• Lead Domain Architect, Solutions Architect and Engineering team across 9 distinct Security fields.• Provide Enterprise Security standards, project planning, project delivery and Engineering, for our Cybersecurity Technology solutions across all functional Areas throughout PG&E (IT, OT, Gas, Electric, etc.).• Lead our 24x7 Cybersecurity Infrastructure Operations teams in support of new solutions/capabilities/products.• Work closely with all functional areas of business to provide strategic direction, solutions and delivery for new capabilities.• Designing, deploying and maintaining next-gen solutions/capabilities to meet the todays business challenges to stay in front evolving threats.• Maintaining and enhancing relationships with internal & external entities/vendors.• Personal focus on promoting and maintaining an environment for creative thinking/solutioning to reduce costs and long-term strategic maintenance (Hard and Soft savings). • Achieve results through others by Leadership/Mentoring skills, setting and communicating goals and metrics, monitoring progress; providing ongoing coaching, feedback, and reinforcing behaviors that optimize performance.

• Lead Engineering and Operations teams across 3 distinct functional technological areas; Configuration & Vulnerability Management, Endpoint Threat & Data Protection, and Threat Intelligence & Event management (SIEM).• Provide planning, project delivery, Engineering and 24x7 Infrastructure Operational support, for our Cybersecurity Technology solutions across all lines of businesses (IT an OT).• Closely partner and work onsite with Cybersecurity, Security Information and Operations Center. Provide Infrastructure and endpoint Engineering and Operations solutions for the Threat and Intelligence team.• Accountable for negotiating conflicts and ensuring identified issues are resolved.• Acts as a liaison and conduit for information flow between the department teams, Lines of Business (SIOC, Intel, Gas, Electric, Customer Care & IT) and with appropriate external stakeholders.• Achieve results through others by Leadership/Mentoring skills, setting and communicating goals and metrics, monitoring progress; providing ongoing coaching, feedback, and reinforcing behaviors that drive high performance.• Accountable for ensuring >95% PG&E security agent and technology deployment running across all IT and OT environment, 60,000+ Endpoints (AIX, RHEL, Windows & Mac), and where applicable running on all in-scope network devices• Ensure Security controls are healthy, updates regularly, and automate activities whenever capable to prevent impact to PG&E’s 25,000 employees and 15,000 contractors

• Lead under a high stress outage conditions, support Power Safety Power Shutoffs interfacing with PG&E executives both written and orally.• Ensure timely and effective communication regarding the mapping of initiatives to business goals to business partners, including presenting information to IT and business leaders outlining portfolio specifics.• Provide IT services including planning, development, implementation and support for systems solutions required for the PG&E Lines of Business.• Accountable for negotiating conflicts and ensuring identified issues are resolved.• Acts as a liaison and conduit for information flow between the department teams, IT, Lines of Business (Gas, Electric, Customer Care & IT) and with appropriate external stakeholders.• Achieve results through others by Leadership/Mentoring skills, setting and communicating goals and metrics, monitoring progress; providing ongoing coaching, feedback, and reinforcing behaviors that drive high performance.• Leverage my diverse IT background to include automation (C# programming, SQL, HTML, etc) of critical and routine Service Management tasks.

• • Supervised 18 direct reports.• Major contributor in the success of the national IT UNITE study moving PG&E’s Windows support from 4th Quartile to second place first quartile (compared to all major national utilities)• Lead CS maintenance initiative resulting in a risk score reduction of over 30% in the first quarter of 2014 when compared to the prior year. Success achieved through a complete redesign of how PG&E teams treat and respond to patches and risk alerts.• Team works on an average of 11,916 new work orders & incidents annually.

• Supervised up to eight IS Compliance Analysts for approximately 5 years• Coordinated and facilitated over ~50 projects, Internal Audits, NERC and Risk Assessment Compliance activities with over ~60 groups and organization both internal to Infrastructure Services and external.• Created the IS Compliance SharePoint site to manage and monitor all IS Compliance engagements to remediate or mitigate findings. Team currently tracks over 3,700 active risks and regulatory alerts (over 7,500 unique/historical alerts in total).• Facilitate the remediation efforts, monitor, and pursue all inbound (IT IS) vulnerabilities.• 2010 nCircle published a case study on PG&E specifically pointing out an IS operations risk reduction of 76% within one full calendar year (2007 – 2008). My team served a critical role in this achievement. The original IT goal was 40% and outcome was over 70% reduction in IT Operations risk.• Built and maintained relationships with over 47 separate IT IS groups and over 20 IT organization groups which was instrumental in achieving IS remediation success.• Lead Subject Matter Expert in the IS VMSA (Vulnerability Management Stakeholder Alert) process and I created the IS Dashboard displaying risk status impacting all IS. The IS Dashboard captures live status information from the following sources; Information Security, IS&C Audit & Compliance, IS&C NERC/CIP, IS&C Compliance, Security Business Advisory, Information Technology Auditing, Financial Audit, Operations Audit, and Finance Compliance & Controls.• Responsible for reducing the number of Sarbanes-Oxley (SOX) failures from an average of 10 – 12 per year when I first accepted the position to the current 0 – 3 annual failures.• Direct participant & contributor in quarterly Sarbanes-Oxley (SOX) BPO signoffs with IS & IS&C Sr. Directors & IS Directors.• Maintenance, creation, pre-testing, and adherence to IT IS regulatory controls (SOX, FCC, FAA & NERC CIP).

• Created and implemented the first PG&E Enterprise Windows Member Server Security Configuration Manual (119 pages). Standards deployed on all Windows (over 2,500 hosts) UDN and ODN (SCADA) Servers• Created and implemented the first PG&E IIS Security Configuration Manual (55 pages). Standard is used on all Windows UDN and ODN IIS (web) Servers (over 500 Servers).• Created and programmed the first PG&E Enterprise automated Windows Server installation process with Automated Security configuration settings included. Prior to my automation programming, a full Server installation, with standard applications and Security requirements took roughly ~30+ server admin hours. After my automation process the installation time was reduced to roughly 4 server admin hours.• Coordinated and facilitated the Enterprise rollout of Windows 2003 Server and IIS. This effort required a comprehensive deployment process, clearances, and an superfluous amount of external organization communication to guarantee no service disruption• Coordinated and Facilitated Enterprise standards discussions with the Utility Data Network (UDN), Operational Data Network (ODN) and PG&E corporation network (PG&E-Corp).

• Maintain PG&E’s web server at the FFIOC facility.• Implement new security standards for the NT Server Operating System for the FFIOC internal and external web servers.• Maintained communication with all my Web clients (300+ groups http://www/) to insure the progression of new web technologies as well and providing web development support when needed to those clients.

• Consultant work at several Fortune 100 companies. ChevronTexico, Charles Schwab, Providian Financial, Bank of America, PeopleSoft, PanAmSat, MCI, Cadence Design Systems, Pacific Bell and Chiron.• Lead/supervise employees and consultants on large scale projects.• Windows OS lead responsible for ensuring the stability of MS Windows environment being deployed to a user community of over 30,000+ client machines.• Mentored personnel in highly complex and technical areas of operating system security and configuration and the establishment of standards and best practices.• Provided senior level Scripting/Programming/Automation support to the application integration/QA/QC, Engineering teams.• Tier III escalation point for all problems related to Microsoft Windows.• Streamlining of existing corporate process/practices relevant to network engineering.• Engaged in the design, implementation, and documentation of various clients' AD infrastructure for Windows 2000 migrations from NT 4.0.