Juan Carlos Gomez

Due Diligence in an AI Enterprise in Krakow/Poland

Due Diligence in a Digital Bank Enterprise in Boston/USA

ing a major transformation towards an agile factory model. Key participant in transitioning teams to the Scaled Agile Framework (SAFe 4.5). Coaching for PM/PO/SM/RTE roles.

Establish a “OnePepsiCo” shared unified directory infrastructure as a platform for simplification and future growth:
- Consolidated Global PepsiCo AD Forest
- Consolidate AD domains, Forests, and overall security model
- Identity Management Framework
- Create a solution for managing identity objects across the PepsiCo AD infrastructure
- Envisioning and Planning for:
Consolidated Active Directory on Windows Server 2008 R2
Migration to Consolidated Active… Mostrar más

Establish a “OnePepsiCo” shared unified directory infrastructure as a platform for simplification and future growth:
- Consolidated Global PepsiCo AD Forest
- Consolidate AD domains, Forests, and overall security model
- Identity Management Framework
- Create a solution for managing identity objects across the PepsiCo AD infrastructure
- Envisioning and Planning for:
Consolidated Active Directory on Windows Server 2008 R2
Migration to Consolidated Active Directory - Pre-Provisioning
Migration to Consolidated Active Directory - Activation
Identity Framework for the Consolidated Active Directory
Application Framework Mostrar menos

The project will address Audit compliance and Security best practices gaps in servers on production under HP management. The gaps have been already identified either by HP tools (ESM, ESL) or by Audit based on Pepsico Security Policies and aligned to the contractual scope with HP.
Those gaps are summarized under the following topics:
istrative s
 Wintel istrative s
 Root
 Database role / Sys
Patching Management
 Wintel Platform
 Unix… Mostrar más

The project will address Audit compliance and Security best practices gaps in servers on production under HP management. The gaps have been already identified either by HP tools (ESM, ESL) or by Audit based on Pepsico Security Policies and aligned to the contractual scope with HP.
Those gaps are summarized under the following topics:
istrative s
 Wintel istrative s
 Root
 Database role / Sys
Patching Management
 Wintel Platform
 Unix Platform
 Linux Platform
Vulnerability Remediation
 ESM Red Items
Audit Findings
 Corporate / Sabritas/ CAAudit Findings Mostrar menos

• After several years without undergoing technological upgrading, backup environment needs to be migrated to a solution with greater storage capacity and higher performance to meet current demand and availability of backup window.
• It is needed to validate all the politics and the backup area served by the current backup solution, based on the inventory of servers and systems with their owners and evaluating what their needs for data protection are.
• The backup software needs to be… Mostrar más

• After several years without undergoing technological upgrading, backup environment needs to be migrated to a solution with greater storage capacity and higher performance to meet current demand and availability of backup window.
• It is needed to validate all the politics and the backup area served by the current backup solution, based on the inventory of servers and systems with their owners and evaluating what their needs for data protection are.
• The backup software needs to be migrated to the new solution acquired by PepsiCo in order to be able to use the new robot to back it up and make the backup environment more secure. The current solution has a historical database very large which causes the software to slow down and also brings some risks related to corruption of the database catalog (backup).
• Pepsico now has a virtualization solution to some of their servers and there is a need to align backup solution with virtualization, performing backups using best practices for this type of environment, such as backup that ensures a Snapclone Disaster Recover level. Mostrar menos

Communicate Information Security concepts, rules and best practices throughout the organization, using various communications media, such as e-mail, marketing, corporate TV, banners and billboards, pocket guides, screensavers and other specific marketing actions.

Plan, develop, deploy, and manage a globally updated and common desktop infrastructure and services providing benchmark capability to while continuing toward benchmark costs to Cummins.

Evaluation Phase:
Periodic assessment of the computing environment at PepsiCo Brazil, to check for vulnerabilities related to information security, with a subsequent recommendation of fixes and best practices. Security baselines reporting in line with business guidelines and recommendations of global security for PepsiCo.
Correction Phase:
Patches applyiance to correct outlined vulnerabilities as pointed in the analysis previously performed, and the application of security settings… Mostrar más

Evaluation Phase:
Periodic assessment of the computing environment at PepsiCo Brazil, to check for vulnerabilities related to information security, with a subsequent recommendation of fixes and best practices. Security baselines reporting in line with business guidelines and recommendations of global security for PepsiCo.
Correction Phase:
Patches applyiance to correct outlined vulnerabilities as pointed in the analysis previously performed, and the application of security settings throughout the Work stations, Windows and UNIX Servers in PepsiCo Brazil. Execution of the service should be divided into two phases, as follows:
Phase 1 - Application for emergency patches on Unix servers, and Windows workstations. The emergency patches include:
• Edit and create the Windows registry keys;
• Change the network settings and Windows services;
• Application of patches and hotfixes for Windows;
• Disabling unneeded daemons on UNIX servers;
• Change the permissions of configuration files on UNIX servers.

At this stage the following amount of equipment should be considered:
Windows Servers (2003R2/2008) 51
Unix servers (HP UX, Linux)16
Stations Windows (XP SP3) 2800 (approx)

NOTE: Details on the vulnerabilities and their fixes are described furtherin this document.

Phase 2 - Applying security settings (baseline) to ensure a minimum level of safety to the environment. All stations, Windows and UNIX Servers should be configured / updated according to the predefined patterns by Pepsico in Brazil.
At this stage, PepsiCo provide UNIX scripts and policy files for Windows (.Inf files) so as to facilitate the implementation of the baselines. Mostrar menos

Patches appliance to correct outlined vulnerabilities as pointed in the analysis previously performed, and the application of security settings throughout the Work stations, Windows and UNIX Servers in PepsiCo Mexico. Execution of the service should be divided into two phases, as follows:
Phase 1 - Application for emergency patches on Unix servers, and Windows workstations. The emergency patches include:
• Edit and create the Windows registry keys;
• Change the network settings and… Mostrar más

Patches appliance to correct outlined vulnerabilities as pointed in the analysis previously performed, and the application of security settings throughout the Work stations, Windows and UNIX Servers in PepsiCo Mexico. Execution of the service should be divided into two phases, as follows:
Phase 1 - Application for emergency patches on Unix servers, and Windows workstations. The emergency patches include:
• Edit and create the Windows registry keys;
• Change the network settings and Windows services;
• Application of patches and hotfixes for Windows;
• Disabling unneeded daemons on UNIX servers;
• Change the permissions of configuration files on UNIX servers. Mostrar menos

• Basic Co-location move;
• Technical and managed services delivery;
• Disaster Recovery plan;
• Team/Vendors Engagement methodology;
• Network review and design;
• Migration services.

The scope of this project is to upgrade 19 data bases instances (oracle) and 5 operating systems for LA helping to keep the continuity of the business, this project will be performed from Q2 to Q4. Technical will be provided by HP and applications vendors if needed.
- Primary objective that defines project success:
- All DBs and OSs are updated, ed and working as expected.
- Business scope overview (e.g. organization, department, divisions, roles, process impacted)
-… Mostrar más

The scope of this project is to upgrade 19 data bases instances (oracle) and 5 operating systems for LA helping to keep the continuity of the business, this project will be performed from Q2 to Q4. Technical will be provided by HP and applications vendors if needed.
- Primary objective that defines project success:
- All DBs and OSs are updated, ed and working as expected.
- Business scope overview (e.g. organization, department, divisions, roles, process impacted)
- Specify how this project s division and corporate strategy (reference I&G and Strat)

This project is aligned to vendor software government model.

For the list of the servers that the OS will be upgraded, the cluster must identify which servers will be upgraded in place and which servers will be upgraded by migration.

Project Deliverables
 Certification letter that the application in house is compatible with the new version.
 Certification letter that the application from the provider is compatible with the new version.
 Implementation Plan from PI
 Schedule from PI
 Test plan from PI
 Rollback plan and execution from HP and PI Mostrar menos

• Establish a process-oriented Demand Management function
• Automate initial request registration and routing
• Automate workflow to efficiently manage request
• Automate request tracking
• Provide demand reporting and capacity planning
• Manage Changer through block releases in a controlled and planned schedule
• Assign “process owners” and “change owner” for better ability, responsibility, and communication.
• Create partnership between IT and business community

• Review Pilot/Test Results and Mapping to Acceptance Criteria
• Review Readiness
• Finalize Release Contents
• Workshops with IT areas
• Workshops with Business Community
• Authorize Release Turnover to Production Operations

Plan, develop, deploy, and manage a globally updated and common desktop infrastructure and services providing benchmark capability to while continuing toward benchmark costs to Delphi.

Electronic bill of sale implementation at Honda in accordance with the Brazilian Government rules.

Electronic bill of sale implementation at SHV Gás in accordance with the Brazilian Government rules.

• Verification of existing inventory of IT assets of 3 companies Gafisa, Tenda and Alphaville (physical/ing): Computers, Servers, links, Systems, Network Components/Infrastructure, Phones, digital exchanges, etc.
• Detail scenarios of Distributed IT: detailed rational cost for each area: Systems, Infrastructure, Telecom and Service Desk.
• Analysis of current contracts of hardware maintenance, software and services (licenses, values, level of services, conditions, etc.) for… Mostrar más

• Verification of existing inventory of IT assets of 3 companies Gafisa, Tenda and Alphaville (physical/ing): Computers, Servers, links, Systems, Network Components/Infrastructure, Phones, digital exchanges, etc.
• Detail scenarios of Distributed IT: detailed rational cost for each area: Systems, Infrastructure, Telecom and Service Desk.
• Analysis of current contracts of hardware maintenance, software and services (licenses, values, level of services, conditions, etc.) for renegotiation with current partners
• Gathering requirements for segregation of IT areas (Tenda and Alphaville): sizing of hardware, software and equipment to write a RFP for acquisition (or for building new Data Centers).
• Identify opportunities to reduce costs for the BUs.
• Roap for implementation (segregation of Bus): Gafisa, Tenda and Alphaville. Mostrar menos

As Digital Consumer Connections continues to expand throughout PepsiCo, there are increased opportunities for synergies, quality management and cost reductions. A centralized hosting strategy that includes all regions is one such opportunity area.
Potential benefits include:
• Increased leverage to negotiate better hosting rates with a single or fewer hosting providers.
• Improved , security, standardization and centralized hosting management.
• Reduction in the effort to… Mostrar más

As Digital Consumer Connections continues to expand throughout PepsiCo, there are increased opportunities for synergies, quality management and cost reductions. A centralized hosting strategy that includes all regions is one such opportunity area.
Potential benefits include:
• Increased leverage to negotiate better hosting rates with a single or fewer hosting providers.
• Improved , security, standardization and centralized hosting management.
• Reduction in the effort to process hosting contracts and certify consumer-facing websites. Greater opportunity to re-use investments in web assets…
• Streamlined communications with hosting providers
• Improved BIS visibility into PepsiCo’s consumer-facing website initiatives. Mostrar menos

The project goal is to implement a contingency database in all the PepsiCo branches known as FAZ (Financial istration System).

The major business requirements that must be considered for completion are:
Acquire a Backup unit (Robot) for hot backup process to the current Team Center Engineering server located at SCS (data center) in order to become possible converge the Packard DCS / EEDS Team Center Environments into the same server with information security and lower operational risk. Acquire an external additional storage in order to provide information security. Actually the current server contains only three… Mostrar más

The major business requirements that must be considered for completion are:
Acquire a Backup unit (Robot) for hot backup process to the current Team Center Engineering server located at SCS (data center) in order to become possible converge the Packard DCS / EEDS Team Center Environments into the same server with information security and lower operational risk. Acquire an external additional storage in order to provide information security. Actually the current server contains only three discs with capacity of 146 GB each one for the main applications (Team Center Project Application and Capital Manufacturing. This current composition not allow raid process and as a consequence information security. Acquire a LCD Monitor for the current Team Center Eng. Server Rack. Actually exist a CRT Monitor that servers all equipments present in this rack. With the additional Backup unit and storage it will be necessary to replace this CRT Monitor in order to save physical space. Installation the above additional storage, backup unit and LCD Monitor. Mostrar menos

Project to implement a new automatized line of production (1st phase only) to increase in 40% the production capacity of this handbag factory. Preparation to receive the cutting, sewing and sealant machines are the 1st phase of the project.

LAN installation of small Airports in all the Brazilian International Airports; complete substitution of the hardware, operational system update and increase in the amount of workstations. All the Airports were connected in both São Paulo and Rio de Janeiro for redundancy purpose.

LAN installation of the Airport of Caracas - Venezuela; complete substitution of the hardware and installation of a Microsoft shared environment.

LAN installation of the Airport of Mexico City - Mexico; complete substitution of the hardware and installation of a Microsoft shared environment.

LAN installation of the Airport of San Jose - Costa rica; complete substitution of the hardware and installation of a Microsoft shared environment.

LAN installation of the Airport of Santiago - Chile; complete substitution of the hardware, operational system update and increase in the amount of workstations due to the Airport expansion. Both operational systems had been functioning concomitantly until the complete de-activation of the last slave terminal.

LAN installation of the Airport of Buenos Aires – Argentina; complete substitution of the hardware, operational system update and increase in the amount of workstations (in substitution to the slave terminals) due to the Airport expansion.

LAN installation of the Airport of São Paulo – Brazil; complete substitution of the hardware and installation of a Novell 3.12 shared environment.

LAN installation of both Airports of Havana and Varadero - Cuba; complete substitution of the hardware and installation of a Microsoft shared environment.

LAN Upgrade of the Airport of Lima – Peru; complete substitution of the hardware, operational system update and increase in the amount of workstations due to the Airport expansion. Both operational systems had been functioning concomitantly until the complete de-activation of the last workstation under Novell 3.12.

We were evaluating the migration from RISC servers from Brazil to Integrity with HP-UX 11.32 and Oracle 11 version (all Brazilian bases). At this point, we need a rough estimate of the provider Tech4B effort to this project and mainly lead the migration of the Oracle version of all Brazilian bases.

Complete planning of a new Datacenter and Network infrastructure at Cummins Brazil.

25% Global PC refresh of Desktop, Laptops, Plant PCs in budget, and required peripherals. Replacement of 4-5 Year Old PCs, and 5+ Year PCs in South America.

Elaboration of the Master Plan for Information Technology on one of the leading Institutes of Public Health in Brazil.

Due to the expansion of Pinhal plant to attend VW contract, was built a new hangar to the new contract. To attend this expansion a new LAN infrastructure should be implemented, and move PC&L department and others IT facilities.

· Renewal of all the printing devices;
· Central and distributed processes;
· Specialized team in printing and copies management resident at DELPHI;
· Technical "on site" to all the equipment of the project;
· Payment “on demand”;
· A single supplier for all office print services;
· Management and methodology;
· Expertise in business processes that are not the company's speciality;
· Lower costs for essential non-profit making aspects of the business;… Mostrar más

· Renewal of all the printing devices;
· Central and distributed processes;
· Specialized team in printing and copies management resident at DELPHI;
· Technical "on site" to all the equipment of the project;
· Payment “on demand”;
· A single supplier for all office print services;
· Management and methodology;
· Expertise in business processes that are not the company's speciality;
· Lower costs for essential non-profit making aspects of the business;
· Human resource benefit ­ lower headcount, lower training costs, retention of
skilled staff;
· Improved quality products and services;
· Improved and standardized service level agreements;
· The appropriate number and configuration of devices to meet both the end
s and the business financial needs;
· More management time to focus on core business;
· Ability to adapt rapidly to changing technology;
· Access to new technologies, innovations, and intelectual skills;
· Improved end- satisfaction and technical services;
· Improved profitability of a company overall;
· Risk reduction;
· Increased value through partnerships. Mostrar menos

Project to adjust all the DELPHI´s infrastructure (12 Plants) of existing cabling to the market standards, following the effective norms and homologations for Category 5-E and Category 6, availabiling to the Central Backbone (interconnections between servers and switches) in GigabitEthernet (1GB/s) and to the customers with access the FastEthernet (10/100 MB/s)

Small networks to control both sales and stock interconnected and controlled by the Factory (ART BAG)

Lan installation in these small Airports with remote LAN istration (Brazil).

1) e de primeiro e segundo nível para incidentes de HW e SW relacionados a HHC e seus periféricos;
2) Acompanhamento e gestão dos tramites de envio e recepção de todos os equipamentos enviados para manutenção;
3) Atualização e gestão do inventário físico de todos os equipamentos de Automação de Vendas (HHC, modem, bluetooth, doca, doca veicular, chip);
4) Estrutura de atendimento para força de vendas Pepsico contemplando um 0800 para atendimento de primeiro nível e analistas… Mostrar más

1) e de primeiro e segundo nível para incidentes de HW e SW relacionados a HHC e seus periféricos;
2) Acompanhamento e gestão dos tramites de envio e recepção de todos os equipamentos enviados para manutenção;
3) Atualização e gestão do inventário físico de todos os equipamentos de Automação de Vendas (HHC, modem, bluetooth, doca, doca veicular, chip);
4) Estrutura de atendimento para força de vendas Pepsico contemplando um 0800 para atendimento de primeiro nível e analistas especializados para e de segundo
nível;
5) Relatórios semanais de acompanhamento de incidentes críticos (modelo a ser definido em conjunto com a Pepsico);
6) Relatórios mensais de KPIs e cumprimento de Níveis de serviços;
7) Acompanhamento e follow up dos incidentes e serviços solicitados do inicio ao fim.
8) Elaboração e documentação de processos e procedimentos de atendimento, sempre que necessário, dentro dos padrões acordados entre Pepsico e provedor.
9) Monitoria da qualidade do atendimento telefônico e auditoria de tickets para garantir qualidade dos serviços.
10) Horário de atendimento: Segunda a Sexta das 9:00 as 18:00, Sábados das 9:00 às 18:00 11) Atendimento a chamados de severidade 1 de segunda a sexta das 6:00 às 9:00 e das 18:00 às 21:00. Limite de 5 chamados S1 mensais.
12) Atendimento no fim do mês em dia específico a ser indicado pela Pepsico das 9 às 21hs.
13) Deploy de 400 máquinas a ser realizado ainda neste ano de 2011. (Configuração/Instalação do RP e envio para as unidades.) Mostrar menos

• Criar e manter o espelhamento dos discos de Sistema Operacional.
• Recriar VGs com tamanhos de discos padronizados evitando o desperdício de recursos.
• Recriar e manter Lvols de maneira distribuída nos VGs para melhor controle e ganho de desempenho.
• Corrigir problemas de File Systems corrompidos.
• Não utilizar mais que 1 Storage dentro de um mesmo VG para manter melhores praticas de desempenho.
• Não utilizar mais discos de tamanho superior ao que o VG pode ar… Mostrar más

• Criar e manter o espelhamento dos discos de Sistema Operacional.
• Recriar VGs com tamanhos de discos padronizados evitando o desperdício de recursos.
• Recriar e manter Lvols de maneira distribuída nos VGs para melhor controle e ganho de desempenho.
• Corrigir problemas de File Systems corrompidos.
• Não utilizar mais que 1 Storage dentro de um mesmo VG para manter melhores praticas de desempenho.
• Não utilizar mais discos de tamanho superior ao que o VG pode ar, formatando-os com menor Espaço util.
• Remover todos os VGs e Lvols não utilizados para liberar espaço no VG.
• Utilizarem todos os VGs o uso de “Alternate Links” visando a alta disponibilidade de o aos dados.
• Balancear e padronizar a quantidade de Vdisks por Controladora dos Storages para obter melhor desempenho no o aos dados.
• Recriar e manter todos os VGs pertencentes ao cluster em todos os servidores que utilizam os discos.
• Utilizar RAID 1 nas áreas que necessitam de melhor desempenho, de acordo com as aplicações.
• Otimizar a quantidade de discos e volumes criados nos servidores. Mostrar menos

O objetivo do projeto é realizar a consolidação dos servidores de banco de dados visando à simplificação e a redução dos custos atrelados a istração desses servidores. Algumas premissas foram levadas em consideração para o desenho final da arquitetura proposto nesta proposta as quais são apresentadas abaixo:
• Aproveitar hardware existente;
• Reduzir quantidade de servidores em 50%;
• Eliminar schemas marcados como desativados;
• Eliminar instâncias que só possuam schemas… Mostrar más

O objetivo do projeto é realizar a consolidação dos servidores de banco de dados visando à simplificação e a redução dos custos atrelados a istração desses servidores. Algumas premissas foram levadas em consideração para o desenho final da arquitetura proposto nesta proposta as quais são apresentadas abaixo:
• Aproveitar hardware existente;
• Reduzir quantidade de servidores em 50%;
• Eliminar schemas marcados como desativados;
• Eliminar instâncias que só possuam schemas marcados como desativados. Mostrar menos

Solicit from qualified service providers the installation of certified structured cabling, wire management and equipment rack infrastructure for Gafisa Brazil.

ing Gafisa in determining data center co-location and hosting selection criteria for the business.

Compare telephone service providers to help Gafisa to determine its future specific business needs and assist them to choose the best telecom solution.

Creat a permanent service operated under a BPO model to help internal customers to track and audit the total cost of their Telecom operations;

• Identify opportunities and saving areas
• Contracts and Services Inventories
• Invoice Reception
• Expense analysis and audit
• Cost allocation

LAN Upgrade of the Galeão Airport – Brazil; complete substitution of the hardware, operational system update and increase in the amount of workstations due to the Airport expansion. Both operational systems had been functioning concomitantly until the complete de-activation of the last workstation under Novell 3.12.

LAN Upgrade of the Guarulhos Airport – Brazil; complete substitution of the hardware, operational system update and increase in the amount of workstations due to the Airport expansion. Both operational systems had been functioning concomitantly until the complete de-activation of the last workstation under Novell 3.12.

LAN Upgrade of the both Punta Del Este and Montevidéu Airports – Uruguay; complete substitution of the hardware, operational system update and increase in the amount of workstations due to the Airport expansion. Both operational systems had been functioning concomitantly until the complete de-activation of the last workstation under Novell 3.12.

• Provide a review of our current state of operations
• Identify system consolidation and virtualization opportunities
• Represent achievable, optimized future state with VMware Virtual Infrastructure

Create a sustainable and scalable Dial-Plan for PI
Unified Dial Rules for all On Net-Calls and Off-Net Calls in PI Sites
Minimize impact on dialing
Provide effective ing and billing to measure cost reduction and savings
Utilize current Voice infrastructure
Minimize Operational Leverage

PI requires that BT design and s an in-country VPN end-point gateway solution for Copper Sites. The solution needs to address the following requirements:
1. VPN Gateway will be implemented on an in-country PI site. The site has to be migrated to GenNXT already;
2. The VPN Gateway solution should leverage the existing ISP Circuit for DIA Sites. For Bronze, Bronze+, Silver, Gold and Zinc sites, the VPN Gateway will have a dedicated ISP connected directly to the VPN Gateway;
3… Mostrar más

PI requires that BT design and s an in-country VPN end-point gateway solution for Copper Sites. The solution needs to address the following requirements:
1. VPN Gateway will be implemented on an in-country PI site. The site has to be migrated to GenNXT already;
2. The VPN Gateway solution should leverage the existing ISP Circuit for DIA Sites. For Bronze, Bronze+, Silver, Gold and Zinc sites, the VPN Gateway will have a dedicated ISP connected directly to the VPN Gateway;
3. Copper sites will have a primary VPN tunnel established to the local site and a secondary active Tunnel to the closest regional Datacenter. Traffic to the primary Datacenter will flow through the secondary VPN tunnel. Traffic to the in-country sites (Hub and Spokes), and all other sites in the PI Network, will flow through the primary VPN. Each tunnel is a backup to the other.
4. The VPN Gateway solution should have an option for extra resiliency (Primary and Secondary ISP circuits and Gateways);
5. BT will assess average latency on the first site to be migrated, and that will be used as a baseline for “normal operation”. There will be no SLA associated with latency.
6. For a local resilient VPN Gateway, BT will implement and three IPSEC Tunnels. Primary/Secondary for local in-country traffic and a tertiary tunnel to the nearest Datacenter. If any of the tunnels are down, traffic will flow through one of the available tunnels.
Example:
Tunnel 1 is down, domestic traffic will flow through tunnel 2;
Tunnel 2 is down, domestic traffic will continue on tunnel 1;
Tunnel 3 is down, Intl traffic will flow through Tunnel 1 and then through MPLS to the Intl Network;
This is intended to solve the network latency to an acceptable range where applications do not fail for sites that are physically too far from the GenNXT DC or applications that are not hosted in GenNXT DC Mostrar menos

WAN links service provider replacement in Latin America - Cummins Brazil & Argentina (Embratel -> AT&T)

- Upgrade the WLC’s IOS Software to the version AIR-WLC2100-K9-7-0-98-B16 in 21 PepsiCo branches
- Give remote access to our Cisco Engineer from MEX through tftp32 to enable GPWLAN-INT and Broadcast SSID
- Test the new GPWLAN-INT network
- Have customer acceptance