Application security engineer focused on software supply chain security. Architected and scaled Palantir’s software supply chain security program. Successful projects include rolling out hardware backed commit signing, CI/CD hardening, artifact and supply chain cryptographic attestation, source control security, dependency vulnerability management, threat modeling, multiple red team engagements, and static and dynamic code analysis.Hands on engineer with a track record of driving projects that affect thousands of engineers across hundreds of teams spread across the globe. Experienced working with engineering, IT, business development, and compliance leadership to reduce risk and enable desired business goals. Big picture thinker who can enable organizational security change and drive improvements in security culture. Significant experience in leading technical architecture reviews, secure SDLC design, threat modeling, data wrangling, and project management.

One of two original engineers that designed, architected, and built MSi’s foundational ICS security products. Lead developer for MSi's Console product. Managed MSi’s development infrastructure, IT infrastructure, SIEM, and product security. During tenure grew the development team to 15 engineers and built MSi’s product development process from the ground up. Designed and built a secure custom update process for MSi’s products on air gapped networks using signed packages and manifests. Built out development team’s on-premise infrastructure via physical and virtual servers, developer workstations, and adversarial network simulators. Built out 2FA setup for all on premise development infrastructure access. Setup cloud based SIEM for all on premise and cloud infrastructure via Azure Sentinel. Built and maintained corporate networks, firewalls, VPNs, wifi, VLANs, laptops, O365 accounts, secret management, PKI, Azure AD configuration, and customer support systems. Transitioned development team from on premise infrastructure to SaaS and cloud infrastructure, reducing maintenance overhead and saving our small team over 20 hours of maintenance a week. Created corporate security policies and controls including email security such as DKIM, DMARC, and SPF, 2FA for O365 via DUO and YubiKeys, password and secret management via LastPass, workstation secure baseline configurations, phishing education campaigns, security incident response process, and acceptable use policies. Developed an employee security education program.

Software Developer specializing in .Net, cloud technologies and content management systems. Worked on several Sitecore projects for major websites, including www.abc.virginia.gov and carmax.com.

Deployed and maintained multiple cloud environments (Openstack and Microsoft) in support of research efforts related to cyber-security for clouds and the application of cloud infrastructures in providing cyber-security protection to other physical systems.Created cloud infrastructure to support department’s effort to build a Big Data laboratory. Deployed a Microsoft Cluster-based, SQL Server cloud implementation and a Hadoop-based cluster to provide analysis of unstructured data sets. Provided support and documentation for operational cloud systems.Developed a web-based GUI for research project migrating a Ruby-based client application to a web server using Python Django.