Tom Bachmann Email & Phone Number

Miami, Florida, Us

I lead the design, engineering, and operation of Citadel's large-scale AWS environments.

Us

I lead the design, implementation, operation, and support of security measures for McKinsey's cloud environments for client-facing software.

Chicago, Illinois, Us

I ensure the security and compliance of Uptake's AWS environments through building, deploying, and maintaining automated security audit and remediation tools that operate at the scale. I work extensively with Terraform, Chef, the AWS CLI, and the AWS Boto3 SDK / Python. I also partner with our developers, infrastructure, and automation teams to advise on secure architectural patterns and frameworks.Recent Projects:Automated network topology with least privileged access and highly available connectivityNetwork configuration modeling and connectivity simulation to rapidly debug issues and design new connectivity - available open source Standardized secure account provisioning using terraform and Boto3/Python custom toolsCommand line Boto3/Pthon operational and security tools scaleable to any number of accounts100% S3 Encryption for 5B+ object environment - tools available open sourceReal-time automated policy enforcement and risk-graded change alerting• S3 Buckets and Objects• IAM Users, Groups, Roles, Policies• IAM Credentials Age

Chicago, Il, Us

I lead the design and implementation of security and compliance controls in GE Transportation cloud environments to allow the migration of our entire portfolio of applications from on-premise environments. This portfolio of over 200 applications includes applications that require compliance with Sarbanes-Oxley, ISO 27002, and internal frameworks. I work with experts across the GE businesses to collaborate on requirements, solutions, and automation opportunities in this domain. I prioritize GE Transportation's security programs to ensure the protection of our intellectual property and compliance with our obligations while maximizing application migration opportunities.I work with our enterprise architects, cloud operations, and IT Risk teams to define and introduce repeatable, scalable security processes and tools. I create reference architecture documentation to help all stakeholders understand our security policies and compliance requirements, and lead all risk screening of applications migrating the cloud. I partner with application teams on architecture and design to ensure compliance.I lead the technical implementation of our cloud security efforts, including:• Fully automated deployment of OS-installed security technologies (including vulnerability scanning agents, antivirus, log forwarding, etc) to entire portfolio using DevOps framework (Chef, Jenkins).• Traffic isolation and least-privileged access within and between applications, and across the entire cloud environment using AWS native network services (security groups, NATs, etc)• Integrate applications and network into GE standard cyber incident response detection pipeline, including packet inspection, intrusion detection/prevention systems, and quarantining and investigating compromised instances.• Design and build compliance automation through monitoring bots using AWS native services such as EC2 System State Manager, Lambda, Config Rules, Cloudwatch Logs, etc.

Chicago, Il, Us

Design, build, and deploy security and compliance controls and processes in AWS VPCs to support migrating the majority of Transportation's portfolio of applications from GE data centers. Ensure the proper protection of GE's intellectual property and continued compliance with frameworks like ISO 27002 and legal requirements like Sarbanes-Oxley.• Fully automate deployment of security technologies to all servers using Chef (including vulnerability scanning agents, antivirus, log forwarding, etc).• Configure VPCs to ensure all traffic is properly protected, using security groups and routing rules.• Create reference architecture and network topology for combined risk environment in a single VPC.• Integrate applications into GE standard cyber incident response detection pipeline, including intrusion detection/prevention systems.• Design and build compliance processes using automation and monitoring bots.• Lead risk assessment of all systems being targeted for migration.• Facilitate contractual and legal reviews for commercial product migrations.

Chicago, Il, Us

Led Critical Business Information security program to protect Transportation's most sensitive intellectual property. Drove granular, realistic, and actionable scoping of CBI data with product owners, engineering leadership/experts, and legal teams. Investigated all systems containing CBI, created data lifecycle diagrams to ensure completeness, and identified gaps against required controls. Created strategic plans to migrate CBI to secure systems and harden legacy systems. Gained consensus with GET leadership to provide $1.5M+ funding & support resources needed to meet CBI controls. Delegated and oversaw control satisfaction projects. Partnered with security experts across GE to refine controls, identify technical solutions, highlight shared needs, and show current capability gaps.Identified a significant vulnerability in our PLM architecture that inappropriately exposed engineering IP. Rapidly triaged one system and identified mitigations for another that could not eliminate risk without significantly impacting business operations. Evaluated commercial data monitoring tools to model permissions and track direct access. Purchased Stealthbits after completing technical proof of concepts of several solutions. Partnered with Engineering IT to build security architecture into design of next-gen PLM system to protect this IP.Led risk assessment of all systems being targeted for migration to AWS, identifying 126/181 apps safe to migrate immediately. Began building reference architecture for medium risk applications in combined VPC to allow for medium risk app migrations without significant overhead & cost of additional VPCs. Ensured proper controls were in place, including contractual & legal reviews for Digital products. Defined HPA accounts in the cloud and integrated into GET HPA review process. Completed 100+ hours of AWS architecture, security, and automation training to gain expertise in cloud security paradigm.

Chicago, Il, Us

IP Protection Leader & Application Security Leader• Created strategy for protecting highly sensitive intellectual property through processes and tools.• Discovered and remediated significant IP risk in engineering drawing systems.• Led compliance with ISO27002 standards for technical vulnerabilities for 50 critical applications.• Designed and implemented global IT controllership process to ensure ISO27002/SOx compliance for new applicationsBrazil Infrastructure Leader and BI Analyst• Increased global perspective by living in Belo Horizonte, Brazil for 3 months.• Led local Brazil infrastructure team,ensuring stakeholder alignment and transparency.• Increased primary manufacturing facility bandwidth by 33% for 300 users.• Designed low-cost network architecture to dramatically improve performance across 6 locations.• Reduced new report cycle time to OBI reports by 60%, and identified and eliminated over 75% of planned 2015 development as redundant.Services Maintenance Manager Mobility Leader• Created mobility strategy for the Maintenance Manager application, a comprehensive rebuild of an legacy internal MRO system.• Conducted field research, customer interviews, and internal and external benchmarking.• Led ITLP summer intern program, organizing professional development events and conducting software development challenge.ITS Software Development Life Cycle Convergence Leader• Led convergence program from scatted landscape of SDLC tools to single strategic platform for large global software engineering team.• Developed expertise in multiple SCM systems, including Git, SVN, Clearcase, and Starteam.• Analyzed technical feasibility and performed proof-of-concept migrations.• Implemented redundant MPLS circuit at large (300 employee) engineering office.

Chicago, Il, Us

Supply Chain - Enterprise Resource Planning Implementation Leader• Led Oracle 11i ERP implementation for two new assembly plants in Fort Worth, TX• Designed and led testing and training strategies for all Oracle modules and business functions• Led production setup, data conversion, and integration strategy of seven new inventory orgs• Facilitated collaboration between IT module owners and functional process leaders• Built MRP engine in Excel to demonstrate functionality and validate plan with business partners• Validated and implemented three-phase production ramp-up strategy with multiple BOMs (final assembly, major subcomponents, full assembly)Awarded EID award for exemplary performance (top 2% of all interns across all GE businesses and functions).

Cincinnati, Oh, Us

Aviation Systems - External Applications Analyst• Developed modernization strategy for all legacy customer-facing IT tools• Led the design and development of technical publications application• Built internal mobile application (iOS/BB) for collaboration tool training Technology Services Group - Data Security Analyst• Increased security of GE intellectual property by remediating insecure / unmonitored data transfer connections with third parties• Partnered with customers and suppliers to rapidly execute network design changesSupply Chain - Material Operations Analyst• Designed and led a comparative product analysis of mobile barcode scanners to replace EOL technology• Eliminated critical failure points by implementing control server with redundant fail-over• Provided real-time monitoring of scanner system through central management consoleCommercial Engine Operations - IT Project Manager• Project manager for the Proactive Fleet Management 2.0 web application• Designed and led the testing strategy (regression, integration, and user acceptance)• Designed and led user training for the 300+ global Customer Support Engineers• Prototyped next-generation design and created MGPP for application• Realized $300k/yr productivity benefit for Customer Support Engineers

Cincinnati, Ohio, Us

Provided counseling, enrichment programming, and community building to 50 undergraduate Honors students