Leading cybersecurity and IT programs for cryptocurrency-powered real estate investment firm.

Established cybersecurity program for young biotech company ahead of acquisition in late 2022.

Lead diverse teams of security professionals and software engineers, supporting application and cloud security across more than 60 engineering teams worldwide.

• Built and fostered a global security team
• Focused on a shift-left, DevSecOps approach to securing engineering teams across the globe
• Automated GDPR DSRs across internal and 3rd party downstream systems
• Customer-facing escalation point for pre-sales security questions

Responsible for cyber security engineering, including driving strategy and solutions for Zero Trust (ZTNA), Identity and Access Management (IAM), application security (AppSec/DevSecOps) and cloud security.

• Founded and led cloud security program and DevSecOps cross-team effort
• Founded and led Zero Trust working group across IT and InfoSec
• Architected secure software development ‘bubble’ in the cloud to allow for better productivity and innovation while maintaining security posture
• Helped facilitate move to AWS by creating standards and procedures for cloud-based IT workloads, including API access management
• Selected multiple security platforms and technologies to secure cloud environment without adverse impact to production workloads
• Reduced network risk through combination of password policy, authentication proxy, software defined perimeter (SDP), web gateway/proxy

Built application security (AppSec) and identity and access management (IAM) programs from scratch. These programs grew into DevSecOps and Zero Trust initiatives that culminated in a zero trust network architecture (ZTNA) to provide conditional access to our development teams with continuous authorization, allowing them to be more productive, efficient, and flexible in building solutions for the business.

• Complete re-engineering of Identity and Access Management (IAM) platforms, migrating 50+ business applications to new IDP in 5 weeks
• Reduced password-based risk by enabling adaptive/behavioral MFA, applying passphrase policy, and introducing secure, passwordless authentication mechanisms
• Fully automated mover/joiner/leaver scenarios from HR downstream to both SaaS and on-premise applications and user stores

As an engineer and architect at Bain Capital, I introduced agile development, build and deployment pipeline automation (CI/CD), application performance monitoring (APM), dynamic application security testing (DAST), modern source code repository and branching strategy, and responsive web design within my 2 year tenure in application development.

• Built and led 3 offshore teams totaling 20 individual contributors working on concurrent BAU and CapEx efforts, all deployed successfully and on-time
• Set technical direction for business unit in alignment with enterprise-wide goals
• Worked with peers to improve development process and adopt a more agile approach
• Modernized environment and applications by retiring old servers and upgrading technology stack

Responsible for architecture and development of line-of-business .NET software solutions for worldwide law firm.

Solution development, architecture, and maintenance for enterprise systems, applications, features. Technology Evangelist for latest Microsoft products including (but not limited to) .NET 4, Silverlight, Entity Framework, RIA Services.

Lead developer for pri-med.com. Responsible for feature design and estimation, 3rd party vendor integration, regular application maintenance.