Andy Sutton Email & Phone Number

Anson, Texas, United States

Identity and Access Management Principal Engineer working primarily in Azure GCC High, special projects, and acquisitions.

Advising businesses on Information Technology design, issues, and strategy.

Neillsville, Wi

Cloud Infrastructure Manager for FireHouse Software at Conduent.

Neillsville, Wi

Held direct oversight for the IT infrastructure, operations, policies, contingency plans and customer support functions for Clark County, WILed technology steering and strategy groupsSpearheaded several major initiatives including desktop virtualization, server consolidation and virtualization, and migrating applications from legacy AS400 to Windows.Coordinated activities and IT business process support across 24 County departmentsManaged, maintained and updated IT budgets, planning, and 5 year capital expense plans for Clark County IT as well as for the Xerox account.Manage and mentored staffMaintained County information security assetsMaintained WAN, LAN consisting of Gigabit Ethernet, fiber, T1, and VPN connectionsBuilt effective relationships with County Department Heads and elected Board SupervisorsReported the progress of the IT program to various board designated sub-committees and County Management

Ensured integrity and adherence to corporate data exchange/sharing practices, including adherence to HIPAA and other federal privacy laws protecting patient rightsLed security investigations; identifying and rectifying root causesSpearheaded several major security policy rewrites to more accurately align performance and business practices with federal and state regulationsServed as the liaison for all security related activities between corporate and its subsidiariesManaged tipping point intrusion detection/prevention device and ArcSight security event information management systemMonitored and planned updates to the IPS/IDS device to ensure maximum detection with no disruption to operationsEnsured the rigorous application of Information Security/Information Assurance(INFOSEC/IA) policies, principles and practices in the delivery of systems administration servicesResearched and analyzed email encryption products, recommending applications that met federal privacy laws and the needs of the various business unitsDirected the EPIC project staff on sound security design including providing the criteria used in the conversion of the core software to be compatible with company’s technological infrastructure

Held direct oversight for the IT infrastructure, operations, policies, contingency plans and customer support functions consisting of 6 locations Supervised and mentored IT staffEvaluated network security components and overall design in accordance with FFIEC guidelinesPlanned and directed internal, external and outsourced IT auditsConducted vulnerability assessments using managed services and in-house toolsTrained general staff monthly on IT topics, including information securityAdvised Senior Management on current directions in Technology and Information SecurityMaintained WAN, LAN consisting of Gigabit Ethernet, fiber, T1, and VPN connectionsAdministered Microsoft Exchange 2007, Active Directory and Group PolicyDeveloped the Disaster and Business Continuity IT action planDesigned and programmed various scripts and programs to produce automated security alertsManaged Cisco VoIP telephone systemTrained IT staff on diverse technology topicsWorked with regulators and auditors to ensure compliance with regulation and best practice

Analyzed HIPAA guidelines and orchestrated application fixes and security policy regulations to comply with patient privacy rights and laws. Created a remediation plan that addressed deficiencies prior to deadlines imposed in legislation Designed computer-based training modules to educate employees about HIPAA, information security best practices and system use which improved staff’s comprehension and application of policiesEnsured compliance with company security policy, applicable standards and regulationsWorked with the Compliance Team during investigationsAssisted design of security controls during application roll-outsAdvocated controls consistent with risk exposure and business needsCoordinated user security on various networked applicationsActed as a consultant to various elements of the organization for security guidance and design

Managed security controls and procedures in a highly regulated environmentManaged Network security devices, including intrusion detectionCreated information security program, policies, and procedures mapped to best practiceAssisted departments in the creation of IT Documentation for their areas of responsibilityCreated an intrusion detection and incident monitoring systemPerform Network vulnerability assessments.Reviewed Cisco based routers and firewall configurations in a very large networked environmentServe as liaison for internal, external, state and federal examiners during periodic auditsInvestigated security incidentsDesigned and maintained complex WAN connectivity using IP, IPX and X.25 protocolsCoordinated installation of frame relay high-speed linksInstalled and configured Cisco routers(26XX, 36XX, 75XX) and other networking hardwareNetwork management and monitoring lead using Adtran Nform softwareWorked with firewalls, access lists, and other network security technologiesSupported a variety of connection methods including frame relay, ISDN, digital polling, etc

Micromasters In Cybersecurity, Cybersecurity, Certificate Awarded

Activities and Societies: Masters level classes in CybersecurityMicromasters certificate.

Education record

Education record