Job Posting for the Sweetest Place on Earth

This position will be primarily responsible for all technical aspects of Lotus Notes application development and application support.  The person in this position will work with other departments in the company and the Manager of Web Development to develop and maintain the technical specifications and all appropriate applications in Lotus Notes.  The position may also include development work in other programming languages.

Job Functions:

Functions include developing the technical specifications and implementing the appropriate code to support Lotus Notes development. The person will assist in troubleshooting and debugging issues with existing and developed systems.  This position will maintain all applications so that they function on the most current version of Lotus Notes client and server.  They will maintain proper security and programming best practices when building applications.

Basic Qualifications:

  • BS in Computer Science or equivalent experience.
  • Minimum 1 year work experience with development for Lotus Notes client and Lotus/Domino on the web.
  • Minimum 1 year work experience in web-enabling existing and future Lotus Notes applications.
  • Minimum 1 year work experience in developing workflow applications in Lotus/Domino.
  • Minimum 1 year work experience with Domino Designer
  • In-depth knowledge and work experience in relevant technical areas such as LotusScript, Formula Language, Java, Javascript, D/HTML, CSS and DB2.
  • Knowledge of Lotus/Domino development for mobile devices.
  • Knowledge of Notes security model.
  • Knowledge and experience in the following: PHP, ASP, XML, VBScript, SQL/Other DBMS.
  • Design and development skills working with applications in versions 6, 7 and 8 of Domino.
  • Solid understanding of Internet technologies: HTTP, FTP, security and encryption on the Internet, basic networking concepts, etc.

Additional Qualifications:

  • Must have good analytical skills, excellent communication skills at all organizational levels.
  • Must show initiative, be self motivated and have a willingness to learn.
  • Have the ability to work as part of a team and independently.
  • Must posses a valid driver’s license.
Working Conditions:
  • Physical requirements include finger dexterity, viewing a computer screen, detailed work at close distances, and sitting for prolonged periods of time.
  • Office environment with occasional evening and weekend hours.
  • Sporadic local and out of town travel.

Hershey Entertainment & Resorts is an Equal Opportunity/Affirmative Action Employer

TO APPLY: Please visit HersheyJobs.com to apply on-line or contact Mary Faris at Msfaris@hersheypa.com for more information. We offer Medical, Dental, Vision, 401K, Profit Sharing, Competitive Salary, and MORE!

Sometimes, the recruiters are really nice and you just want to help them find a good person.  Which is why the job above is posted here.  Can you imagine how much weight could be gained with all that chocolate around?

Want to work with Betsy?

Betsy Thiede pinged me last night via BleedYellow asking if I knew anyone looking for a developer job.  Her company, CISC, is looking for a Sr Domino Developer to work on site in the Springfield, Va area.  To get more information, check out the full posting of the requirement.  Note:  ability to obtain a Secret Clearance is required!

Think you have a good resume?
I do.  Or at least I did until I took a look at Damien's.  And while I am still proud of the work I have done and the companies that I have worked for, I understand my place in the technology world and it's not in the same place that Damien is.  Any company that is smart and interesting enough to attract Damien should count their lucky stars.
This is a new recruiting technique...

I got this email from a recruiter today and almost spit soda all over my laptop:

Dear Mr. Burgess,

Per your request please see blow job description for the Sr. Programmer
position with Xxxxxxxx Xxxxxx.  Please let me know if you have any
questions.  I would appreciate if you could please send me your updated
resume in MS Word format and the best time to reach you for a telephone
interview.

Now that's the kind of fringe benefit that will keep me working at the office for long hours.  That is, as long as I am the recipient and not the person expected to perform said description.

Are you an enabler for your users?

At a previous position, I had a co-worker who was always dealing with some kind of emergency request or crisis that had to be taken care of right away. No matter what time of the day or what else she had planned to do. She never learned one of my cardinal rules: A lack of planning on your part does not constitute an emergency on my part. She was always in a frenzied state and was always at wit's end. I was constantly after her to learn to say No when confronted with yet another emergency request. By doing her job in this manner, she was inviting her user community to ignore proper planning and causing herself more grief than was necessary.

Sean Gallagher has a term for this: IT-codependence.

There's a fine line between being "agile" and being an enabler of a dysfunctional business model. You're agile if you've got a process that incorporates flexibility and plans for "ship early and often" approaches to problem-solving. You're an enabler if you constantly have to go back and fix implementations you rushed to make business deadlines so that they'll scale or to integrate them into your architecture so you can support them...or if you don't have the time to do either of those because of more rapidly emerging business requirements.

It is a tough habit to break, but one that will make every one's life better and will produce better results and stronger solutions. If you find yourself in such a situation, biting the bullet and saying No might be a scary proposition, but anticipation of the pain is always worse than the pain itself. Who knows, you might even gain some respect for standing up for yourself.

Does your company Bozo?

I ran across a blog entry entitled How to Prevent a Bozo Explosion and just had to check it out.  First, there is a list of tell-tale signs that an explosion is occurring at your company.

6. Your HR department requires an MBA degree for any position; it also requires five to ten years work experience in an industry that is only four years old

I would like to add to that the requirement to add every acronym possible to job opening skills lists.  I have worked in a number of companies that have had more than one list items occurring.  Then the author goes on to tell you what should be done to prevent explosions from happening in your cubicle.

Look beyond the resume. The goal of hiring is building a team of great employees. One proxy for a great employee is a relevant educational or work background. However, the perceived “right” educational background and work experience are not sufficient conditions for excellence. Hiring a bozo with the “right” resume can drag down other employees and increase the probability of hiring more bozos. Not hiring a great person because she lacks the “right” resume is not as harmful but is a mistake too.

I can't emphasize the point above too stringently.  It doesn't matter how talented a team you have assembled if they can't get along.  And just because someone's resume looks phenomenal doesn't mean that they actually are good at the job you are hiring them for.  The intangibles that you can learn in a face to face interview tell you more than what a bunch of words on a piece of paper will.

Whitepaper: Achieving High Availability with Exchange Server at Microsoft
I have often wondered how some of the IT companies use their own products, especially ones that have less than stellar reputations with customers. Microsoft has released a whitepaper that outlines how their internal IT department supports Exchange. I thought to myself 'Now, this is something that I have got to read!'. In the end, it is best if you read this publication through twice. The first time, read it through just to see how Microsoft goes about measuring downtime and how they determine SLAs and strive to meet them. Don't pay much attention to the technology, but rather compare their methodology to the one you use in your current position. This is where we Domino administrators can get the most value from this paper. The second time around, feel free to make snide remarks about their ideas surrounding clustering and the limitations they have to work with when implementing Exchange. Laughing out loud is not only encouraged, but truly beneficial to the soul.

The first thing that struck me was their definition of an outage.

Any downtime of e-mail services counts against availability goals, even if not caused by Exchange.
So if the switch a server is connected to blows up, it counts against the Exchange group. If the Active Directory server implodes or the DNS gets hi-jacked (personal experience on this one), their numbers take a hit. Try hitting the four nines with that type of monkey hanging on your back. Basically, this makes the Exchange group the team that is responsible for having everything working correctly on the network. In my mind, that is a lot of responsibility and I have never been in an environment where the email group had enough authority to make that a feasible situation. It's usually the networking group that is at the top of that chain of command in most companies. Chris Nelson, Director of Messaging, states it literally -- "We now own what we don't own". Kind of like being a step-parent.
Over the last several months, seven percent of total Exchange downtime has been for planned Exchange upgrades. Six percent of Exchange downtime has been due to other Exchange-specific issues. The rest of the downtime—87 percent—was caused by issues outside Exchange.
I guess that not having any major upgrades in the last 3 years has at least one positive result. It is my experience in the Domino environment that the numbers are the same if not better. Most of the unplanned outages had to do with networking or hardware issues, not Domino software issues.

I really liked the emphasis they place on writing meaningful and measurable SLAs. The 3 pronged dashboard approach of measuring messaging availability (Mailbox availability, Mail delivery time, and Email Client Availability) is straight-forward and can be used in any messaging environment. Pay close attention to the guidelines for creating meaningful SLAs and the review progress sections as they contain good information that you will be able to use immediately. Their insights into what 24x7x365 really means will give you and your management something to think about. I was a little surprised that their SLAs for historical mail restores is 2 days, but that's life in a SCOS world. Probably the best idea I saw was that one single person is responsible for each measurement's reporting and must investigate any deviations from the norm. SLAs and metrics always work better when you have defined responsibilities for measuring them.

The architecture of the Exchange 2003 servers was very interesting to me. For most of the mail infrastructure, Microsoft is using a 7 node Windows server cluster to host 20 Exchange mail databases (mail stores) with approximately 200 users per database. The average mailbox size limit is 200 MB so the mail stores average about 4,000 users/40 GB of storage per virtual server. What is not listed is the number of virtual Exchange servers are hosted on each server cluster. Without that information, it is unclear how much horsepower is needed per user and, therefore, impossible to make an accurate comparison to what I have worked with in Domino. In addition, I found their reasoning behind implementing clustering to be a little self serving.

Perhaps the biggest benefit of using Windows Server 2003 clustering on current enterprise-class hardware is not its failover capabilities but rather its management flexibility and the effect that has on planned downtime. Finding ways to reduce planned downtime can contribute even more to increasing availability than increasing your ability to cope with unplanned downtime.
So since Exchange cannot do true Active/Active, share nothing clustering, the load balancing and failover capabilities of clustering are downplayed. In my 10+ years of experience with Domino, even with quarterly upgrade releases, version upgrades, and regular windows and third party software updates, the amount of unplanned downtime from external sources, whether due to batteries in the UPS failing during a power spike or viruses killing DNS lookups, significantly dwarfs the amount of planned downtime. And this is even more true on non-Windows platforms, where critical fixes are sent out with the frequency of new AOL CDs.
Clustering contributes significantly to reducing planned downtime, because an Exchange virtual server is not tied to a single Windows host, but can be moved from one cluster node to another when software updates or hardware maintenance is necessary. This does not completely eliminate planned downtime, because a few minutes may be required to move Exchange services between cluster nodes. However, Exchange services do not have to be down for the entire duration of planned installations, reboots, and hardware replacements.
I am at a true loss for words when commenting on this. This is not clustering, this is having a hot spare ready all the time. In Domino, to see clustering work is as easy as pulling network cable on one of the servers in a cluster and watching all of the Notes clients AUTOMATICALLY fail over to one of the other servers in the cluster. And then plug the cable back in and watch the databases synch back up.

What's even worse as far as I am concerned is the level of expertise needed to get exchange running on a Windows Server cluster.

Installing a single Exchange server is straightforward, especially with the step-by-step guidance of the new Deployment Tools in Exchange Server 2003. Nonetheless, deploying a supportable Exchange system in a worldwide or enterprise environment requires significant expertise. The interaction of Exchange with Active Directory requires attention and thoughtfulness of design. Comprehensive Microsoft deployment guides and white papers can assist system architects in designing and building an effective Exchange system.
In contract, setting up a Domino cluster takes no additional expertise. Simply add the desired servers to the same cluster via the Administrator and common databases will begin replicating in real time via the cluster replicator. Sure, there are some things that can be done to optimize the cluster, but in order to get it up and running takes about 5 minutes, less if you already decided on a name for your cluster. No wonder it seems that Exchange shops employ so many administrators.

The true difference between the way Lotus does clustering and the way Microsoft sells it is illustrated in their typhoon example. Whereas a Domino administrator would have just put a cluster member in a different data center in case of a similar issue in the future, the MS team decided to move the entire Exchange cluster because the data center wasn't able to meet their needs. Talk about high maintenance!!!

via Peter de Haas

More on Encryption
I had a lengthy discussion on AIM with Chris before I left from work today. He had read my blog entry and wanted to get some more information on the encryption problem, as I saw it. We talked about the additional things that administrators will have to manage along with the emails that have been archived. At a minimum, you need to keep accessible copies of Notes IDs of all terminated accounts for at least as long as you keep email in the archives. But do you also need to keep their person document and an empty copy of their mail file? And since the body is encrypted, it can't be indexed by the search engines. How does that hamper your company when trying to comply with a subpoena? How do you include encrypted emails in the export from the Archive?

In case you are unaware of how native Notes mail encryption works, here is an excerpt from the Domino 6 Administration Help Database:

How outgoing Notes mail encryption works
  1. The sender sends an outgoing message and selects the Encrypt option.
  2. Notes generates a random encryption key and encrypts the message with it.
  3. Notes encrypts the random encryption key with the recipient's public key and appends the new key to the message. The recipient's public key must be stored in either a Domino Directory or LDAP directory that a user can access or in the sender's Personal Address Book.
  4. If the encrypted message is addressed to multiple recipients, the message is encrypted only once with one random key, and the random key is encrypted using the public key of each recipient.
  5. When the recipient attempts to open the encrypted message, the user's mail application attempts to decrypt the random key, using the recipient's private key. If this is successful, the random key decrypts the message.
  6. If decryption is successful, the recipient can read the message. If decryption is unsuccessful, the user receives a message indicating that the decryption failed and the mail application does not allow the user to access the message.
All except 1 of the archiving solutions that have been demonstrated have used Native Mail Journaling to get a copy of the email for them to archive. Here is how journaling handles encrypted emails:
A message that Notes has previously encrypted for its recipients is not re-encrypted with the certified public key of the specified Journal user. As a result, when depositing encrypted messages in the Mail Journaling database, Domino preserves the original encryption, so that the message content cannot be decrypted with the ID of the designated Mail Journaling user, unless, of course, that user was included in the original recipient list. A Mail Journaling user who was not on the recipient list can view header information only.
So, basically, if encryption of email is allowed, or even required, a significant number of additional things need to be managed along with just email. This is compounded greatly if you use Exchange and have a third party encryption package. Imagine having to get users to send you tokens that they create when they start using encryption. And what do you do if a token gets lost or the one copy of the file token file you have gets corrupted? I am not sure that IT departments or the Archiving Solution vendors are even thinking about this.
Disaster Recovery Testing
I am here in Philly today doing a disaster recovery test. So basically, I am going to be bored out of my mind while the AS/400 tapes are restored. That should only take 3-5 hours. Good thing I have internet access. Sometimes there are advantages to being an applications guy.
Rough Week
This is going to be a rough week and I am not sure if I am going to be able to write all that much until Friday. A group of us are going to Philadelphia for a disaster recovery test. Being the Domino member of the group will mean that I will be bored out of my mind for most of the day. That will be a day of writing and griping, for sure.
To IM or not to IM?
It seems that a number of articles came out last week with respect to IM and it's role in the corporate environment. We are currently having this discussion since we will be rolling out 6.5.1 in the near future. Should everyone be given IM and how do we keep people from abusing it? Here are a couple of points of view that I ran across on SearchDomino.com:

Experts see IM as foundation for new-age apps

Andrew Wolff, an IM Planet speaker and vice president of products for DYS Analytics Inc. in Wellesley, Mass., said a number of enterprise-oriented IM products already allow disparate users to collaborate or Web surf.

And that's just the beginning. IM is also the perfect "launching pad" for any number of other enterprise applications, like sales force automation and employee training, said speaker Matthew Smith, chief operating officer and co-founder of LiveOffice Corp. in Torrance, Calif.

I have seen a number of add on products for Sametime that do really kewl things. One of the best is a Sametime Event Monitor for the iSeries that is available on the Alphaworks site.

Face-off: Instant messaging in the enterprise

Against IM: So, is instant messaging worth the price? No way. Whether you pay the price financially, by purchasing an expensive enterprise IM system, or pay the price security-wise, because your employees are using unauthorized IM clients that don't have enterprise-class protections -- perhaps instead of your expensive enterprise IM system -- you're not getting much value in return. Instead, I have a suggestion: Let them use e-mail.

[...]

For IM: With proper care, planning and management, IM can improve productivity and make communication easier. Like all network applications, the potential for employee misuse and abuse exists. But, with the proper safeguards, IM will make employees so much more productive, they'll soon wonder how they ever survived without it.

The arguments here are the same that have been made about email in the past. Can you really see doing your daily work without email?

Instant messaging creates security headaches for enterprises

"IM took a guerilla pathway into the enterprise and onto the network," said Kailash Ambwani, the CEO of Foster City, Calif.-based IM solutions vendor FaceTime. "It's not like it grew in an orderly fashion that was controlled by the IT managers."
Sounds to me like the way Notes got into many of today's enterprises and that is not necessarily a bad thing.
Right on target
Scott Adams hit the nail on the head with Sunday's Dilbert.
Sometimes I forget how good my work was
There is nothing better for me to appreciate how good some of the development I have done than going back to demonstrate an application that I created in my past.  We are in the process of developing the requirements for Phase II of the CCU Training Tracking Database, so I was demonstrating the current application to a user from the Safety Department.  While going through all the bells and whistles we had put in Phase I, I found myself being a little amazed at all of the features I was able to pack into the application.  Especially considering that the initial development was less than 2 months from requirements to working prototype to production, I was extremely proud at the product I was showing off today.  I serious think that once I add all the features that are being asked for, this application will be as good as any shrink wrapped corporate education and training tracking software currently available, maybe even better.  I will seriously have to think about finding a way to make it more generic and finding a way to try to sell it.  Who knows, maybe I will be able to make a bit of money on the side, and if not, it will be a good exercise in development.
AOL’s ’Top 10 Spam Email Subject Lines’ of 2003:*
1. Viagra online (also: xanax, valium, xenical, phentermine, soma, celebrex, valtrex, zyban, fioricet, adipex, etc.)
2. Online pharmacy (also: 'online prescriptions'; 'meds online')
3. Get out of debt (also: 'special offer')
4. Get bigger (also: 'satisfy your partner'; 'improve your sex life')
5. Online degree (also: 'online diploma')
6. Lowest mortgage rates (also: 'lower your mortgage rates'; 'refinance'; 'refi')
7. Lowest insurance rates (also: 'lower your insurance now')
8. Work from home (also: 'be your own boss')
9. Hot XXX action (also: 'teens'; 'porn')
10. As seen on oprah

* - Source: AOL. This list is unscientific, and is not in any specific order. The cited email subject headers are not ranked by volume.

Link to entire press release
Annual Review Time
Today was the day I finally received my annual review for 2003.  It was supposed to happen near my anniversary date, Sept 30, but it got lost in the shuffle of everything that was happening at work and in my manager's life.  Anyways, I couldn't be happier with the review I received.  There was nothing negative in it whatsoever, only a few constructive criticisms that I could have written myself.  After taking on the additional Administrative responsibilities for Clark, I would have been really pissed if it wasn't as glowing as it was.  It is nice to know that I am appreciated for the work I do.

On the development front, I am still working on the New User Security Request form.  I am trying to use some intreresting Javascript techniques to mimic the Hide-When Actions in the Notes Client without having to access the server.  I like the way it is going and hopefully will have it complete by the end of the week.

Since the CCU group changed yet again, I decided to consolidate the code that generated the footer for all notifications into one subroutine in a Script LIbrary.  This required modification of about 20 agents and much to my astonishment, everything worked on the first try.  I will have to keep an eye out to see if there are any problems in the coming days.  I also received a laundry list of new changes and additions to the CCU database that will need to be lumped into a Phase II of the database.  I can only imagine how much this would have cost if they would have bought the database as a shrink wrapped application.

Wrestling practice last night was a bit of a fiasco.  Chris and Rob are going way too fast and they are losing the kids.  The sloppiness will not change unless they slow down and work on one thing at a time and perfect that before moving on to the more complex moves.  But I am sort of enjoying being on the sideline and just adding my 2 cents in when I want to.  The lack of responsibility is refreshing.

Colette took all 3 kids to the doctor's office today.  Jackson still had some fluid on his ear, but they thought it was due to his congestion, so they prescribed a decongestant for him.  They did strep tests on Craig and Kyle and prescribed some medication for Kyle.  I just hope the fevers go away for both of them.