Andrew Kirkland

Led the solution architecture for the BreastScreen Aotearoa (BSA) system replacement project. Collaborated with Sorsix, the vendor of the Pinga software, alongside business and IT teams from eight regional BSA providers across New Zealand, to design, develop, and deploy a unified national system replacing eight regional systems.

Developed new API specifications and partnered with the Te Whatu Ora integration team to implement integration points for the BSA population register, as well as email and SMS communication workflows. Additionally, designed solutions for robust system monitoring and alerting mechanisms.

Drove key design decisions for the solution and its integrations. Worked with Enterprise Architects and key decision makers to balance alignment with future technical directions and practical project delivery.

Created deployment views of the architecture to capture networking requirements for the national solution. Incorporated major changes for the network with with the Pacific and Bay Radiology Picture Archiving and Communications Systems (PACS), and worked with network engineers to debug and establish end-to-end network communication.

Developed programs for address cleansing and validation for migrated addresses to improve the accuracy of the engagement with participants.

Documented detailed designs using UML to show how the overall solution would realise key use cases.

Facilitated release planning and production verification for key integrations including the PACS / modalities, printing labels and documents, GP and lab results, SMS and Email.

Supported the test team with technical testing and debugging.

Responsibilities:

· Options analysis and guidance for the Speed Management Program to explore conceptual and technical ideas for realising a speed management tool.

· Work with Waka Kotahi engineers, Unisys and Datacom to migrate an ASP.NET application to Azure.

· Work with the team to create a suitable design for migrating the application to Azure given operating constraints.

· Assist the engineers to deploy the ASP.NET application behind an IIS reverse proxy and integrate with Azure AD B2C. Troubleshoot integration and configuration issues to get a working solution.

· Take the solution through the Waka Kotahi governance process ready for production deployment.

· Update guidance for generation of X.509 certificates needed for integration into Waka Kotahi registers. Develop a number of PowerShell scripts to provider smaller agents with support for generation and installation of certificates.

· Support creation of the Identity and Access Management architecture. Investigate Azure AD B2C options for realising various use cases.

· Options analysis for a Risk Management SaaS product for use on Alliance projects.

Achievements:

· Rolled up sleeves to deploy and debug the ASP.NET application to help meet timelines for migration and fill gaps in knowledge of other team members.

· During a review of the ASP.NET code I uncovered a significant security vulnerability with the access control. After confirming the vulnerability with Waka Kotahi testers the vendor was informed and a fix applied.

· Provide direct support to Waka Kotahi agents to generate and configure certificates needed to integrate into the Driver Licence and Motor Vehicle register.

• Design of solution for Claim and Invoice processing utilising BPMN and DMN via Camunda
• Clarifying with other solution architects the division of the end-to-end solution into cohesive domains
• Write Terraform scripts for deploying a Kubernetes cluster to AWS as well as Camunda BPMN component for transaction processing
• Joint design sessions to clarify the new architecture for supporting the future business design
• Document solution architecture using ArchiMate and SparxEA
• Creation of demonstrable solutions utilising Camunda, Spring Boot and other associated technologies
• Proof-of-concept work showing change data capture from master data components to Apache Kafka and then integration with Snowflake

• Delivery of a reference architecture and target architecture for data and analytics for the Ministry
• Work with senior stakeholders to ensure significant requirements and use cases are met
• Lead the team to data and analytics to provide a capability model, presentation layer strategy and roadmap
• A data platform reference architecture that is accepted by other architects across the Ministry as a foundation for various projects and initiatives
• Positive feedback from the CDO that the work has progressed the Ministry’s vision and implementation beyond past initiatives
• Consideration for how the reference architecture can be realised utilising cloud providers such as Azure and AWS

• Work closely with the product owners and analysts to explore the conceptual and logical solution architecture for the project
• Show traceability of the architecture back to the Enterprise Architecture and Business Architecture
• Work with the development team to explore realising the architecture, e.g
• Use of event-based approaches, DDD, Angular (SPA), fine-grained authorisation, etc
• An approved refresh to the programme’s solution design
• Completely alter the language that the project was using for describing key aspects of the solution to provide a more coherent architecture and design
• Resolving numerous disparate views between various parts of the programme in terms of design and implementation, e.g
• Agile application development and domain-driven design versus more traditional database design

• Develop and agree the high-level solution design and options for a shared education API platform
• Work with Azure cloud and Application teams to establish environment and DevOps processes for API deployment
• Carry out hands-on prototyping/development to demonstrate key concepts, e.g
• OAuth2.0 and access management, OData for APIs, DevOps pipelines, etc
• Propose an approach and outline for creating customer led API Products
• Work with security and enterprise architects to plan suitable deployments, i.e
• Cost effective whilst meeting NFRs
• Integration of source systems into the Education Data Vault
• Analysis of options and recommended approaches
• Develop the broader architecture for the Logical Data Warehouse, including operational systems integration and cloud and on-premise
• Business case planning for the Insights for Learning project
• Work with project management and finance to scope and estimate
• Communication of key concepts, plans and deliverables with senior management to CDO level

• Work with key stakeholders to elicit and understand key business, architectural and operational requirements
• Work with partners/vendors to realise an integrated solution for the system replacement
• Investigate technology options involving Azure and Office 365
• Model end-to-end scenarios in Sparx EA to guide solution delivery and integration
• Engage with product owners to determine and decide upon the best solutions to challenges
• Find gaps in scope and integration points
• Propose a pattern for delegated access control using JWTs and APIs
• This pattern has been adopted across the business customer self-service project and the core policy and levy management project

• Produce a reference architecture for the federated model of service delivery
• Key aspects of this have included:
• Consent-base information sharing
• The form of the architecture required for a federated style of integration
• A spectrum of options for integration that cover finding and accessing services, managing content and simplifying the interaction that customer have across government agencies
• Elicit common use cases and create conceptual and logical architectural view for their realisation
• Communicate and collaborate technical options for the realisation of the reference architecture
• Work with Life Event projects to guide their concrete architectures
• Endorsement from the Government Enterprise Architecture Group for the architectural form suitable for delivery of federated services and for a spectrum of delivery options to enable transitioning from simple solutions to achieve customer centric integration through to the more complex
• Having input and direction given from the reference architecture taken on-board by projects delivering solutions

• Work with the CRS management team to prepare a long term strategy and translate this into IT capabilities
• Development of a feasible roadmap for transitioning the CRS Delphi financial farm management software to the Web
• Establish a suitable approach to architecture and governance that balances the agile delivery practice with forward thinking design
• Define an end-to-end architecture that will allow CRS to transition clients from its legacy Delphi application to a Web-based product
• Define a solution architecture that includes:
• Use of OAuth for access control
• Transitioning options for moving from the legacy Delphi solution to a AngularJS/JavaScript and Ruby on Rails solution
• Definition of RESTful interfaces for client/server integration
• Work with the product innovation team to define a business and technical roadmap for transitioning the company’s flagship product to the Web
• Work with the development team to agree technologies, frameworks and approaches for Web development
• This has included:
• Taking a domain-driven approach to design and development
• Use of Ruby on Rails for server-side software and JavaScript and AngularJS for frontend development
• Proof-of-concept for a domain driven approach for an intricate Single Page Application, i.e
• Cashbook and Cashflow
• Integration options for a JavaScript client communicating with a Rails backend

• Data Migration for the Council’s Odyssey Programme

• Threat modelling of a number of Internet facing applications
• Prepare and present technical options to the Ministry’s architecture council
• Input into business case, IT vision and programme brief for initiatives within the Children’s Action Plan programme of work

• Company Overview: for confidential programme with a large government department
• Architecture and design of core integration services using the WebSphere platform
• Lead the service modelling across the programme of work
• For confidential programme with a large government department

• Governance and Method Development, Technology Selection, Non-Functional Requirements, Product Selection Process

• Application Architecture for ANZ WebSphere Platform
• Application Architecture for Telecom Wholesale’s Problem Management Solution
• Architect for Telecom Wholesale’s Data Migration

• Enterprise Architecture across a number of clients

• Mobile Platform, Java development
• Enterprise Architecture for Fronde’s corporate systems

• Enterprise Architecture for Telecom’s Operational Support Systems

• Enterprise Level Architecture and Lead Architect for eAdmin Resourcing System at Ministry of Education

• Service Network Framework Architecture and Mobile Internet Platform

• Consultancy and Architecture around WestpacTrust Intranet and Portal
• Developer for WestpacTrust Internet Online Banking
• Developer for BankDirect

• Develop C++ and Unix report programs