Matthew Felton Email & Phone Number

Redmond, Washington, Us

Redmond, Washington, Us

I started the Journey Of The Geek blog back in 2012 when I saw an opportunity to provide in-depth technical deep dives to peel back the onion on technologies and products. It’s been a wonderful experience to share my learnings and interact with the larger tech community from around the world.

Seattle, Wa, Us

Acted as a strategic partner for public sector and non-profit organizations adopting the public cloud. This was a security and infrastructure focused role which had broad responsibilities including identifying business drivers, helping customers craft cloud strategy, and development and implementation of infrastructure as code in AWS. Specific items of note include:Reviewed and provided recommendations on non-profit's cloud strategy and technology roadmap which helped customer identify gaps in its focus on data governance.Advised non-profit on its identity and connectivity implementation with AWS. Worked with the customer to identify both short term improvements as well as the next evolution of their connectivity strategy.Supported non-profit on planning and implementing a regional failover focusing on successful migration and failover of platform-as-a-service public cloud services.Collaborated with public sector entity in its migration to AWS GovCloud with a heavy focus on security and infrastructure-as-code. This included a detailed security assessment and development and execution of IAM strategy.

Boston, Ma, Us

Technical lead and workstream lead for multiple program workstreams in a multi-year strategic program to assess and re-envision governance, architecture, and service model of Microsoft Active Directory infrastructure with the goal to standardize, simplify, and align the technology with the business.Evangelized cloud technology by focusing on the business benefits of modernizing identity, authentication, and authorization. This directly drove multiple areas of the business to adopt a software-as-a-service first mindset, developers to leverage libraries that support modern authentication and authorization, and incorporation of requirements for modern identity support in procurement process for new software.Conducted training sessions with cross functional staff to describe the differences between legacy and modern authentication and authorization protocols such as Kerberos and SAML. This helped to standardize the way the organization consumed identity services and drove business units to migrate to modern protocols.Integrated organization’s learning management system with federated single-sign on service to establish first hybrid solution for organization. This was used as an example of the success and drove further adoption of cloud technologies.Designed and implemented integration of Microsoft AD service with Microsoft Office 365 using Azure Active Directory Connect and AD FS. This provided the foundation for the initial adoption of Dynamics 365 and continued adoption of Office 365.Technical lead over a small team for a fast-paced critical project to remediate reliability and capacity issues with Active Directory. It resulted in a 100% reduction in incidents affecting the availability of the service and also provided new functionality critical to the organization's adoption of a business intelligence solution.Presented to a forum consisting of financial institutions about the challenges mobile devices present in securing data in the cloud.

Boston, Ma, Us

Authored enterprise governance for use of on-premises and cloud offerings that are integrated with federated identity service including necessary security controls, administrative approval process, and operationalization of the service which enabled the organization to quickly on-board servicesContributed to the design and lead the implementation of organization's first enterprise federated identity service using Microsoft's AD FS. This provided a foundational service to enable the organization's adoption of the cloud.Planned and executed migration of Microsoft Exchange permissions model in collaboration with messaging team which allowed the organization to move off of a legacy messaging system.Designed and implemented integrated rights management solution for mobile devices using AD RMS which included re-designing the service with the goals of simplifying and standardizing it to make it operationally easier to support.Planned and executed the upgrade of Microsoft Active Directory which allowed the organization to avoid costly extended support costs and take advantage of new features of the operating system.

- Authored and executed information security policy to comply with 201 CMR 17.00- Provided technical consulting services for bankruptcy and liquidation trustees across a wide array of systems and technologies- Planned and executed physical-to-virtual conversion of server infrastructure- Designed and built Windows Server 2008 R2 Active Directory Domain Service and Microsoft Exchange Server 2010- Performed computer forensic examinations including drafting of expert reports