Advancing technology securely is my passion. I thrive on bringing ideas to life, ensuring they transition smoothly from concept to secure implementation. My strength lies in exceptional collaboration and communication, making teamwork and clarity essential to my approach.I am highly regarded for delivering reliable and manageable security solutions at scale, incorporating the needs of users, app developers, Identity and Access Managers, Public Cloud Operators (Zero Trust), Data Managers (Integrity, Privacy/Cryptography, Governance), Cybersecurity teams (Risk Identification & Management), IT Governance Boards (NIST based policies & standards), Compliance Groups (controls, controls testing, evidence, reporting).New Product Implementation Oversight: Enabled new product platform through Public Cloud Adoption leading to re-platforming of 360+ existing clients and expansion of an additional 12 – Established a new Azure Landing Zone Control Plane: Defined Security Principles of Operation, Instituted detailed Security Service Standards for Entra ID, RBAC model, Security Policies, Sentinel, and Key VaultEnterprise Architecture: Managed Enterprise Architecture Review Board. Developed Architecture Review Policy and IT Standards. Ensured 250+ applications/year align with IT Strategies, Direction and cost modelsIT Strategy: Led data plane strategies for security controls for “lift and shift” application re-platforming, cloud native security practices, secure Snowflake and Databricks integration. Refactored product Identity and Access Management Model with phased migration of 12,000+ identities from LDAP/Open Token to Entra ID/OIDC/SailPointOrganized Enterprise Architecture Review Board and conducted application architecture reviewsIncorporated Static Application Security Testing, Dynamic Application Security Testing into SDLC/DEVOPS for 700+ applicationsEffected Single Sign-On using SAML 2.0 for 40,000 employees and key customer scenarios, up to 10,000+ customer identitiesCreated an identity service for web tier applications by aggregating employees’ accounts from 10 Active Directory DomainsNormalized web tier authentication including Multi-Factor for employees and customersIntroduced Internet Connectivity including geographically disparate, fire walled access and egress points with Intrusion Detection/Prevention and Security Information and Event Management platformSkills Enterprise Architecture Security Architecture IAM - Active Dir, Entra ID, AWS IAM, LDAP, Multi-Factor AuthN, AuthZ & SSO - On Prem, Cloud, API, SAML 2.0, OAuth, OIDC