines, standards, and cost targets were met
• Acted as Scrum Master and facilitated cross-team collaboration
• Participated in Scrum of Scrums discussions and maintained work visibility across teams.

• Project manager for a multi-team, multi-discipline effort to design, build, and deploy new (and updated) REMS client-facing websites per client specifications within the clinical trial data space
• Create user stories and walk those stories through an iterative process with QA, development, and client resources to ensure scope, requirements, and later FDA approvals are met
• Managed issues, concerns, and changes to baseline requirements by identifying the business impact of the requests and deciding on the best route to ensure resolution of each, within scope and within the allotted time.
• Built and established strong partnerships with teams, vendors and contractors.

• Project manager for a multi-team effort to capture non-personal, high-privilege application and database accounts from servers, databases, and applications, and move them into CyberArk for secure identity access management (IAM)
• Acted as Scrum Master in an Agile environment as part of a company-wide Privileged Access Management endeavor
• Performed analysis of non-person accounts and determine their suitability within various CyberArk platforms and safes
• Responsible for overseeing the process of moving accounts from their current-state into a state where they are managed automatically by CyberArk
• Collaborated with cybersecurity management with the creation and distribution of governance guidelines and documentation
• Created, executed, monitored, and revised project plan as needed to meet changing project requirements and resources; planned, prepared for, and facilitated project status meetings; managed resolution of project issues including proper escalation to project stakeholders
• Identified project resource requirements and timelines, and negotiated with IT service leads on resource availability and allocation; led team members to complete assigned tasks within specified timelines
• Collaborated with the Product Owner and other stakeholders to assess project risks and ensure mitigation strategies are in place
• Provided direction and support to the project team
• Monitored and reported on progress of the project to stakeholders
• Facilitated issue identification and resolution.
• Drove continuous improvement of project delivery process by providing strong leadership.
• Created project plans with established timelines, assigned to appropriate teams and managed workflow throughout construction.
• Provided guidance to team members regarding tasks assigned to them.
• Furnished project updates to various stakeholders, informing on strategy, adjustments and progress.
• Implemented effective communication protocols between internal teams working on different aspects of a given project.

• Business and Quality Analyst working on a CA PPM implementation project in an Agile setting
• Elicitation and documentation of business requirements for new CA PPM implementation
• Responsible for writing both business and technical requirements in relation to a new project management application
• SharePoint site owner and designer for multiple intraproject teams
• Assigned role as Lead testing analyst, responsible for creating test cases and UAT test scripts, and leading testing efforts in an Agile environment within HP ALM
• Managed UAT tasks with testers - walking them through testing steps, taking notes about enhancements they require, and where they need additional training
• Prepared documentation summarizing findings from stakeholder meetings and workshops.

• Gathered and documented application requirements in preparation for a new hardware implementation across three business units
• Wrote requirements specifications, using natural language simply, clearly, unambiguously, and concisely
• Organized and led stakeholder meetings
• Managed and communicated application requirements
• Documented processes and procedures to ensure adherence to current and future compliance standards
• Served as vendor’s (Doble) point-of-contact for technical requirements and specifications.
• Disseminated information regarding tools, reports or metadata enhancements.
• Presented complex technical concepts in a clear manner suitable for non-technical audiences.
• Translated user needs into actionable items that could be addressed by IT teams.

• Elicited, documented, and managed the business requirements around the upgrade of Planisware’s OPX2 application within an Agile environment using Microsoft Team Foundation Server (TFS)
• Served as point-of-contact, managing expectations and deliverables between multiple business and IT divisions
• Researched technical issues and change requests, channeling communications between problem ticket owners and the vendor development team
• Managed issues and changes to baseline requirements by identifying business impact of the changes, and through effective application of change control processes and tools
• Documented all requests for modifications and customizations, and tested new functionality when introduced
• Acted as liaison and conduit between the business and the technical teams, ensuring the steady flow of accurate information around both current and future application features and functionality.
• Collaborated with stakeholders to define features, integrations and partnerships.
• Drafted functional specifications documents outlining project scope, objectives and deliverables.

• As a Business Analyst working within both the IT and Infrastructure departments, my scope of responsibilities spanned both applications and infrastructure (hardware) as noted: IT - Solicited, defined, wrote, and managed the business requirements for the purchase and configuration of Siemens’ Crossbow application, for use within electricity substations
• Managed traceability of requirements to ensure alignment to project goals and objectives, as well as alignment to development and testing plans
• Created process flows and procedures for implementation and use of the application
• Facilitated requirements-gathering sessions with both electrical engineering and IT personnel for Crossbow, while documenting needs and disseminating those documents to all relevant departments for review and approval
• Aided the project team in the development of design specifications for both reports and application configuration
• Worked with the Compliance department to address and ameliorate concerns related to NERC/CIP compliance strategies and implementation associated with application documentation
• Documented pre- and post-deployment objectives, roles, responsibilities, and tasks across multiple functional teams
• Supported traceability from requirements through QA, assisting in the definition of a test plan, implementing testing strategies, and participated in the creation of test cases
• Assisted the QA team in their manual testing efforts
• Infrastructure - Participated in the relocation of the main disaster recovery center from one city to another, documenting all processes and procedures around disaster recovery and network continuity
• Created audience-appropriate documentation including, but not limited to: Support processes and process flows, procedure models, instructions, and all related user documentation
• Liaised with audit compliance to ensure all documentation was correct and proper
• Collaborated with all IT teams on the creation and implementation of an Operational Support Model for new, NERC-compliant network devices and equipment deployed to electricity substations which previously had none
• Responsible for documenting all new support processes regarding this new equipment, and created KnowledgeBase articles for the IT Help Center to follow in case they were contacted with questions, concerns, or new issues.
• Maintained open communication with team members and stakeholders, resulting in successful project outcomes.
• Worked successfully with diverse group of coworkers to accomplish goals and address issues related to our products and services.
• Planned and completed group projects, working smoothly with others.
• Conducted stakeholder interviews to understand user needs and preferences.

* Researched and wrote user stories and tasks within an SEI Wealth Platform Scaled Agile scrum team via Rally.
* Created and executed manual testing scenarios for new features, captured in Rally, while documenting defects.
* Tracked progress of change, project, and release tasks, and provided QA updates during scrum meetings.
* Performed functional, integration, and regression testing within the scrum team.
* Worked with the project team to evaluate impact of defects and to develop plans for resolution or other mitigation.
* Aided in specifying and documenting the acceptance criteria for both user stories and tasks.
* Presented the team’s accomplishments to stakeholders via bi-monthly Agile scrum demos.
* Elicited, documented, and shared business requirements with the scrum team via stand-up meetings and Confluence.
* Communicated and collaborated with internal clients to analyze information needs on an ongoing basis.
* Acted as Scrum Master when required.

* Traveled around the country to speak directly with Customer Service Representatives and their supervisors and management, in order to elicit and document requirements for a large-scale application intended to be used in their daily work.
* Gathered and documented business-level requirements from various departments in support of multiple projects.
* Created all documentation artifacts associated with the aforementioned projects.
* Participated in the testing process for new functionality alongside software QA resources.
* Assisted the vendor (Pega) with data modeling, to accurately match their application with the Quest requirements.

• Provided and supported implementation of business solutions by identifying business needs and carrying out necessary practices and processes.

* As a project manager: Responsible for the facilitation of all aspects of IT application projects, including Security, Training, Documentation, and Support, with sole responsibility for multiple projects at all times.
* Created an IT Style Guide to be used throughout corporate IT when creating or modifying documentation.
* Authored an entire document set for an upgrade of the Concur Hosted Online Expense application, including four user guides and a training program created in Adobe Captivate.
* Conducted training classes, via WebEx and teleconference, for 600+ users for a PeopleSoft Human Capital Management-Manager Self Service (PS HCM-MSS) application upgrade.
* Edited and maintained all user-level documentation as regards the PeopleSoft HCM-MSS application.
* Point-of-contact for all departmental documentation, including creating and editing technical documents, user-level documents, training documents, SOPs, and SLAs.
* Created and distributed a yearly departmental survey distributed to internal clients.
* Developed two intranet sites for use by both inter- and intradepartmental personnel to process terminations and submit corporate communication requests.
* Collaborated with both IT and business management to establish a strategy and architecture for the use of SalesForce as the new corporate CRM system.
* Prioritized and managed SFDC initiatives in accordance with the requirements of business needs.
* Worked with the Business Sponsor to define the scope of SFDC projects and timelines associated with completion and rollout of SFDC.
* Orchestrated and facilitated meetings and collaborative discussions for requirements gathering, modifications, and functionality needs while documenting them.
* Assisted the project manager with implementation and processes related to quality assurance (QA) and user-assisted testing (UAT) tasks.

* Worked closely with project sponsors, stakeholders, and project manager to document the product’s vision, and the scope of both the project and the product.
* Elicited business requirements for a new client-facing enterprise-level application using interviews, document analysis, requirements workshops, business process descriptions, use cases, scenarios, task and workflow analysis.
* Developed wireframes, mock-ups, user journey maps, and other UX design documentation in connection with the product designer to drive the design.
* Served as the conduit between the client community and the development team through which requirements flowed.
* Communicated and collaborated with internal clients to analyze data and information needs on an ongoing basis.
* Created and distributed all project documentation, including: Business requirements, Functional requirements, Use Cases, Screen and Interface designs, UAT test cases.
* Demonstrated excellent verbal and written communication skills, and the ability to interact professionally with a diverse group, including executives, managers, and subject matter experts.
* Led and liaised with offshore QA team twice weekly, reviewing test cases and testing results.
* Performed interface testing to confirm adherence to client requirements.
* Tracked all reported QA issues and defects in JIRA.

* Used business processes and functional designs to create test scenarios (high-level descriptions of functional and technical areas to test), test conditions, and high-level expected results.
* Created detailed instructions for how to test a specified function and the expected results of each step (test planning).
* Prepared data used when executing all test procedures, including regression testing.
* Created regression test scripts to test the existing functionality, to ensure new changes had no impact.
* Liaised with stakeholders to define test parameters and ensured completion of all pertinent testing prior to go-live.
* Compiled and reported metrics of test execution activities (actual results vs expected results) and logged defects.
* Worked with the application team to resolve any issues that arose out of the testing process.
* Assisted in following up on logged defects and supported re-test activities.
* Completed a successful implementation and roll-out of IQ Navigator and SAP Service Management:
- End-to-end integration testing with SAP, Windows, Secured FTP, and IQN
- Coordination of go-live activities, including training support for both users and managers, and go-live support.