Andy Hendrickson Email & Phone Number

Seattle, Wa, Us

Proficient in a wide range of AWS servicesDesigns performant, cost-effective, and secure AWS Cloud architecturesExpert in infrastructure-as-code and event-driven automationExpert in python programming with the AWS API using the AWS boto3 SDKExpert in AWS Cloud security, IAM, service control policies, perimeter boundaries, and access pattern design and implementation

Seattle, Wa, Us

• Delivers businesses into the cloud applying broad experience gained with multiple organizations• Collaboratively establishes goals, strategies, and plans to achieve business outcomes• Simplifies and communicates complex topics to leadership and staff in business and IT• Educates businesses on cloud adoption options, balancing performance, security, and cost• Leads teams of AWS Cloud professionals to deliver state-of-the-art cloud environments• Designs, builds, and implements performant, resilient, and secure financial solutions in regulated environments

Seattle, Wa, Us

• Directed teams of AWS Cloud professionals to deliver state-of-the-art cloud environments• Architected, designed, and implemented comprehensive cloud and hybrid environments from both functional and security perspectives • Designed and built multi-account, immutable, and event-driven architectures• Delivered automated and modular solutions as layered infrastructure-as-code • Educated and advised executive management to establish cloud adoption principles • Developed cloud standards and policy-as-code enforcement• Developed standards-based security plans and assurance mechanisms• Created cohesive operating models for staff and technology • Established cloud governance with accompanying roles and responsibilities• Extensive experience in AWS East-West and AWS GovCloud• Extensive experience in NIST 800-53, FedRAMP, and obtaining Authorization to Operate

Us

Responsible for directing the security architecture for the Federal Reserve and providing security consulting to all Federal Reserve national business lines and products. Leading security architecture and business security consulting services.• Serves as the subject matter expert on security topics and provides expert level consultation to the business units• Leads enterprise-wide efforts to collaboratively create security strategies, roadmaps, architectures and standards• Designed the security integration service to ensure that solutions are secure throughout the development lifecycle• Create and assess business-contextualized threat models and architectural risk profiles• Identify and forecast business unit needs ensuring goals are achieved • Created the cyber defense roadmap to prioritize investments using a threat-driven, risk-based approach • Measures security control effectiveness via truth-in-services program to rationalize investments• Demystified security architecture artifacts through distillation for easy identification and use by designers• Determines defense-in-depth protections for U.S. critical infrastructure payments systems• Creates current and future state blueprints of enterprise strategic security protections• Creating the enterprise cloud security strategy for Amazon Web Services and Microsoft Azure• Designing AWS cloud architecture• Provides broad communication to ensure awareness and coordination of cyber security activities• Created the adaptive cyber defense program to rapidly adjust security controls during cyber attacks• Implementing business protections to ensure functionality when adaptive cyber defense is activated with a special focus on application interdependency• Driving change and evolution across the organization

Us

Responsible for the design, development and operation of information security operations for the Federal Reserve national technology organization supporting all critical business security operations and the 12 Federal Reserve Banks.Scope of responsibility includes network security, identity and access management (IAM), endpoint security, servers and cryptographic services (PKI).• Protected systems with $4+ trillion daily transactional value to 10,000 U.S. financial institutions• Managed budget within 1.5% annual growth in a high-demand environment • Instituted fundamental organizational changeo Performed a deep review of all operationso Attracted and retained top talent and addressed underperforming leadershipo Unified fractured product-based providers into service providerso Identified top risks and realigned budgets accordinglyo Integrated business process into information security• Trusted expert security advisor to the CISO, executive committees and business leaders• Seasoned communicator distilling complex topics tailored to various audiences• Experienced crisis leader• Provided mature data controls for sensitive FOMC, supervisory, monetary policy and Federal Reserve classified information• Managed strategy, roadmaps, vendors and contracts• Developed infrastructure security assessments, risk analysis and reporting to focus remediation activities on the highest value targets• Provided enhanced data protections enabling businesses to selectively control information transmission• Provided key controls for insider threat detection• Experienced investigator of security incidents and insider threat• Ensured that users and devices are remediated to meet security requirements before admission• Reduced technology debt through resource reallocation and prioritization • Years of experience with NIST and SOX• Advised business leaders regarding risk reduction from cyber and insider threat with special focus on resiliency

Chicago, Il, Us

Responsible for the Bank’s performance of Federal Reserve information security policy, risk management framework, services and investments that protect the confidentiality, integrity and availability of information assets. Directed Information Security Operations, Information Security Engineering, Identify and Access Management, Change Management, Asset Management and Test Lab. Worked closely with Bank management to lead a solid security planning and management practice that proactively delivered service level improvements and new innovative capabilities to counter increasing security threats.• Managed 50 personnel and $15M budget• Trusted advisor and experienced communicator to the executive committees and businesses• Established and maintained the importance of information security at all levels of the organization• Attracted, retained and developed highly talented management and staff to achieve our mission• Managed the Bank’s information technology risk and communicated risks to stakeholders• Accountable for security assessments including vulnerability management and risk assessments • Created awareness and adoption of risk mitigating practices among employees• Created automated key risk indicators that significantly reduced the Bank’s risk• Managed costs by absorbing new work through automation and standardization• Protected all Federal Reserve Banks from data loss, significantly reducing data loss• Raised awareness and protections for insider threat• Protected all Federal Reserve Banks from admission of unauthorized users and devices• Performed numerous investigations resulting in various outcomes including conviction• Instituted services to identify, control and securely destroy all electronic assets• Drove the standardization of technology, increasing security, enhancing user experience and reducing costs• Managed strategy, roadmaps, vendors and contracts• Implemented innovative security controls with high effectiveness at low cost

Chicago, Il, Us

Responsible for ensuring security control design and implementation into business and infrastructure solutions Responsible for architecture design including requirements definition, solution design, proposal vetting, assignments and oversight.Responsible for assisting the Information Security Officer to secure Reserve Bank information assets. Established the Bank’s information strategic security action plan that was successfully executed. Provided security consulting and technical evaluation for the Federal Reserve’s payments products.

New York, Ny, Us

Responsible for the architecture, design, procurement, configuration, installation and support of all information security controls and networking for multiple critical payment systems.• Built and operated highly available and secure payment solutions for customers such as the U.S. Department of Treasury/Internal Revenue Service, www.eftps.gov, U.S. Department of Education, U.S. Department of Defense/Army/Air Force, U.S. Department of Justice/Immigration and Naturalization service, State of Ohio, State of Idaho, State of Wisconsin, and State of Kentucky• Operated and protected U.S. critical infrastructure processing high-volume and high-value payments• Provided crisis leadership to consistently meet business commitments• Designed, engineered and operated a broad array of technology, such as wide area networks and Internet circuits, firewalls, proxies, load balancers, network equipment, web, application and database servers, encryption, compartmentalized operating systems, two-factor authentication, intrusion detection systems, custom business applications and innovative custom security controls• Designed, built and operated the U.S. Treasury’s first Internet connected payments DMZ solution• Other duties included product research, requirements development, systems auditing and certification, systems hardening, risk management, vulnerability analysis, security configuration management, incident response, ethical hacking and technical consulting to various internal and external organizations• Additional assignments include senior technical roles in development, database administration, systems architecture, network administration and security architecture