Gareth Richards

Systems Security Architect @Hewlett Packard Enterprise

Westborough, MA, US

Member of product architecture team with particular responsibility for product security features, including design of:o As-a-service edge node deployment model based on the use of the device TPM and 802.1AR DevID certificates.o Security model for the product Kubernetes management plane based on Istio API gateways and an Envoy service mesh.o Kerberos support including the protocol transitioning required for user impersonation and constrained delegation.o Remote PowerShell (PSRP) and WSMV support required to run commands on Hyper-V server.o An RBAC system needed to provides administrative roles in the producto An internal PKI used to secure inter-node communications and provide system component authentication. Architect responsible for working with program and production management on federal certification program:o Headed engineering FIPS 140-2 project to validate the OpenSSL FIPS Object Module and create of FIPS version of OpenSSL 1.0.2.o Headed engineering initial Common Criteria program. Worked with external consultants on initial EAL approach and working with external laboratory on NDcPP gap analysis.Member of HPE Hybrid IT Security Council that is responsible for defining and driving general HPE security requirements.Member of HPE Datacentre Security patent committee responsible for reviewing security-related patent submissions.Member of HPE Vulnerability Analysis and Response Team, responsible for coordinating the response to security vulnerabilities. I then work within SimpliVity to coordinate the analysis and response.Chair of SimpliVity Security Advisory Board responsible for internal analyses of security vulnerabilities.

University of Birmingham

BSc, Physics

The University of Edinburgh

PhD, Neural Networks