Adam Baldwin Email & Phone Number

Wilmington, Ma, Us

New York, Ny, Us

New York, Ny, Us

New York, Ny, Us

New York, Ny, Us

Menlo Park, Ca, Us

Senior security team member responsible for architectural and operational oversight of multiple Genesys Cloud business units accounting for over $90M in annual revenue. This was accomplished while maintaining compliance with a variety of organizational certifications (PCI-DSS 3.1, ISO 27001:2013, SOC 2, Type II).• Developed and deployed new remote access architecture allowing secure access to multiple segmented business units simultaneously. This architecture replaced single-tenant access mechanisms previously in use and significantly boosted the efficacy of cross-functional teams in supporting all segments of the Genesys Cloud platform.• Provided security SME assistance to RFP responses involving all Genesys Cloud business units with potential revenues ranging upwards of $10M per engagement.• Supported emerging DevOps initiatives by providing security services support for CI/CD pipelining, beta-testing toolkit improvements and facilitating secure code promotion mechanisms from Genesys Corporate R&D facilities to the production Genesys Cloud environment. • Maintained architectural and operational responsibility for multi-factor authentication and TLS configuration and termination standards throughout the consolidated Genesys Cloud platform.• Security team representative on multiple Change Advisory Boards overseeing local, regional, and global change management activities for the entirety of the Genesys Cloud platform.• Mentored team members across the security, networking, and systems groups with regards to security architecture, specific technologies, and fundamental security concepts.

Menlo Park, Ca, Us

Originally brought in to design and implement DLP & NAC controls for SoundBite Communications (which was acquired by Genesys). Contract was originally scheduled for 3 months, but was extended to a year as I took on a growing responsibility for security architecture and operations within Genesys.• Led efforts to research, architect, and deploy standardized intrusion detection, two-factor authentication and password management solutions for the consolidated Genesys Cloud platform.• Directed efforts to properly bound and segregate SoundBite production and back-office systems from each other to improve the performance and availability of the SoundBite cloud-based platform while maintaining conformance with multiple compliance efforts (PCI DSS 2.0 and SOC 1, Type 2). • Performed gap analysis, system design and overall deployment of DLP (Data Loss Prevention) and NAC (Network Access Control) systems in response to SoundBite client requirements.• Upgraded and standardized existing SoundBite VPN, anti-virus, and wireless deployments.

Mclean, Va, Us

Assisted U.S. Air Force ESC (Electronic Systems Center) personnel focused on large-scale network and system engineering activities.• Designed multiple failover options allowing the 33rd NWS to remain mission effective in the event of primary and backup operations center failure.• Researched and improved integration hooks between several 33rd NWS tools (ArcSight ESM 5.2, NetWitness Investigator 9.7, Palo Alto PA-5060) to improve operator efficiency when dealing with the multi-gigabit data sets common in the environment.

Designed and built a test bed environment focused on distributed system architecture, IPv6 networking, and host and cloud-based virtualization. This environment provided a complete network service stack for both personal connectivity and professionally-related project work. Developed and deployed Woburn Wireless, an experimental public access wireless Internet access system. This system combines several fields of interest (cloud-based virtualization, distributed system architecture, traffic analysis and deploying secure systems in insecure environments):• Initial design focused on a traditional three layer network design, while later iterations relied on a geographically diverse multi-core design to improve network performance and reliability.• Cloud-based network core design supported a scalable traffic inspection and analysis system.• Employed network access control, traffic analysis, and intrusion prevention measures to protect wireless clients and secure outgoing traffic.• System traffic secured via point to point IPSEC tunnels from distribution sites to the network core. This allowed easy expansion while isolating distribution sites from each other.• User sessions authenticated via combination of SMS (mandatory) and e-mail (optional) to prevent system abuse.

Houston, Texas, Us

• Responsible for security architecture, assessment and oversight activities for all Network Portfolio service offerings (LAN, VoIP, NIDS/NIPS, Virtualized FW, DCNA, etc). Gartner, Inc. specifically mentioned the strong focus on security when it positioned the HP-ES managed versions of several of these services in the Managed Network Provider “Magic” quadrant (Q3/08).• Served as primary liaison between the Network Portfolio group and GIS Solution Architecture Team. Responsible for ensuring the consistent implementation and deployment of standards, products and best practices between the two teams.• Designed, proposed and implemented security architecture and team engagement process improvements leading to the reduction of high severity findings during assessments by 60%. • Streamlined assessment process to reduce security assessment duration by 75% (from 80 hours to 20 hours) while maintaining compliance with HP-ES security standards. Performed the work of 4 architects when compared with 2008 project timelines without any measurable degradation in performance.

Houston, Texas, Us

• Managed a team of 4 security architects responsible for the security architecture and assessment support for the Communications Service Line Portfolio.• Developed network security training material, project overviews, and performed peer reviews for other security architects architecture and assessment work.• Interviewed, selected and mentored new Security Architects and Engineers joining the Global Information Security group.• Provided security architecture leadership in multi-million dollar military, government, and commercial sales pursuits.

Houston, Texas, Us

• Managed a team of 4 engineers responsible for the architecture and system administration of GSOC systems supporting 24x7 intrusion detection and incident response operations for multiple large-scale commercial and government networks.• Architected a major overhaul to the GSOC internal network infrastructure based upon a dual-ended DMZ “pod” architecture to facilitate a secure and scalable leveraged network connection between the GSOC and its clients.• Managed the development of a secure web-based ticketing system for the GSOC that included SLA monitoring, file attachment and asset management capabilities.• Oversaw the design of a standardized, hardened GSOC workstation software image that allows personnel to securely monitor GSOC clients from anywhere in the GSOC.

Houston, Texas, Us

• Managed a team of 5 individuals providing security incident SME support and resolution assistance on a 24x7 on-call basis for a wide range of large-scale U.S. Government and commercial clients.• Redesigned and implemented GSOC Incident Response team policies to more efficiently handle large scale network security incidents and facilitated the accompanying ISO 9001:2000 documentation.• Responded to and resolved numerous network security events at large scale U.S. Government and commercial clients by providing crisis leadership as well as SME technical support.

San Jose, Ca, Us

• Performed company-wide front line security incident triage and resolution on a 24x7 on-call basis.• Researched, coordinated and deployed global firewall and ISP gateway ACL changes.• Provided primary operational support and maintenance for global Cisco AAA server infrastructure.• Designed and implemented 330+ node IDS system for incident and worm detection and tracking in less than 72 hours utilizing existing Cisco networking and printing infrastructure with a total cost under $500.