- Spearheaded the establishment of the security department as its inaugural member, hiring and mentoring 2 additional security engineers with focuses on Application Security and Infrastructure Security, respectively, thereby laying a strong foundation for the department's robust security practices and team growth.- Successfully led PCI and SOC2 audit programs, achieving full compliance within stringent timelines.- Collaborated with customers and assessment firms to conduct thorough Information Security Assessments, enhancing security posture for multiple key clients.- Collaborated with the operations team to fortify the CI/CD pipeline with advanced security controls, effectively mitigating the risk of software supply chain attacks.- Conducted comprehensive security assessments to identify control gaps, creating a detailed remediation roadmap- Actively monitored, analyzed, and mitigated emerging threats and vulnerabilities, ensuring rapid response to security incidents.- Led white-hat hacking initiatives targeting corporate and cloud infrastructures, enhancing security by identifying and rectifying vulnerabilities.- Led and executed key cross-functional security projects, including hands-on implementation of Teleport for AWS ABAC access, Okta for Corporate SSO, and Fortinet NGFW for Data Loss Prevention, significantly strengthening the organization's security posture.- Orchestrated AWS GameDays and security workshops, significantly improving developer proficiency in cloud and application security practices.- Spearheaded the Incident Response program, enhancing organizational resilience against cyber threats through rigorous training and simulations.- Directed the Vulnerability Management program, efficiently managing scanner findings and leading patch management efforts to mitigate risk exposure- Enhanced cross-departmental collaboration by establishing communication channels between security and engineering teams, fostering a culture of security awareness

Responsible for Infrastructure, Network and Data Security- Create and Socialize Security Policies to the Technical Operations and Engineering teams- Conduct security reviews on new cloud products- Review all infrastructure, data and network components of all software and design documentation- Refactored IAM usage from a broad access model down to a least privileged model- Create a data catalog, with data classifications- Create and document threat models, and determine the needed controls to minimize risks to an acceptable level- Setup tools to scan the Cloud infrastructure against a set of security policies and alert on violations- Audit the cloud infrastructure and IAM implementations to ensure defined policies and approved patterns are continuously being followed- Work with Tech Ops and Engineering to define new patterns that meet the organization's security policies and goals as needed- Defined a secure and auditable secret management solution and policy; provided a roadmap of how the Tech Ops team should implement the solution to minimize engineers ability to see all secrets- Defined a Kubernetes Security Maturity roadmap to help improve the security posture of all microservices deployments and help ensure a least privileged model- Led the infrastructure and security sub-teams for designing and standing up a new Kubernetes cluster with the Istio Service Mesh

Lead on the Enterprise Security Operations and Development team.Responsibilities include:* Implementation and administration of SaltStack for State Management and command channels* Implementation and administration of Nagios XI for system and service monitoring* Hardening of Infrastructure* Manage Secret/key Management infrastructure that support revenue* Patching of infrastructure* Performing BCDR excercises* Develop tools for process automation* eBay Agile Leader* eBay Privacy Champion* eBay Security Champion

Work on the Technical Operations Team.* Used Ansible to create a reusable/extensible application deployment framework for deploying applications into AWS EC2* Handled coordinating Vulnerability scans and vulnerability remediation of cloud applications on AWS in a HIPPA environment* Achieved PCI Certification on production infrastructure through issue/vulnerability remediation* Implemented SaltStack to handle AWS ec2 server config management* Implemented Terraform to handle AWS Cloud Infrastructure State* Utilized Terraform and docker to create a dynamic development environment* Designed and implemented SSH Key management system for our AWS VPC environments* Designed and implemented aws ec2 Security Group management system to handle managing AWS security groups rules* Deployed a Mesosphere cluster into AWS and created a container infrastructure to allow for more flexible options with having multiple versions of the same microservice in operation at the same time* Implemented Service Discovery, Centralized config management and Secret mamangement systems in AWS for creating a better security posture.

Came in as the first member of the IT Operations team. Handled SysOps, DevOps, NetOps and SecOps tasks. Setup all core company server infrastructure and current support and maintain all infrastructure. Built a team of 5 Sys Admins and 2 Network Engineers.• Created new corporate servers and services as part of the building move(DNS, LDAP, NTP, Radius, Rancid, Zabbix. Deployed all applications using Docker• Implemented Kickstart for bare-metal provisioning until we were able to get BCFG2/Ansible in place.• Handle all security related functions: badging, managing camera and security network, defining IT processes(AUP, password policies, etc.), On-boarding(Account creation), Off-board(Account suspension/deletion), review device and server logs to identify possible issues, litigation searches, server hardening, identifying security holes and recommending fixes. Setting up IDS and behavioral analysis tools• Manage various IT Operations based projects and worked with stakeholders from gathering requirements through delivery.• Review all RFCs submitted to the Change/Release Advisory Board, perform initial review of request and classification of request. Also responsible for determining if RFCs are approved, rejected or tabled• Manage all corporate SAS solutions(Jira, Box.com, Github, Confluence, etc.)• Work with the Operations team to constantly review processes and infrastructure to see where improvements can be made• Implemented Zabbix and Nagios as our server monitoring solutions. Created custom scripts to perform various types of service checks(DNS resolution, NTP time validation, DHCP assignment) for a more robust monitoring implementation.

Worked in the Developer Operations group in IT* Refactroed the search portal resulting in a 40% reduction in code, and a more flexible configuration for adding more search cores* Maintained, fixed bugs and add features to several other web properties* Administered and maintained critical applications like Jira, confluence and Jenkins* Migrated a Zend Framework based site into Wordpress* Managed a remote developer who designed the desktop and mobile theme for the site* Located, and managed a firm to redesign the site

Worked with a small team to develop and maintain one of the largest video/community sites on the Internet, TV.com. * Created a Unified Video Infrastructure that ingests videos from partners, normalizes the data and redistributes the videos to partners. Helped define a new architecture for creating a RESTful API for mobile applications.* Created various tools to analyze site performance and identify bottlenecks.* Worked at systematically optimizing all queries, along with analyzing MySQL table schemas to ensure proper indexes were defined for optimal performance.* Created the TV.com HD Video gallery

Work as one of two Professional Services Team members for N. America.Attend pre-sales meeting with clients and partners to gather technical data and detrmine the type of consulting services needed. Conduct webinars on various topics like, Unit testing, Continuos intergration and application security Help create content for Zend line of PHP and ZendFramework Classes Provide both online and on-site PHP training from beginner level through Zend Certified Engineer prep coursesGo out to client sites to do Architecture, performance and security audits Consult clients on Best Practices for development and End-user usability Develop custom web application for clients where I implement best practices for performnce, security, maintainability and modular Architecture - Applications worked on: creating a search API for a social networking site, creating an inventory and order system for a beverage company, and create an XML-RPC style application for a social network for affiliate programs and affiliates Support the Sales and Support Currently team on an in-depth technical level Contribute to ZendFramework Interview various partners to see if they have the technical skill level to be a solutions provider

Managed the Technology Department including, Servers, Applications, Designers and DevelopersSet-up and configured, Clustered Apache servers behind F8 Load Balancers, DNS for all sites, Email Server, FTP server, developer SSH access, Dev, Stage and Production Environments, Remote mysql database server, Database Replication with single and multiple mastersManaged a Team of Designers and Developers. Assigned roles based on skill set strengthsAssigned projects, trained new employees, interviewed candidates, QA finished projects, deployed finished projects after QA approvalLead developer on Major ApplicationsDesigned database schema, assigned tasks to developers, integrated the completed modules into the over-all application. Maintained and modified existing applicationsDeveloped applications that were integrated into the Facebook and Bebo platformUsed PHP and MySQL for the applications with output conforming to XHTML Strict StandardsAdapted all applications to work on Mobile devices Created 36 Sports team rival applications, 1 sports pick/wager application and 3 March Madness Applications with out assistance except from the design team. Responsible for tracking visitor statistical information for each applicationOversaw development of both PHP and ASP.NET applications Researched and tested Zend Framework, PHPCake and Symphony Frameworks to see which would be a best fit to build upcoming applications on top of Had Daily meeting with the Director of Marketing and the Director of Operations to discuss new application Ideas as well as new features for existing Apps Received the BRD from the Director of Operations and Created a TRD and FRD for each project Evaluated the Open Social API to determine if current apps would need to be rewritten to use OpenSocial Have in depth understanding of the Facebook API, Rest Server, FBML, FBJS, limitations of Facebook, Facebook TOS, Facebook Marketing, and FQL

Working closely with the web marketing team as well as other departments to create internal and external facing tools Helped test and compare various PHP frameworks to see which would be the best to adopt Integrated SSO in community applications with the use of Web Services Created alpha filters in Javascript Created a deployment script that merges pages from CVS and our CMS and rsyncs them into production Created an internal application for the web producers to use to manage users in htpasswd realms and create new realms automatically Modified the Virtual appliance Marketplace to allow featured appliances Created an RSS feed generator of appliances that is served directly in our software Did some JSP changes with Knova KB System Wrote a change management request system. It allows developers to submit a request to the Lead Developer and if approved, all affected parties are notified of change Wrote an LDAP wrapper class to help parse user data received from LDAP server with built in ACL Did code review and UAT on apps from other departments being hosted on out servers

Working with the Web Marketing group. Making changes to the Virtual Appliance Marketplace. Modifying templates for the blogs and creating web widgets for providing specific functionality Helped define software requirements for new web server image Tested server image when ready to ensure proper functionality Made required changes to ensure the Virtual Appliance Marketplace would be ready for Launch at VMWorld Created a web interface for CMS deployment Script that allows scheduling Created a new application Framework with built-in DB abstraction Layer, Templating engine, Caching system, and SOAP capabilities Creating a formalized Development to Deployment process for all aspects of web application development. Created Javascript functions for new VMTN landing page to provide interactivity Modified templates for blogs.vmware.com to provide same look & feel as the rest of VMTN Wrote a Deployment script in PHP to deploy from staging to Production Worked with Web Services and PEAR::Soap to create a single Sign-on mechanism Created an .htpasswd management tool for Partner alliance to manage realm users Worked with LDAP to create an authentication mechanism for internally hosted applications Environment: Fedora Core 5, PHP 5, Mysql, CVS, SVN, Drupal, Typo3, PEAR, PECL, SOAP, CSS, XHTML, Javascript

Working in the customer Experience department, responsibilities include updating content, creating new pages for new product releases, creating theme pages, and redesigning pages. Specifically for the Home & Home Office section of Symantec.com. JSP are used to grab the content from XML files and transform the data with the use of XSLTIntegrate Ajax into certain areas to improve functionalityCreate JSP pages based on the visual design and schematics received. Create XML files that follow the Symantec schema for containing content Create new CSS styles based on visual comps for new and redesigned pages Create Javascript for interactivity Update Sitemaps After work reviewed on the Dev server push to Live server

Responsible for consulting with potential clients about their business and technical requirementsHelp to put BRD/TRDs together to better help determine the pricing for the contractWorked as the Lead developer, managed contracted developers who worked with us on a per project basisManage teams of up to 6 developers Did code reviews of all code written by junior and mid-level developers Wrote up both Technical and End-user documentation Created the database schemas for all projects Priced out the amount of development work that would be required for each project Dealt with the clients directly for periodic code drops and final milestone delivery Was responsible for interviewing new applicants and providing any training required for each projects needed skills