Distinguished Engineer - Security Architecture
CurrentProvided security architecture & design guidance to projects of record, including residential & commercial voice, video, high-speed data, home security & IoT/automation, and cellular products and services, in addition to the company's internal/enterprise needs. Focus areas include user and device authentication, multi-factor authentication, Identity & Access Management (IAM), encryption & encryption key management, digital certificates and Public-Key Infrastructure (PKI), customer premises equipment (CPE) security, public/private/hybrid cloud computing, data discovery and classification, IPv4 and IPv6 network security, and Zero Trust Architecture. Significant accomplishments:- Served as security architect for the company's Zero Trust Architecture initiative. Focus areas have included next-generation application access, featuring identity-aware access proxies and contextually aware authentication & authorization as core components.- Implemented an enterprise-wide data discovery and classification platform, with significant emphasis on the development of custom data classifiers and metadata analysis.- Architected and implemented an enterprise scope, PCI-compliant encryption key management infrastructure.- Architected and deployed a constellation of vulnerability management appliances, now in its 3rd generation of capacity uplift and enhancement.- Engaged in a variety of sustained engineering efforts in support of Comcast's convergedregional and national networks. Focus areas include network zoning and partitioning, metropolitan-area Wi-Fi, and IPv6.- Supported the development & evolution of security strategy, mainly through technology trials and proof-of-concept exercises.- Contributed to the development of security policies & standards.- Provided internal consulting/advisory services to peer security functions, company divisions & regions, affiliates (Spectacor, NBCUniversal, Sky) and other organizations as needed.
