David N. Email & Phone Number

• Unify corporate IT infrastructure tools from M&A activity.
• Migrated AWS IAM to centralize on AWS Identity Center
• Centralized billing under a single AWS master payer account
• Deprecate use of Redhat-branded server infrastructure in favor of Amazon Linux
• Migrate Jenkins and Gitlab-based tooling to concentrate on Github
• Consolidate Ansible roles and playbooks

• Identified and drove technology projects to improve the security design of applications and infrastructure.
• Reviewed and helped various IT departments implement well architected frameworks for AWS and Azure.
• Achieved 97-99% compliance with several cloud configuration compliance frameworks including CIS, HITRUST, NIST-CSF, FedRAMP, AWS Well-Architected Framework, and Azure Architecture Framework.
• Reduced attack surface in public clouds by identifying and decommissioning legacy IT resources.
• Setup policy initiatives and secrets management to meet CI Security guidelines and contractual obligations.
• Participated in remediation of security configuration findings.

Alpharetta, Georgia, United States

• Evaluated, implemented, and maintained security controls and guardrails for web-based software deployments in AWS and Azure clouds.
• Setup policy initiatives and secrets management to meet CI Security guidelines and contractual obligations.
• Implement measures to prevent and recover from ransomware.
• Leveraged GitLab CI/CD with Kubernetes runners to evaluate software and container builds.
• Participated in remediation of security configuration findings.

Alpharetta, Georgia, United States

• Lead migrations from traditional datacenters to AWS and Azure cloud services across various IT sub-organizations in development, operations, security, and networking. Relied heavily on Ansible for automation of the.
• Setup policy initiatives and secrets management to meet CI Security guidelines and contractual obligations.
• Leveraged GitLab CI/CD with Kubernetes runners to evaluate software and container builds.
• Participated in remediation of security configuration findings.
• Periodically deployed proof-of-concept product evaluations for potential company adoption.
• Aligned all IT projects in the organization to use Ansible for configuration automation.

Alpharetta, Georgia, United States

• Inspected security measures for the protection of Ruby-based, AWS-hosted web application and IT environments. Monitored and analyzed security controls, reviewed vulnerabilities, maintained and enforced security.
• Established vulnerability management program based on Tenable SecurityCenter.
• Wrote policies and technical configuration documents to align with security standards and European privacy regulations.
• Performed internal audits of cloud and IT infrastructure.
• Drafted major components of the company’s yearly risk assessment.
• Created Ansible playbooks to bootstrap Ubuntu-based Vagrant environments.

Charlotte, North Carolina, United States

• Coordinated the incident response lifecycle.
• Managed the remediation of findings from web application security audits, penetration tests, and vulnerability scans.
• Delivered compliance gap analyses to executive management.
• Wrote policies and procedures for compliance with ISO 27001, HIPAA HITECH, and PCI-DSS.
• Performed internal ISO 27001, PCI-DSS SAQ D audits.
• Participated in a mock disasters with management.

Charlotte, North Carolina, United States

• Determined which web application components and modules should be used for new web applications.
• Ensured that secure, re-usable code and components were developed and incorporated into projects.
• Took the lead in providing project estimates.
• Maintain compliance with Fortune 500 customer security requirements.
• Developed specifications, prototypes, and initial user guides.
• Achieved “continuous deployment” code quality culture to allow for multiple deployments during business hourswithout affecting end-users.

Charlotte, North Carolina, United States

• Delivered development projects on schedule by planning, coordinating, and monitoring the progress of projects. Improved company effectiveness by aligning development efforts with business and client goals. Improved.
• Automated deployments of code to come strictly from version control.
• Lead staff meetings, arranged for educational show-and-tell events, and championed employee recognition programs.
• Setup and configured continuous integration using Jenkins for an Ubuntu-based environment.
• Maintained secure code scanning continuous integration and deployment workflows.
• Active in code review and the training of code review delegates.

Charlotte, North Carolina, United States

• Improved internal company operations by developing, testing, deploying, supporting and maintaining custom software for Fortune 50 customers, including banks and retail firms. Documented and hosted unit testing nodes.
• Wrote and maintained a suite of web application security modules for compliance with policies regarding passwords, login security, inactive users, data sanitizing, activity log monitoring, site performance, and others.
• Performed major module upgrades and data migrations for Drupal versions 4.6, 5, 6, and 7.
• Designed and wrote web-based software to direct collation of printed items and kitting plans for shipping.

Help train the Google Pagerank engine to show timely and accurate results.

• Collaborated with executives, sales, and support departments to develop online training curicullum for hundreds of insurance agencies.
• Managed server infrastructure for delivery of virtual sales meetings, dynamic web-based training, and interactive inter-agency information sharing.
• Responsible for remotely diagnosing IT problems and making repairs.
• Trained employees on new IT infrastructure as needed.

Tyler, Texas, United States

Responsible for operation of 3 campus computer labs. Monitored and updated software on student email, Blackboard (web courseware), and Snort-based, OpenBSD network traffic monitoring servers. Trained computer lab staff. Performed hardware inventory audits. Configured centralized antivirus updating and reports.

Thatware is open-source content management software. It is a Web-based news publishing and discussion backend written in PHP that can handle threaded discussions with a minimum of configuration and day-to-day management. Utilized PHP3, MySQL, FreeBSD, and Linux.

Coordinated geographically distributed volunteer staff responsible for increasing growth rate, retention of new users, and praise of quality content for Geocities.

Doctor Of Philosophy - Phd, Instructional Technology

Master Of Science - Ms, Management Information Systems, General

Bachelor Of Business Administration - Bba, Business