Systems Engineer
CurrentApplication Security: • Secure Software Development – Developed training class covering OWASP top 10 for secure software design and delivered class to tech department. • Launched Security Champions Program in Tech to support the secure software group• Threat Modeling – Developed threat modeling process used as part of the Software Development Life Cycle (SDLC).• Member of the Enterprise Architecture Committee (EAC) providing security guidance to the tech vision and strategyIdentity and Access Management (IAM):• Designed and implemented Attribute Based Access Control (ABAC) solution for use across the Union Pacific enterprise following the extensible access control markup language (XACML) 3.0 specification• Developed and delivered training to the Information Technology department (1200 users) for the ABAC solution including lecture and hands-on lab• Designed, setup, configured, and documented Tier 1 infrastructure for supporting the enterprise services and vendor tools for the authorization project• Developed software toolkits (Java, Spring MVC, Angular) for use by development teams with low effort integration • Worked with application teams to implement ABAC solutions including migration from Role Based Access Control (RBAC) to ABAC.• Developed enterprise security services (JMS and REST) related to IAM.• Supported problem resolution and consulting for products and services provided by Information Assurance such as Enterprise Security Applications, LDAP, SiteMinder, Authorization Services.• Designed and implemented solution for automating user provisioning in Azure in support of migration to Outlook 365• Automated User Provisioning from on-premises to cloud systems such as Salesforce, Azure, and SnowflakeScrum Master:• Completed Scrum Master Training including obtaining Scrum Master Level 1 Certification• Led transition to Agile development for IA team for support and project delivery. Setup Agile practices and procedures for IA team.