Help develop and deliver Okta training for customers focused on software developers, courses including: Customer Identity for Developers, SSO Enable Custom Apps and Sites with OIDC, and API Access Management with OAuth, Customer Identity Cloud: Implement Authentication with Auth0.

IAM Consultant, Instructor, Content Developer - Contract

Contract to provide software development, secure software design, and DevSecOps consulting and training to the U.S. Army, Air Force, and selected defense.

Consultant & Instructor - Contract

Provide training for nTier clients, focused on Java EE, JavaScript, Spring, Grails, other web application technologies, Agile methodologies, and software engineering in general. Design courseware for software development and database applications: Java, JavaEE, C#, .NET, Oracle, Microsoft SQL, MongoDB, JavaScript & JavaScript Frameworks: Node, React, Angular, Vue, Backbone, and Ember. Build web applications with Java to support public and private facing services. Contributed to large client curriculum development and strategies. Developed portal website, portal applications, Git and Subversion repositories. Managed course development repositories and processes.

Consultant, Instructor - Contract

Consult with Fortune 100 companies on software engineering projects and all aspects of software architecture, design, development, principles, Agile methodologies, security and secure coding. Build custom applications and open-source software. Build open-source course templates, and courses for various software engineering targets including Unix, Linux, Microsoft Windows and Active Directory, C, C++, Java, Java EE, .NET, ASP.NET, AJAX, C#, PHP, Perl, Python, JavaScript, TypeScript, HTML, CSS, Unit Testing, Test-Driven Development, Integration and Acceptance Testing, Cucumber/Gherkin, SEI (Carnegie Mellon) Architecture Principals, and Agile methodologies. Designed and built the web-development curriculum and courseware for Global Knowledge.

Software Architecture and Engineering Consultant

Recurring role on multiple contracts at JPMC to provide mentoring, coaching, and training to teams for programming languages, application environments, secure programming, Agile methodologies, and DevOps and DevSecOps pipeline tools.

Mentor, Coach, Trainer - Contract

Helped design and implement the integration of OAuth and OpenID Connect using Auth0 as the identity provider. This was for the end-client's two existing traditional web applications created in C# and .NET Framework, new mobile, and new React applications. The major accomplishment was solving the problems between Auth0 and the OWIN/Katana implementation in the .NET application.

IAM Consultant and Software Engineer - Contract

Contracted through to provide training and course development services for courses delivered internally to Verizon employees. Responsible for developing the ASP.NET, Java, object-oriented analysis and design (OOAD), Oracle, and relational database analysis and design (RDBMS) course material.

Consultant, Instructor, Content Developer - Contract

• Managed the laboratories for the Computer Science Department.
• Moved the laboratory infrastructure onto new HP servers using CentOS.
• Re-structured the environment with redundant LDAP servers.
• Integrated authentication with the dual campus Active Directory domains to provide federated logins for both students and faculty.
• Secured ssh and file access externally for the professors.
• Built a Windows deployment server environment to reinitialize the laboratory workstations prior to semester start and on demand using a PXE boot.
• Created an inventory database and cataloged all of the department equipment.
• Documented the department infrastructure with a wiki.

Director of Computer Science Laboratories

• Designed an HA cluster for GIS with Solaris, Veritas Cluster Server, Veritas Disk Suite, and HP SecurePath with mirrored SANs.
• Created KSH and BASH scripts and C++ apps to integrate ESRI GIS s into Veritas Cluster.
• Create C++ apps to add granular administration to Veritas Cluster.
• Created a protocol for mirrored root disks exceeding Veritas and Sun standards.
• Developed a Disaster Recovery Plan to reestablish GIS at a remote location. 
• Assisted with the architecture of a Solaris HA cluster for the Oracle Database infrastructure.
• Assisted with the architecture of a Solaris HA cluster for electronic blueprint submission to Building and Zoning.
• Assisted in the design of the Oracle Grid with clustered Red-Hat Linux servers.
• Assisted with the architecture of an AIX HA cluster for WebSphere service on the Internet Portal.
• Implemented SSL to support transactions on the Internet Portal.
• Provided advisory support for Suse Linux administration on the IBM Mainframe.

Operating Systems Programmer

• Developed courses for HTML, JavaScript, Perl, and Microsoft FrontPage.
• Served as technical editor for all of the courses in the Web Programming product line.
• Managed the infrastructure for the Web Programming product line. This included designing the classroom environment, configuring the software used on the workstations, and the imaging of the workstation kits shipped to the training classes.

Consultant, Instructor, Web Product Line Technical Director - Contract

Delivered AIX, Java, C++, and object-oriented analysis and design courses. Specialized in training for the IBM Visual Age IDE for C++ and Java.

Instructor - Contract

Supported the continued operation of the LONEX project. See GTE Government Systems below, CSC replaced GTE as the contractor.

Software Engineer

Delivered HP-UX, C, C++, and custom IT courses.

• Oversaw the development of LONEX (Laboratory-Office Network Experiment) project at Rome Air Development Center (now Air Force Research Laboratory).
• Responsible for the administration of a distributed network of Unix servers.
• Responsible for the design and development of the custom software that made up the LONEX system, including text editors, documentation management software, controlled workflow, etc.
• Participated in the implementation of TCP/IP for the Berkeley Unix Kernel 2.10.
• Assisted with testing the Domain Name System (DNS) during development.
• Responsible for security; detected, reported, and analyzed the Morris Internet Worm in 1998, and responded as an analyst for multiple security incidents for the Air Force.

Lead Software Engineer

Developed and delivered Pascal and BASIC programming classes, and provided computer lab supervision.

Adjunct Faculty

• Performed administrative duties to support two large UNIX systems for academic computing.
• Developed automated software to perform administrative functions: security inspections, automatic backups, generation of new accounts, etc.

Academic Systems Support Professional

I started working with Java at its release for IBM helping develop their first training programs. I have worked with every Java technology, from AWT through Spring Boot. I have delivered speciality training and mentoring in secure Java to the U.S. Air Force and other entities.

I moved from ASP to .NET and C# immediately when Microsoft released it to compete with the Java environment. I worked on .NET and .NET Core applications integrated with SQL Server. My last big .NET project over 2021 was an integration of .NET Core application with Auth0 using OIDC via OWIN. I have provided mentoring and instruction in secure programming with C# to the U.S. Air Force and other entities.

I have worked with JavaScript since it was Mocha, then LiveScript, and finally JavaScript. I have applied object-oriented principles since it became possible in ECMAScript 5, and even more so when classes appeared in ECMAScript 6. I am comfortable with most popular SPA frameworks including React, Angular, Vue, and Ember. 

I started leveraging TypeScript for the better type checking when Microsoft built it on top of ECMAScript in 2012. I am even more comfortable using TypeScript with frameworks like React and Angular than using JavaScript.

As an early member of the Open Worldwide (formally Web) Application Security Project (OWASP) I have worked for years in identifying and solving security issues in Web applications, and applied this to to Java, .NET, JavaScript/TypeScript, Python, and other development environments.

Identity management covers a wide range of sub-topics and I've been involved with most of it. I started with individual systems in RSTS/E and UNIX, helped design and build one of the first distributed (shared) systems for the U.S. Air Force LONEX project, and worked with the beta of DNS. When federated systems such as Kerberos and NIS (formally Yellow Pages) arrived I implemented and leveraged them. After Y2K I implemented SAML and then OAuth, OIDC, and SCIM for federated authentication, authorization, and secure distribution of identity. I am certified with Okta and Auth0 and I work with both companies.

In 1993 at the U.S. Air Force Laboratory we heard about and jumped on a new network standard for sharing documents and information: HTML. With a background in graphics design and publishing as well as programming, HTML evolved right into my skill sets. Now a mature technology, these skills help mentor for good UX and good programming to drive these designs.

I started with flat-file databases before relational databases, and the first RDBMS I used where IBM System R and  Ingress. I picked up Oracle in the early 1980s, but while Oracle claims to be the first commercial database System R was sold to clients in 1977. RDBMS was awesome because we didn't manage data relationships in the application, they were moved to the database engine! But in the late 1990s we discovered that the relationships, while great for analytics, really slowed down things like shopping carts. So I helped build new technologies based on our old flat-file databases, but much improved! The NoSQL databases take different forms: document-based, key-value pairs, graph, etc.

I needed to master Python as an adjunct professor in the university environment. I've been mentoring Python developers and teaching it ever since, most notably with Pandas, NumPy, and SciPy for the National Oceanic and Atmospheric Administration (NOAA) and Comcast.

I connected with PHP as a server-side language for building web applications before Java became popular. The C-language syntax and robust library for managing server-side processes made for a simple transition. I still rely on it heavily for working with applications developed in the WordPress CMS framework.

I switched from C to C++ for application development at the Air Force laboratory, Hewlett-Packard, and IBM. Taught object-oriented programming with C++ for Hewlett-Packard and IBM.

I used C for application, operating system, and network development at the Air Force Super Lab. My associate and I used C for the implementation of the TCP/IP network protocol in the Unix kernel for BSD when the ARPANET rolled out (the experimental network that preceded the Internet).

The "Professor": 40+ years of secure software development

Joel Mussman

Solved the problems of connecting Auth0 and OWIN using OIDC for the Limeade portal application and implemented the code.

Limeade Update

Helped update the Okta Customer Identity for Developers and Customer Identity Cloud: Implement Authentication with Auth0 courses for Okta.

Course Updates

Helped implement and deliver the SEP new-hire onboarding for engineers. This program introduced and mentored the participants in the technology and Agile practices they were expected to use on their teams. I worked on a recurring basis from 2018 through 2022.

Software Engineering Program

The Laboratory Network Office Experiment was launched in 1974 and went through 1994 to build a distributed computing and office automation system for the U.S. Air Force. I was the lead software engineer on this project. The major accomplishments included what may be the first work-flow project built to route documents serially and in parallel for handling by multiple target users.  Additional features included distributed computing across a network of computers, implementation of TCP/IP in UNIX on DEC PDP-11 computers to connect the distributed infrastructure to the (then) new ARPANET experiment, the development of federated identity across the distributed environment, and the development of secure programming patterns and methods to harden the system against frequent attacks.

Personal details

Joel M.

Summary

Technical skills

Work Experience

Education

Personal Projects

Certifications & Awards