Brian Stevens, Cissp, Cism Email & Phone Number

• Develop procedures and policy for securing high value assets in AWS and Github.• Created and implemented an AWS Audit Program centered around NIST and SOC audit requirements.• Created document based on NIST framework to define evidence needed by PGI boutique entities to ensure compliance to company security and risk policies and standards. • Develop operational procedures and policy for Palo Alto Prisma security solution in regards to AWS security for PGI boutique entities.• Work with developers on secure AWS practices to close Prisma noted high and medium security alerts.• Provided assistance to the team in ongoing enhancement of AWS security baselines and procedures.

Waukee, Iowa

See resume up top for additional job bullets.• Held responsible for the security posture of the company.• Evaluated, directed and designed security operations initiatives. This includes vendor selection, evaluation and due diligence.• Provided project planning, scoping, delegation and monitoring for security initiatives.• Participated in various annual SOC I/II and HIPAA audit reporting and remediations.• Managed team member trimester and yearly goal planning and reporting.• Developed and reported as a team, security KPI, risk register and scorecard.• Trained employees on security best practices.• Facilitated team cross training and technical growth as manager.• Scanned, documented and remediated all systems for security vulnerabilities.• Researched and implemented a new external system and web app scanning solution.• Responsible for Microsoft Azure security and information protection.• Worked with a cross IT team to start a data classification and tagging program.• Created vendor/third-party security due diligence procedures.• Developed and maintained the company Acceptable Use Policy and all security policies based on NIST and ISO-27001 Frameworks.• Evaluated and created Sourcefire (IPS) and firewall rules/exceptions.• Worked with a vendor to design and conduct a periodic network penetration test. Remediated all findings.• Designed and implemented email DLP solution.• Implemented multi-factor authentication in the environment.• Redesigned, maintained and wrote procedures for the Okta SSO solution.• Worked with the development team to develop a secure file encryption and transfer solution.• Implemented external and internal certificate monitoring solutions.• Maintained MDM solution.• Implemented a secure email encryption system.• Managed mobile drive encryption solution.• Designed, implemented and monitored the conversion to a new perimeter email security solution.

West Des Moines, Ia 50265

See resume up top for additional job bullets.• Held responsible for the security posture of the company.• Evaluated, directed and designed all security and infrastructure initiatives. This includes vendor selection, evaluation and due diligence.• Educated and reported security procedures and direction to CEO, CIO and Board of Directors.• Trained employees on security best practices (both periodically and as part of a yearly company-wide training protocol that I developed).• Facilitated team cross training and technical growth as team lead.• Scanned, documented and remediated all systems for security vulnerabilities.• Researched and implemented new system and web app scanning solutions.• Created vendor/third-party security due diligence procedures.• Developed and maintained the first company-wide IT Security Policy and Acceptable Use Policy based on NIST and ISO-27001 Frameworks while adding in PCI provisions.• Reviewed and created firewall rules/exceptions.• Evaluated and created Sourcefire (IPS) rules/exceptions.• Designed and conducted a periodic network penetration and data breach test.• Designed and implemented email and client DLP solutions.• Implemented and managed the replacement of an internal certificate server adding support for ECDSA/SHA512.• Implemented multi-factor authentication in the environment.• Implemented application code signing for internally developed applications for both desktop and mobile solutions.• Worked with the development team to develop a secure web application deployment system based on Bitbucket, Jenkins and Web Deploy.• Web Environment Management, including security hardening such as disabling weak cipher suites and implementing a minimum of SHA256 external certificates.• Implemented a secure email encryption system for mail in transit or at rest.• Provided disaster recovery documentation and testing for all responsible systems.

West Des Moines, Ia

• Managed employees, payroll, tax/corporation fillings, copyright/licensing, payables/receivables, all technical support and software maintenance, CRM, scheduling and maintaining space.• Provided award winning photography.• Graphic design including albums, newsletters, cards and marketing pieces.• In-person sales.• Client print work.

Des Moines, Iowa Area

• Provided system hardware/software support including multiple Active Directory/LDAP forests, DNS, DHCP, GPO administration, Microsoft Exchange, Apache, Tomcat, Microsoft IIS, NTFS permissions, Print, VPN, Citrix, VMWare, MobileIron, SharePoint, AVID and many other services listed in the skills section.• Was the On-call for technical issues.• Built and administered a large VMware virtualization farm.• Built/designed server OS images.• Served as the Implementation Team Specialist traveling to integrate acquisitions into the Meredith environment.• Implemented new systems and software upgrades.• Built and configured Microsoft Rights Management solution.• Served as the major and final escalation point for all troubleshooting initiatives.• Was the operations and systems-based trainer and project lead.• Functioned as a member of the change control and communication procedure group.• Implemented and designed a granular Active Directory role based management system.• Provided disaster recovery documentation for all responsible systems.• Served as the technical contact for remote administrators.• Provided systems and software patching.• Implemented and designed the Office 365 rollout to the company.• Designed and configured ADFS/SAML support for connected systems.• Implemented and managed replacement internal certificate server.• Hardened the workstation and server cipher suite and TLS support configurations.• Worked in the IT Security department to write various IT/business policies, implementing URL/Web tracking, AD reporting and token-based authentication. Tracked down security issues as needed.• Worked with management to build and train the IT Security department• Core member of the migration team responsible for migrating users from Win 95 with Novell/GroupWise to Windows XP with Active Directory/Exchange. • Participated in security policy drafting and audit processes.• Implemented SOX and PCI based policies across systems and report compliance

• Provided on-site technical assistance, hardware repair, software install/troubleshooting, phone support, network design/repair, hosting and web design. • Administered Linux servers located in remote datacenters. • Designed and built desktop/server systems.

• Was responsible for the maintenance and repair of Sausage Software’s network and servers.• Physically built and loaded the software on servers.• Was responsible for all security recommendations and configurations on the network and server equipment.• Performed remote administration.• Consulted on projects from both a business and technical aspect.• Wrote the occasional article on RedHat Linux patches or fixes in their Sausage Sizzler newsletter.

• Reviewed hardware/software products and wrote reviews for the daily/weekly newsletters.• Co-hosted Gnome Radio broadcast where we answered phone/email technical questions live on the air.• Answer technical questions via email or forum.• Spoke and taught at Gnomedex technical convention.

Slater, Ia

• Provided technical solutions to complex and simple business issues. • Team leader on several deployment projects.• Performed hardware, network and software support, either in-shop or by phone, and OS support for Windows 9x/NT/2k, OS/2 Warp and Apple platforms. • Was responsible for major computer rollouts and converting IT to using ghost OS imaging systems.• Participated in the set-up of the company’s first VPN configuration.• Trained new IT employees and developed companywide training policies. • Was sent as a resource to remote locations to setup new computers, servers, printers and network solutions. • Provided knowledge in early virus detection and wrote instructions/programs for their removal.

Des Moines, Iowa Area

• Performed software/hardware upgrades and troubleshooting, network support, phone support, preventative maintenance, build PCs/servers, printer repair and asset tracking and management. • Designed and implemented ghost OS imaging systems for several companies like Allied/Nationwide, Norwest/Wells Fargo, Principal, Mid-American and Pioneer. • Assisted the bench staff in repairing computers dropped off or shipped for warranty/non-warranty repair. • Performed user administration and network performance testing.• Spent Saturdays training technicians for the A+ examination.

Des Moines, Iowa Area

• Performed hardware/software upgrades and troubleshooting, phone support, handled customer service issues, preventative maintenance and running on-site calls when necessary. • Was responsible for scheduling, reviews, team development, onboarding and off-boarding. • Pushed our store to have the highest revenue for a Best Buy tech bench sporting the fastest turnaround time with little to no returns for faulty repair.• Received awards from various vendors like Iomega and local awards from Best Buy Corp for achievement.

Advanced Graphic Design, Graphic Design

Professional Photography

Physics/Computer Science

General Education/Computer Science/Physics