Danny Gershman Email & Phone Number

Florida, United States

United States

Boston, Massachusetts, United States

Greater Boston

Greater Boston

:: Lead a US Air Force Cloud Infrastructure Team to help usher Impact Level 5 and 6 (IL5/IL6) ATO certification across AWS GovCloud environments.:: Implemented a continuous delivery + deployment cross classification domain (Data Diode) system in order to more quickly deliver weapons systems to warfighters.:: Built and architected Cloud governance framework that runs across AWS Commercial, GovCloud, SC2S, and C2S environments using Terraform, Terragrunt and Vault.:: Designed and implemented BeyondCorp inspired zero trust architecture for utilizing Identity Aware Proxies (IAP), Trust Score Engine, and 4 Factors of authentication. :: Authored and maintained the use of a local proxy which enables developers to access BeyondCorp applications without the use of a web-browser or a bastion host. (i.e. docker, kubectl, istioctl, curl, gradle, mvn):: Implemented Kubernetes Istio Mesh for use of Mutual TLS, Zero Trust policy for container to container communications and tracing with Kiali, Jaeger and Zipkin.:: Elimination of IAM user tokens through the authoring and maintenance tooling through a Homebrew Tap for distribution of IAM temporary role assumption. :: Elimination of SSH keys and RDP access and replacement through the use of the distribution of authored tools that require no open ingress ports or cryptographic keys and utilize IAM policy controls.:: Oversight and design guidance of Secure SDLC process for inclusion of secure application containers (NIST 800-190).:: Designed and directed the building of the log aggregation pipeline for a Security Information and Event Management Platform (SIEM) using ElasticSearch, Cloudwatch, Cloudtrail and Kibana.:: Reduced DoD Cloud Infrastructure bill by approximately $4 millon.

Greater New York City Area

:: Managed, built and hired five teams with SREs, QA engineers, Corporate IT, Customer Technical Support, and Security Operations.:: Developed OKRs and KPIs for roadmap measurement for the various teams.:: Focused on team culture and mentorship, with individual laid out success plans. Orchestrated 1-on-1s, peer reviews and skip level meetings. :: Organized team building events and a team Minecraft server for remote engineers.:: Led and managed the SSAE-18 SOC2 compliance effort, including implementation of risk assessment, governance, and security policy initiatives.:: Managed a $2 million infrastructure budget and applied cost savings measures to reduce it by $600K/yearly.:: Ran a successful SecOps program driven by two different maturity models, with known no breaches to date.:: Built/architected, with the SRE team, the CI/CD pipeline using Terraform, Container Orchestration, Hashicorp Vault, Jenkins and ChatOps.:: Architected a big data pipeline for the vendor security ratings platform, in addition to seeing many other projects to completion using a hybrid of Scrum and Kanban.:: Architected a QA automation testing pipeline.:: Built ticket system automation for keeping on top of projects, with metrics and dashboards for the executive team.:: Was published in two US CyberSecurity Magazine for Cybersecurity related topics.:: Opened and manager of the Raleigh branch office.

Greater New York City Area

Greater New York City Area

Greater New York City Area

Willow Spring, North Carolina

:: Helped prepare yearly budget for residents and long term projections as Treasurer.:: Policy review and writing for Architectural guidelines and standards:: Served as Architectural Review Committee chairperson, responsible for guiding the committee to surveying requests for improvement requests

Willow Spring, Nc

Willow Spring, Nc

Greater Boston Area

:: Managed a team of engineers of various skill sets using various project management methodologies including versions of Scrum and Kanban, with an emphasis on including the team on the evolution of those processes. :: Implemented an MSML to FreeSWITCH B2BUA SipServlet for enabling HD quality audio on legacy hardware. :: Worked on the telephony backbone and IVR systems (FreeSWITCH/Asterisk). This includes custom call flows and dial plans written in Javascript and Lua.:: Built a WebRTC dialer widget capable of piping audio, video and screen shares into a conference with realtime video streaming over HLS, RTMP and RTSP.:: Architected RESTful API infrastructure using DropWizard which is built off Java. Modified open source Scala project (swagger-codegen) to dynamically generate client libraries for C# developers to integrate via A NuGet package. :: Creating a slidesharing application that utilizes Socket.IO and NodeJS for pushing in realtime and scaled to 10,000 concurrent users. (http://g33ktalk.com/socket-io-and-node-js-in-production/):: Developed production code in 17-hours for a realtime analytics package called rapjs using Socket.IO, NodeJS and Redis:: Worked on operational enhancements with versioning, bundling, and build environment customization utilizing nant and Jenkins. Worked on building and deploying applications using Ansible and Docker.

Greater Boston Area

Greater Boston Area

Greater New York City Area

:: Developed platform enhancements utilizing VB.NET, CSS, JQuery, T-SQL using Agile and Scrum princples.:: Conduct several in depth code reviews that involved the utilization of debugging and profiling tools. :: Manage several projects with offshore development vendors. This includes weekly conference call meetings, issue tracking/follow-ups, detailed correspondence and detailed specifications. Involved with specification drafting and review process for major projects.:: Research and development lead on the major project consisting of implementing several CDN products to utilize caching to increase HTTP download, flash streaming, and full web acceleration. :: Handle monthly site release deployments to production environment. This included database management, as well a deep understand of internal systems. Was involved in daily site maintenance and internal support requests.:: Implement projects including Web Log Reporting, ASP.NET/IIS Optimizations, Search Engine, Deployment Automation, Flash Streaming, Analytics

Greater New York City Area

Greater New York City Area

Little Falls, New Jersey

:: Solutions development for barcoded, hand-written and machine printed recognition and classification using Cardiff Teleform (Certified v10 IDR w/OCE DoKuStar 3.8), Kofax Ascent Capture (Certified in v6.1 and v7 and Ascent for Payables), Captiva InputAccel (Certified), Cardiff LiquidOffice (Certified v4), and Doculex Goby. Kofax custom validation and recognition scripts using SBL and release scripts using VB. Experienced in Xtrata. Extensive BasicScript and VBA development in TeleForm.:: Developed an SAP to eCabinet Connector which implements Kofax Ascent Capture, VB, ASP, Javascript, VBScript, COM+.:: Application development (VB, VB.NET, C#.NET) with third party SDK to transform/manipulate image formats (TIFF, PDF, PDF+Text) for system to system transfers. System experience includes eCabinet, DocuShare, Docstar, Docuware, Sharepoint, and ODBC-Based DMS’s.:: Created in-house web-based helpdesk system using Classic ASP, VBScript, Javascript, and SQL Server. Integrated a registration system into it, which can check for product support validity, send email messages, and perform many administrative tasks. Migrated portions of system to ASP.NET w/C# and ADO.NET, and ASP.NET ATLAS (AJAX technologies). :: Developed Java (J2ME) based Xlet implementing Samba, FTP, HTTP technologies. Application runs on a Java-enabled MFD and can browse, scan, convert, remove blank pages, convert to TIF or PDF, and has a trial software system embedded in it. :: Handled full product lifecycle on all projects, including business process analysis, marketing, project scope, SOW, workflow analysis using Microsoft Visio, actual development of the product, unit testing, documentation, deployment, and support. Factors such as budget, time constraints and compliance issues were taken into consideration in all projects.

Greater New York City Area

:: Intranet development for Codes, Standards and Specifications Engineering group. (HTML, ASP, Javascript, VBScript, and Access):: Built web-based document administration system for entire company. This system was built and maintained for use of administrating Codes & Standards for all of Brooklyn, Queens, Staten Island, and Long Island. (HTML, ASP, Javascript, VBScript, and Access).:: Re-built two heavily used accounting systems for Engineering, Mains and Services group. (Access and VBA)