-Designed security infrastructure software enabling full encryption of network traffic in a dynamic environment, as a first step for cloud migration, earning award for recognition of extraordinary effort and achievement for bringing enterprise security to SAS Viya-Engineer backend systems and components allowing software to work on cloud platforms (AWS, Azure, GCS, Kubernetes), increasing options and features for customers-Adding new data connection to high speed computation engine to access data from Parquet files, feature desired by many customers-Upgraded security libraries to maintain FIPS, allowing all government contracts, or companies with those security standards, to be maintained-Engineered kerberos authentication gateway module for cloud migration, required to keep untold numbers of clients using product, bringing millions in revenue

-Designed, implemented and troubleshot an integrated enterprise software and hardware solution for an Active Directory based domain. -Designed and upgraded automated deployment and configuration scripts for Windows, and Solaris domain member servers.-Ensured the security posture of this network from operating system up through the commercial off-the-shelf software stack, including all additional custom applications. This includes the deployment at over 100 sites worldwide and long-term maintenance of security.-Implemented a managed vulnerability mitigation process utilizing lists of Department of Defense security requirements to a newer, secure operating system. -Provided consultation for team leads on best practices for process improvement using existing tools.-Introductory experience with ACAS, a suite of security applications for enhanced enterprise security and automated network vulnerability management. It includes automated network vulnerability scanning, configuration assessment, application vulnerability scanning, device configuration assessment and network discovery. Nessus is a large component of ACAS. -System administration of integrated Active Directory and Solaris network focusing on mitigating Information Security vulnerabilities.-Scripting in csh, bash, Powershell, Python, cmd-Upgraded components of system to comply with rigorous IA requirements.-Migrated complex system from Windows XP to Windows 7.-Improved system integration, and regression testing procedures to enable more rapid development cycles.-Indexed legacy code (Java, Ada, and C++) from previous vendor, and port to a modern IDE for future maintenance.-Administration of vSphere virtual server and Solaris Ldom virtual server.-Configured TLS and Kerberos on an enterprise domain.-Managed and configured VMware virtualization environment.

-Created innovative router configuration to meet customer requirement instead of intense kernel redesign, delivered solution in 3 weeks instead of 30, received recognition award from customer.-Developed VxWorks kernel driver to enable PPP negotiation over new hardware.-Improved implementation of firewall rules in router firmware with VxWorks, an embedded real-time Operating System in C++.-Upgraded/updated system running on Windows XP Embedded to Windows 7 Embedded.-Developed Information Assurance configuration application, allowing one-click to bring embedded system into compliance with security requirements (C#)-Customized hardware drivers (as vendor no longer provided support) and locked down the OS, implementing list of mandated security features. -Worked with SSHv2, PKI, IPSec.-Configured software which established and used dynamic MPLS VPNs.-Configured debugging scenarios for routers that reported status through SYSLOG

-System administration for integrated Windows, Linux, and Mac network.-Extended LDAP schema to integrate Windows and Mac user credentials.-Administered Active Directory in a mixed Unix, Linux, Windows network.-Resolved problems on servers and workstations.