Jonathan Pautz Email & Phone Number

Managed team of Security Engineers covering S-SDLC and Cloud Security Domain• Replaced 7 security products with 1 reducing cost while increasing value and performance• Partnered with Infrastructure team to combine several AWS Orgs into a unified Master Payer• Standardized AWS OUs, SCPs, CloudTrail, and GuardDuty across the Organization• Unified AWS Access into an as-code self-service flow using terraform, freeing IT cycles processing tickets, and streamlining developer productivity• Created portfolio of managed Security Staged and integrated into all Product Engineering S-SDLC pipelines• Implemented Admissions Controllers to all Kubernetes Clusters. Reduced vulnerabilities by 50% Org wide (VM, Container, Serverless). Reduced critical and vulnerabilities in Kubernetes by 100%

• Founding member of DevSecOps/Cloud Security Program, building it from the ground up• Planned and provided a roadmap, hired personal, negotiated prioritization with leadership• Unified Cloud Security tooling across 5 sibling companies acquired via M&A (AWS, Azure, OnPrem)• Rolled out CSPM to complete coverage in first 90 days, the first tool in the company to reach 100%• Blazed trail for Infrastructure team incorporating Atlantis terraform management into all AWS Accounts• Spearheaded pivot to centralized Github Actions and Terraform Modules

• Founding member of DevSecOps and Cloud Security Program, building it from the ground up• Planned and provided a roadmap, hired personal, negotiated prioritization with leadership• Led technical implementation for projects such as Pipeline Security Scanning, and CSPM• Responsible for S-SDLC, Cloud Security (KMS, IAM, WAF), and Kubernetes Security• Security Point-of-Contact for all Cloud Implementations and Deploy/Release Processes• Security Owner for organizational controls inside GCP• Founded "Operations Team Sync" to improve communication and alignment between our Infrastructure, SRE and Security teams.

Focused on Automating Security throughout the Software Development Lifecycle, bringing visibility to Application and Infrastructure Quality and Controls• Cloud Security• Pipeline Security• Code Release and Compliance• Identity and Access Management• Secrets Management and Service Mesh• Audit Response and Evidence Collection

• Lead Engineer for Architecture and Implementation of Cloud Migration (AWS)• Establish CICD processes as a domain expert • Migrating .Net VM to Containers on Kubernetes (EKS and OnPrem)• Promote Cloud Native, Container/Kubernetes first patterns• Implement Secrets Management and Service Mesh• Lead Engineer Responsible for hiring staff

• Team Lead for automated governance and compliance system with codified Policy• Reduced time to production from 90 day to 14• Leveraged modern technologies such as Golang, Kubernetes, Kafka, and KNative• Gatekept deployments with no manual intervention via injections into Deployment pipeline• Supplied live metrics, tracking the quality/compliance of applications across organization.• Implemented Containerized Digital Signing, Verification, and Scanning of pipeline artifacts• Thought Leader with Senior Leadership across Lines of Business, discussing direction and actionable plan for the Organization• Integrated Continuous Deployment and Governance into ServiceNow Change Request workflow, automating the process• Primary interviewer for full-time and 1099 hires

• Lead Infrastructure as Code Dojo• Taught best practices regarding Golden Images and Patching• Differences between Provisioning and Configuration Management• Primary interviewer for full-time and 1099 hires

• Built Ephemeral Jenkins Pipelines using Shared Libraries and Containerized Stages• Migrated and Coached application teams onto Git, Ephemeral Jenkins, and DevOps Tooling

Point Mugu, California

• Subject Matter Expert for RS232 to Ethernet upgrade• Responsible for requirements validation and communication between product teams• Attended Critical Design Review (CDR) to answer any questions that may arise

San Luis Obispo, California Area

• Developed CI Pipeline for mobile application (Android and iOS) using bash• Wrote parallel testing suite for apps using Appium• Automated the deployment of emulators and executing test suite- Automated log collection from emulators apart of test run and published to central server

Bachelor Of Science - Bs, Computer Software Engineering

Computer Science

Aa In Mathematics And Science, Ast In Mathematics, Computer Science