CV

Security Architect Aug 2021 - Present

• Designed self-service IAM governance for GitHub Actions to Azure using Workload Identity Federation, eliminating long-lived credentials across CI/CD pipelines; built policy-as-code CI gates enforcing RBAC allow-lists, scope limits, and naming conventions
• Developed AI governance framework: authored policies and standards, led security assessments of AI vendors, and implemented technical controls via CASB
• Advises VPs and CIO on security architecture for new technology initiatives; develops enterprise security standards; leads escalations on cloud IAM, SSO, and automation
• Application security testing using Burp Suite and OWASP ZAP; validation of external penetration test findings
• Database security: TDE, column-level encryption, data masking, tokenization, auditing, and access control design
• Mentors team of ~5 security engineers; leads weekly lunch-and-learn sessions; delivered companywide AI safety training

Lead Security Engineer Sep 2020 - Aug 2021

• Primary incident POC; post-incident forensic investigation; SAST/DAST tooling with CI/CD integration; technical audit

Security Engineer IV Sep 2019 - Sep 2020

• Implemented IAM controls (SSO, MFA, RBAC, PIM) and security automation via PowerShell and Azure Pipelines
• Managed CSPM, SIEM, endpoint detection, DLP, CASB, and vulnerability tooling in Azure

Advanced Software Engineer Nov 2018 - Sep 2019

• Cloud infrastructure as code (AWS CloudFormation, Ansible); CI/CD maintenance; backend development in Node.js and Python

Software Engineer Jun 2017 - Nov 2018

• Mobile AR game development (Unity); serverless web apps (Python, AWS Lambda); automated software testing

IT Security Analyst

• Security appliance monitoring (IDS/IPS, SIEM); incident response; PCI compliance reporting at a managed security service provider