Brian Schaffner Email & Phone Number

San Francisco, CA, US

• Architected and built contextual access solution securing all SaaS applications utilizing Kolide/Osquery and native OIE controls
• SME for corporate IDP/SSO security
• Owner of all email security including SMTP relay security and SPF, DKIM, BIMI,MTA-STS, DMARC achieving a >99.5% alignment rate across all sending domains

San Francisco, California, US

• Built new team from the ground up to 7 direct reports
• Delivered security tooling gap monitoring for ECS, EKS, Rancher, and EC2 increasing coverage to 100% from 94%
• Implemented PAM for SSH access to cloud resources to provide deeper insights into developer workflows to help improve security
• Rolled out Yubikey/FIDO2 program for VIPs and users with privileged access
• Architected and delivered policy‑as‑code solutions in AWS/Terraform to handle cost management, AMI lifecycle, tag standards, SSM patch baselines, session tags for AWS IAM SSO least privileged access, and various.

San Francisco, California, US

• Responsible for 6‑7 direct report DevOps/Systems engineers
• Implemented self service access for all identity providers requests reducing time to receive access by 75%
• Migrated 2500 users from VPN to zero trust architecture using ZScaler Private Access and rearchitecting identity and device security posture.
• Designed and delivered secure cloud VDI solution for 1200 user remote workforce in 85 countries
• Delivered 80+ SAML and OIDC integrations per year in Okta

San Francisco, California, US

• Facilitated migration from US‑west‑1 to US‑west‑2 utilizing Terraform, Packer, and Ansible for 100+ systems and services
• Aggregated multiple identity providers(GSuite, Okta, openLDAP, AD, AWS, Upwork.com, and Workday) together utilizing SailPoint, APIs, and Powershell to automate user provisioning and de‑provisioning process

San Francisco, California, US

• Implemented CI/CD pipeline for automatic AMI creation and app configuration for GNU/Linux and Windows allowing faster delivery time for internal stakeholders
• Responsible for JAMF/Manage Engine/Chrome Enterprise MDM Systems managing 2500 endpoints

San Francisco, California, US

• Architected network and server infrastructure for Chicago and Santa Clara offices supporting the sales and engineering departments. Workedin conjunction with contractors on‑site including architects, engineering, HVAC.

Chicago, IL, US

• Supported 150+ derivatives/futures/cryptocurrency trading applications across three geographies running a mixed stack of Python, C, C++ on Ubuntu/Debian
• Responsible for all code releases (30‑50/day) in a continuous deployment environment
• Worked to improve monitoring of low latency systems, FPGAs, GPUs, and overclocked hardware

San Antonio, Texas, US

• Worked across multiple sectors and domains in support of large enterprise initiatives related to data center migration and infrastructure‑as‑code automation
• Served as the technical migration lead for a 4000+ mixed operating system migration into a hybrid cloud solution (AWS and on‑prem data centers)
• Designed and deployed VMware on Cisco UCS including infrastructure automation leveraging Ansible for a large healthcare system

Skokie, Illinois, US

Skokie, Illinois, US

Skokie, Illinois, US

Ames, Iowa, US

• Worked collaboratively in an interdisciplinary team of eight people including artists, animators, and game programmers to help create an educational video game
• Designed and maintained the game database which tracked user statistics and demographics for educators to gauge student learning
• Redesigned and streamlined projects application program interface (API). Utilized Agile development practices with daily scrums.
• Rolled out tooling for deploying native OSX build