Benjamin Nugent Email & Phone Number

Livonia, Mi, Us

Redwood City, Ca, Us

New York, Ny, Us

Rearchitected internal public-key infrastructure to support cloud-native architecturesRepresented security stakeholders on a tiger-team spearheading the company’s DevSecOps transformationDeveloped a comprehensive maturity model and gap analysis with Application Security and Threat Detection & Response stakeholdersMentored Staff and Senior Cloud Security and Platform Engineers

New York, Ny, Us

Founding member of Gemini’s Cloud Security team; established principles and procedures for team operationsDeveloped systems and tooling to migrate from heterogeneous legacy access control to unified Okta-based access controlDesigned and deployed a multi-account AWS architecture for infosec teams using terraformEngaged with platform and engineering teams to perform threat models, security design reviews, and infrastructure code reviews

San Jose, Ca, Us

Advised Cisco's Security & Trust Organization on governance and policy for the numerous cloud properties it was responsible for securingDeveloped security tooling and services for threat detection, incident response, and identity and access managementDesigned paved-paths for secure platform and infrastructure engineering

Ann Arbor, Mi, Us

Designed, developed, deployed, and operated a security engineering platform for use by AppSec Engineers. Platform was built on AWS ECS and provided automated SAST and DAST orchestration, third-party dependency security scanning, and more. Consulted with engineering teams on Cloud Security Architecture, served as an AWS subject-matter expert. Engaged early on in the design process for a major new product to develop security requirements, and partnered with the team at various other parts of the SDLC to ensure a successful go-to-market. Performed design reviews, policy reviews, infrastructure-as-code reviews, and cloud security assessments.Developed security guard-rails for SRE and SWE teamsProvided critical support and labor to get our FedRAMP authorization over the line and our Federal offerings to marketDeveloped a 24 month Cloud Security Architecture roadmap using Design Thinking principles and customer interviewsDeveloped and delivered training on AWS and Cloud SecurityImproved secure remote compute access by refactoring and expanding an internal Google Cloud Function-based SSH CA service.Drove the build out of the Cryptographic Key Management Program through policies, standards, and procedures

Meudon, Fr

Architected and built cloud services on Amazon Web Services (AWS) for software monetization products serving a broad range of enterprise customers.Fork-lifted legacy services into AWS to reduce cost and improve availability while maintaining high levels of security.Developed automation and processes to enable teams to deploy, manage, configure, scale, and monitor their services in AWS using tools like Ansible and Docker.Consulted with large enterprise customers for building out customized versions of our cloud services.Lead cloud and platform security improvements across the development lifecycle, including a drive for ISO 27001 and SOC 2 compliance.Performed system troubleshooting and problem solving across platform and application domains.Developed serverless tools for use by internal teams to improve deployment, monitoring, and feedback.

Southfield, Michigan, Us

Spearheaded adoption of Test Driven Infrastructure development using Ansible, Puppet, Rspec-puppet, Serverspec, Beaker, Test Kitchen, Jenkins and Vagrant.Designed and Implemented large-scale distributed storage system built on Inktank's Ceph.Developed infrastructure for rapidly deploying virtualization host machines, including OpenVZ, LXC, and libvirt/KVM hosts.Designed and implemented a large-scale monitoring system built on Zenoss and integrated with Puppet to replace a legacy Nagios/Opsview system.Designed and implemented a private cloud infrastructure built on Joyent SmartDataCenter.Designed and implemented a PHP-FPM Software-as-a-Service to enable hybrid compute scalability for dedicated server customers.Served as Subject Matter Expert for Magento platform architecture.Performed experimental research for company-issued whitepapers.Developed a web-based peformance and load testing application for support engineers.Simplified and maintained the company's Identity and Access Management program.

Southfield, Michigan, Us

Performed Risk Assessments and developed controls for mitigating vulnerabilities.Wrote most of Information Security Policies and Incident Response Procedures.Worked with PCI-DSS and SSAE16 auditors to ensure company compliance with regulatory standards.Developed an Information Security Awareness Program.Performed quarterly internal vulnerability scans and audits of internal and customer facing systems.

Southfield, Michigan, Us

Served as top-tier escalation for support ticket system, troubleshooting and providing root-cause resolutions for difficult issues.Provided "high-touch" support for Enterprise hosting customers.Modeled DevOps behaviors when working with third-party development agencies to facilitate success for our mutual clients.Documented and shared new research, lessons-learned, and best practices with the rest of the organization to increase institutional knowlege.

Southfield, Michigan, Us

Served as front-line support for customers hosting Magento, Wordpress, and other PHP-based software.Wrote internal and customer-facing HOWTOs and best-practices.Helped build competetive advantage for the company by sharing knowlege and insight back to the various communites we served.

Seattle, Wa, Us