Mark Whitfield is a UK-based, SC-cleared Senior IT Project Manager and Engagement Manager whose career spans over three decades of evolution within the software development lifecycle (SDLC) and project delivery areas.
Graduating with a Distinction level Higher National Diploma (HND) in Computing from the University of Bolton (formerly the Bolton Institute of Higher Education, BIHE), his professional journey documents a foundational shift from hands-on mainframe engineering to managing enterprise-scale cloud migrations and API-led integration ecosystems.
His professional transformation reflects broader shifts across four technological eras and political-economic landscapes:
1. Mainframe & Early Electronic Banking (1990–1995)
Technology Era: Dominated by localized infrastructure, Tandem Mainframe Computers (now HPE NonStop), COBOL, C, C++, TAL, PATHWAY, and Jackson Structured Programming (JSP).
Political & Economic Landscape: The aftermath of Thatcherite deregulation (the 1986 “Big Bang”) triggered intense competition in retail banking. Financial institutions aggressively adopted bespoke desktop and telephone banking applications to acquire market share.
Role & Projects: Working as a Programmer and Lead Analyst for The Software Partnership (acquired by Deluxe Data International in 1994), Whitfield engineered core software architectures like sp/ARCHITECT-BANK. He spent significant time on-site at Knutsford and Poole (Dorset) delivering the Barclays Business Master II (BBM II) platform, pushing desktop corporate banking into reality before the commercial internet matured.
2. Infrastructure Middleware & System Monitoring (1995–2013)
Technology Era: Shift toward web-enabled browser monitoring, middleware solutions, client-server architectures, and automated system diagnostics.
Political & Economic Landscape: The rise of New Labour, globalisation, and cross-border European integration. Financial sectors faced stricter service levels and skyrocketing volumes due to the growing ubiquity of ATMs, Point-of-Sale (POS) systems, and cross-border settlement demands.
Role & Projects: Joining Insider Technologies Limited (ITL) at Salford Quays (Manchester), Whitfield ascended from a Senior Programmer to an IT Project Manager overseeing strategic technical initiatives.
He co-developed system diagnostic modules for the Reflex platform.
He famously secured the first HP OpenView Operations Enterprise Manager 2-way Smart Plug-In (SPI) certification for HPE NonStop platforms.
Managing structured Waterfall frameworks, he led high-volume automated transaction deployments (notably BASE24 Classic and EPS) via the browser-enabled RTLX (Real-Time Log eXtraction) Reactor for heavyweights like HSBC, Alliance & Leicester, and Standard Chartered.
Technology Era: The definitive mass pivot from rigid Waterfall, PRINCE2 models toward Agile Scrum frameworks, mobile applications (iOS, Android), and multi-vendor hybrid software integration.
Political & Economic Landscape: Post-2008 financial crash regulatory overhauls paired with UK coalition government-driven austerity. High-street legacy architectures required rapid rationalization, while private entertainment industries (like consumer gambling) exploded due to mobile deregulation.
Role & Projects:
Wincor Nixdorf (2013–2014): Served as an award winning Agile IT PM modernizing legacy ATM networks and deploying multi-vendor software integrations (PC/E Enterprise, Oracle, Windows 7) for Lloyds Banking Group.
Betfred (2014–2016): Pivoted to the gambling sector as a Senior IT Project Manager. He spearheaded multiple complex Agile release cycles to take mobile sportsbook components, virtual gaming, and secure fraud-detection payment gateways live.
4. Enterprise Cloud, Security, & API Integration (2016–Present)
Technology Era: Modern hybrid cloud platforms (Azure, AWS), SaaS, MuleSoft Anypoint Platform, API-led connectivity, and microservices.
Political & Economic Landscape: The post-Brexit geopolitical landscape coupled with heightened national security frameworks. Public and private sectors faced mounting mandates for secure, interoperable architectures, requiring professionals to carry strict government Security Clearance (SC) credentials to manage critical infrastructure.
Mark Whitfield is a UK-based, SC-cleared Senior IT Project Manager and Engagement Manager with over three decades of experience in software development lifecycle (SDLC) delivery.
Mark Whitfield, High-Level Career Summary from 1990 thru 2026
Over his career, he has transitioned from deep technical engineering on legacy systems (HPE NonStop formerly Tandem Computers) to enterprise-scale digital transformation, cloud migrations, and API-led integrations. He is also the author of a comprehensive online toolkit for project delivery frameworks.
Click the ‘Company Worked‘ links below for more detail as required.
Project Management Career Breakdown:
1. Early Engineering & Technical Analysis Era (1990–1995)
Geographical Location: Salford Quays, UK (office); London, UK; Client sites across Europe/ Middle East
Clientsinclude: Global Payments, Standard Chartered, Girofon, Rabobank, CRESTCo (Euroclear), Alrajhi Bank, LloydsTSB, HSBC, Santander, Bank of Ireland, Bank of Valletta (Malta) and both Commercial and Piraeus Bank (Greece)
Main Focus Items: Infrastructure consulting, volume testing, system management & monitoring, and Service Level Agreement (SLA) monitoring for critical path payment applications. Attending related conferences, EBUG, ITUG, BITUG, SATUG
Technology Areas: HPE NonStop monitoring, ATM/POS system & transaction monitoring and stock settlement.
Geographical Location: Woking / Bracknell / UK wide
Client: Lloyds Banking Group
Main Focus Items: Modernising legacy ATM software and directing hardware/software transitions. Implementing ProClassic/Enterprise and PC/E SmartClient (Win 7) to replace the existing ProCash/NDC (Win XP) Stacks on a variety of multivendor devices.
Technology Areas: Multi-vendor hardware & software integration for ATMs.
Geographical Location: Wigan / Greater Manchester, UK
Client: Betfred Online and Mobile
Supplier Management: for external software suppliers like Degree53, Playtech, Onionsack, Intelligent Payments (Myriad), Inspired, iovation, StreamUK, Finsoft, Ineda, OtherLevels, Appsflyer, Income Access, Activewin, Virgo, Virtue Fusion, In Game Media, Satellite Information Services (SIS) and IGT
Main Focus Items: Taking new sports and virtual gaming components live, integrating payment gateways, managing app release cycles, and handling regulatory compliance.
In addition to his consultancy work, Mark Whitfield actively publishes his extensive collection of Project Management Templates, which are actively utilized across the industry for RAID Logs, Agile Burndown Charts, and Plan on a Page (POaP) blueprints.
Joining in January 2016, he has orchestrated enterprise-scale cloud migrations, middleware application refactoring, and API-led integration architectures across public sector and tier-one corporate clients.
Methodologies: Agile Scrum ceremonies, Waterfall frameworks, and hybrid delivery patterns
Core Competencies: Hybrid cloud migrations, API lifecycle architectures, cross-data centre integration, multi-supplier governance, and financial forecasting
Key Clients Served: UK Government, MuleSoft / Salesforce, Jaguar Land Rover, Royal Mail Group, NATS, and Welsh Water
Detailed Capgemini Projects Timeline Breakdown by Year:
2016 – 2017: Aerospace & Defence Integration & Postal Infrastructure
Aerospace & Defence Mobile Apps: Managed an Agile Scrum delivery stream for a UK-wide Air Traffic organisation (NATS). He supervised the development of dual-layered Apple iOS applications rendering real-time airspace positioning data, separating sensitive internal military maps from public views.
Salesforce Portal Deployment: Led the enterprise integration and deployment of a Salesforce-driven Single Customer View (SCV) portal platform for defence stakeholders.
Postal Services Migration (May 2016 – Oct 2016): Appointed as PM for an award-winning £4.3 million Data Centre Migration project for a major postal client (Royal Mail Group). He directed 90 Capgemini engineers to shift 1,100+ critical interfaces—migrating file transmissions written in UNIX shell scripts and upgrading 150 interfaces processing through IBM ESB to safe software versions right before peak seasonal trading lockouts.
2017 – 2018: Automotive Supply Chain Middleware
Jaguar Land Rover iFAB Project: Directed the complex 12-month iFAB Middleware Project architecture development scheme. This cross-functional framework connected globally dispersed manufacturing supply components.
Supplier Governance: Coordinated on-site daily standups alongside integration engineering leads to accurately synchronize multiple software suppliers handling distinct tiers of middleware, messaging queues, and front-end architectures.
2018 – 2019: Enterprise API Platform Delivery (MuleSoft)
MuleSoft HQ Augmentation (October 2018 – June 2019): Embedded directly into MuleSoft’s London headquarters (Salesforce Tower) as a Senior Delivery Manager.
MuleSoft’s London office is located within the Salesforce Tower at 110 Bishopsgate.
Anypoint Platform Deployments: Guided multinational corporate clients through API-led connectivity lifecycles. This encompassed configuring Anypoint Code Builder structures, validating hyper-automation runtime layers, and ensuring architectural compliance against regulatory framework rules.
Anypoint Platform is the leading enterprise platform for building APIs, integrations & application networks
2019 – 2021: Large-Scale Public Sector Cloud Migration
UK Government Hybrid Cloud Transformation: Commanded a massive modernization program migrating a highly complex estate of legacy code.
130 Applications Transformed: Acted as the primary client escalation point to refactor, re-host, and re-platform 130 public-sector software applications into hybrid cloud environments. His responsibilities included aligning the massive multi-stack migration with strict GDPR protection directives and managing offshore project delivery targets.
2022: Utility Infrastructure & Cloud Upgrades
Water Utility EQS Cloud Shift: Dual-managed a £0.5 million technical contract moving an legacy document management environment (EQS) onto Microsoft Azure cloud structures via Enablon for Welsh Water and Scottish Water.
MS Dynamics 365 Evolution: Supervised a £0.4 million discovery and blueprint phase to move 12 legacy Microsoft Dynamics 2016 instances operating on outdated shared 8.2 infrastructure onto the unified Microsoft Dynamics 365 Online ecosystem. This involved authoring precise Statements of Work (SoW), custom exit strategies, and foundational Microsoft Project (MPP) tracking models.
Accolades: Won the prestigious Capgemini C&CA UK Communications & Engagement Award in December 2022 for outstanding delivery inside the Cloud & Custom Applications business unit.
C&CA UK’s Communications & Engagement Award Winner 2022 – Cloud & Custom Applications – Capgemini UK
PCI DSS (Payment Card Industry Data Security Standard)
PCI DSS (Payment Card Industry Data Security Standard) is a globally recognized set of security guidelines designed to ensure businesses that accept, process, store, or transmit credit card information maintain a secure environment to protect cardholder data.
Who Needs It
If your business takes payments online, over the phone, or in-store, PCI DSS applies to you. It is mandatory for all merchants, financial institutions, and service providers handling card data, regardless of the company’s size or transaction volume.
The 12 Core Requirements
The standard consists of 12 fundamental requirements organized into 6 main control objectives:
Network Security: Install and maintain network security controls (e.g., firewalls) to protect cardholder data.
Secure Defaults: Never use vendor-supplied defaults for system passwords and other security parameters.
Protect Stored Data: Safeguard stored account data via encryption, hashing, or truncation.
Encrypt Transmissions: Strongly encrypt cardholder data across open, public networks.
Malware Protection: Protect all systems and networks against malicious software.
Restrict Access: Restrict system and cardholder data access on a strict “need to know” basis.
Authenticate Users: Identify users and authenticate access to system components.
Restrict Physical Access: Control and restrict physical access to cardholder data and hardware.
Log and Monitor: Log and continuously monitor all access to network resources and cardholder data.
Regular Testing: Regularly test security systems and network processes for vulnerabilities.
Information Security: Maintain formal policies that address information security for all personnel.
Why Compliance Matters
Achieving compliance—often demonstrated through a Self-Assessment Questionnaire (SAQ) or a Report on Compliance (RoC)—protects your customers and your business from data breaches. Non-compliance can result in devastating penalties, forensic investigation costs, loss of merchant processing privileges, and heavy brand damage.
For more specific details, requirements, and self-assessment tools tailored to your business, refer to the official PCI Security Standards Council website.
An API (Application Programming Interface) is a set of rules that lets different software programs communicate and share data with each other. Think of it like a waiter in a restaurant: you (the application) place an order (a request), and the waiter takes it to the kitchen (the server) and brings back exactly what you asked for.
API (Application Programming Interface) for Business Analysts BA
How They Work
The Request: One program asks another for specific data or actions using an API call.
The Rules: The API dictates exactly how this request must be formatted to ensure security and consistency.
The Response: The receiving program processes the request and sends the requested information or executes the task.
For business analysts (BAs), APIs are crucial business enablers that connect systems, automate workflows, and drive revenue. Categorizing APIs helps BAs identify technical impacts, scope integration requirements, and align solutions with strategic business goals.
Categorization can be divided into three primary frameworks: Access Level, Business Purpose, and Architecture Style.
1. By Access Level (Audience)
This categorization defines who has permission to use the API and dictates security requirements.
Internal (Private) APIs: Developed by a company strictly for internal use. These connect backend systems (e.g., a CRM talking to an ERP) or allow different internal departments to share data securely.
Partner APIs: Shared specifically with external business partners or vendors. These require strict authentication and agreements to streamline supply chain or B2B operations (e.g., granting a distributor inventory access).
Public (Open) APIs: Exposed to developers and the general public to foster third-party integrations, app development, or ecosystem growth. They often require an API key or OAuth for tracking usage.
2. By Business Purpose (API-led Connectivity)
This approach, often used in integration methodologies like MuleSoft, categorizes APIs by their role in the enterprise architecture.
System APIs: Unlock data directly from core systems of record (e.g., a legacy database, an ERP, or a billing system).
Process APIs: Interact with and shape data across multiple systems to break down data silos (e.g., an API that takes order fulfillment data and formats it for shipment and inventory updates).
Experience APIs: Provide a business context for the data to be easily consumed by end-user interfaces like mobile applications, web portals, or chatbots (e.g., fetching a 360-degree customer view).
3. By Architecture Style (Technical Format)
While solution architects define the exact protocol, BAs must understand these styles to document data flow, map payloads, and communicate limitations with developers.
REST (Representational State Transfer): The most common web API standard. It uses HTTP methods to transfer data in simple formats like JSON.
SOAP (Simple Object Access Protocol): An older, highly structured protocol heavily used in enterprise and highly regulated industries (like banking and healthcare).
GraphQL: A query language for APIs that allows the client (e.g., a mobile app) to request exactly the specific data it needs, rather than fetching entire datasets.
Webhooks: Automated, event-driven APIs. Rather than a client requesting data, the server “pushes” data to the client the moment a specific event happens (e.g., sending a receipt to an app the instant a payment clears).
API Architecture Styles
Key API Concepts for BAs
Business analysts rarely build APIs, but they must understand high-level concepts to document API requirements effectively:
Payload: The data that is being sent (Request) or received (Response).
CRUD / HTTP Methods: The basic actions mapped to data. BAs need to understand GET (Read), POST (Create), PUT/PATCH (Update), and DELETE (Remove).
Status Codes: Standardized numbers that indicate the result of a request (e.g., 200 for success, 404 for not found, or 500 for server error).
Documentation: BAs use standards like Swagger/OpenAPI to interpret how an API should behave.
API Status Codes – standardized numbers that indicate the result of a request
API (Application Programming Interface) for Business Analysts BA
Mark Whitfield’s IT project management and software engineering career spans over three decades, progressing from early electronic banking programming on Tandem Mainframes (now known as HPE NonStop) to senior delivery of enterprise-scale middleware, cloud, and digital transformation initiatives.
The high-level chronological timeline (with links) of his professional eras and key project history is broken down below.
💻 1990–1995: Early Programming & Lead Analysis Era
During this foundational era, Whitfield operated as a Programmer and Lead Analyst specializing in core electronic banking software frameworks.
The Software Partnership / Deluxe Data (1990–1995): Developed and enhanced the sp/ARCHITECT-BANK platform. His technical responsibilities focused heavily on coding within Tandem Mainframe environments (now HPE NonStop) using C, C++, TAL, COBOL, and PATHWAY architectures.
Deluxe Data International Operations, Wingate House, Northway, Runcorn
Barclays On-Site Delivery (Early 1990s): Deployed on-site at the Barclays facility in Knutsford, Cheshire. He was responsible for core code development and system architecture design on the Barclays Business Master II (BBM II) electronic banking initiative and subsequent billing modules developed in Poole, Dorset.
Barclays, Wimborne Road, Poole, Dorset
🛠️ 1995–2013: Senior Development & Strategic Project Management Era
Transitioning to Insider Technologies Limited at Salford Quays, Manchester, Whitfield progressed into high-level technical project delivery and strategic product management.
Insider Technologies Limited (ITL) in 2001, Salford Quays, Chandlers Point
Reflex Monitoring Suite R&D (1995–1996): Appointed as a core developer to design platform health and diagnostic plug-in modules for the flagship Reflex 80:20 tracking console.
CRESTCo Infrastructure Integration (1997–1998): Acted as a technical infrastructure consultant for CRESTCo (now Euroclear). Managed hardware benchmark coding and testing for newly deployed Tandem S7000 processing nodes.
CRESTCo in 1997 on St. Katherine’s Dock near Tower Hill tube station
Real-Time Tracking Protocols (1999–2001): Oversaw multi-organizational telemetry deployments for the Bank of England and Deutsche Bank, leveraging specialized MultiBatch scheduling utilities and automated file monitors.
Hewlett-Packard (HP) Certification Initiative (2002–2003): Successfully drove the rigid compliance and verification process to secure official certification for the first HP OpenView Operations (OVO) Smart Plug-In built for NonStop mainframe environments.
First HP OpenView Operations Smart Plug-In for HPE NonStop environments
ATM Log Extraction Deployments (2004–2007): Led technical delivery teams implementing automated transaction log extraction layers (RTLX and Sentra) to audit ATM networks for major retail financial brands like Alliance & Leicester (now Santander) and HSBC.
Cross-Border Retail Banking Rollout (2008–2010): Served as Project Manager overseeing a high-volume, cross-border ATM and Point-of-Sale (POS) environment monitoring expansion for a prominent Saudi Arabian Retail Bank.
Cross-border ATM and Point-of-Sale (POS) environment monitoring expansion
Enterprise Transaction Monitoring (2011–2013): Functioned as Project Lead to bridge retail banking transaction networks with corporate governance architectures. Integrated critical pathways for Standard Chartered and Global Payments into TIVOLI and XPERT24 using ACI’s XPNET infrastructure.
Wincor Nixdorf Banking Division (2013–2014): Retained as Project Manager for Professional Services. He directed a massive hardware and software transition stream for Lloyds Banking Group’s Self-Service Software Replacement (SSSR) programme whilst also providing a qualified management link with Wincor Nixdorf, Paderborn (Germany) for subject matter expertise, as part of the transition.
🎮 2014–2016: Digital Infrastructure & Enterprise Betting Era
Whitfield shifted his delivery domain focus from banking mainframes into real-time high-transaction digital platforms.
Betfred Project Delivery (2014–2016): Managed IT infrastructure and digital systems alignment projects, supporting high-throughput retail and digital consumer gaming workflows.
☁️ 2016–Present: Cloud Integration, Middleware, & Public Sector Era
In this current era, Whitfield acts as a senior, SC-cleared Senior IT Project Manager specializing in hybrid cloud migrations and API-led integration.
Capgemini UK Consultancy (2016–Present): Leading massive corporate and public sector agile/waterfall delivery initiatives. His technical program management footprint expands across a vast roster of tier-one enterprise environments:
MuleSoft Ecosystem Deployments: Directing system integration projects utilising the Salesforce MuleSoft suite, spanning API lifecycle design, Anypoint Code Builder configurations, and hyper-automation flows.
Multi-Sector Enterprise Clients: Orchestrating cloud migrations, middleware application refactoring, and data pipelines for Jaguar Land Rover (JLR), Heathrow Airport, Royal Mail Group (RMG), NATS (National Air Traffic Services), Welsh Water, Rabobank, Barclays, and UK Export Finance (UKEF).
C&CA UK’s Communications & Engagement Award Winner 2022 – Cloud & Custom Applications – Capgemini UK