Security and Engineering Quality* Lead security efforts across Teachstone and quality efforts within the engineering organization* Manage and lead security, SRE (tier 3 + devops), and data engineering teams* Lead the development of ETLs, devops automation, minor bug fixes and enhancements to our SAAS offersings, and integration applications used to automate business process workflows for internal software systems.* Work as needed across all engineering teams to help maintain and improve engineering quality - processes and practices* Mentor and coach across the team in a variety of areasNotable accomplishments:* Lead and managed refactoring our AWS architecture from a single AWS account to a multi-account architecture guided by least privilege and failure domain isolation* Lead migration from manual configuration to Terraform-based infrastructure as code for AWS resources across all AWS accounts* Establish company-wide security awareness training and phishing testing training* Lead increasing AWS security compliance and best practice scores by 2x over 2 years* Establish and maintain GDPR and FERPA compliance* Ensure company maintains PII compliance* Contribute many code and configuration enhancements to improve application security based on recommendations from code scanning tools and manual analysis* 99.95% platform availability for all in-house built and maintained, customer facing applications from 2021 through present

Systems OperationsManage and lead Teachstone's QA, Tier 3, Devops, LMS, and IT teams:* Lead the hiring process for my teams* Roadmapping, strategic goal setting, establish and manage to KPIs for all teams* Manage day to day work of all teams, including software releases* Cover for directs as needed (sick, vacation, fill in while finding someone for a position)* Ensure the most important work is always being worked on* Mentor and coach across teams* Lead on-call for the company and incident manager for the company* Establish and lead cross team projects* Manage $1m+ annual budget for all teams and systems* Support and maintain a positive, productive, supportive team culture in which we learn from failures, we feel comfortable talking about risk and continually taking measured risks, we continually improve how we work together, and we support each other during hard times to ensure we make it through them while always celebrating victories together

Software Engineering and IT* Lead Teachstone's internal software engineering, QA, devops, and IT teams* Screen and identify candidates for new positions within my teams* Manage a $1.5m+ annual budget* Develop and refine security and privacy policies for applications and IT* Coordinate efforts of all consultants working with us on software projects* Architecture guidance and road mapping for new and existing software projects across all teams at Teachstone* Mentor and coach - employees on our teams and other teams within Teachstone * Mentor other leaders within Teachstone on Scrum / agile methodologies / SDLC concepts and processesNotable organizational milestones:* 08/2015 - Successful public launch of our MyTeachstone SAAS product, a 10 month, 18 person engineering effort - https://teachstone.com/myteachstone/* 12/2015 - Internationalized version of MyTeachstone with full Spanish language support* 5/2016 - initial data warehouse / BI solution* 08/2017 - Migrate to consolidated IAM / IDM platform and create single application user experience* 03/2018 - Integrate Totara LMS* 05/2018 - Integration development work powering Teachstone's online CDA program for KinderCare employees

Wide variety of consulting services since 1998, current focus is on career coaching and mentoring for software engineers, devops engineers, scrum masters, business analysts, IT-oriented project managers, and security analysts

Contract instructor for O'Reilly's live training platform - Effective Mentoring

Open source developer, projects include:* Nmap OO class wrappers in perl, Nmap::Scanner. Mentioned in Gordon "Fyodor" Lyon's book on Nmap* Log monitoring framework, perl - http://lmf.sf.net/* Nagios and Cacti integration dashboards, php - http://cacinda.sf.net/* Ensim management scripts, in python - http://wwd-hosting.net/ensim/* CPAN modules: Nagios::Plugin::SNMP, Schedule::Week, Nenm::Utils* Helped add SNMP v3 support to Cacti* Patches to nmap for early XML support* Patches to osCommerce, an open source shopping cart* Patched Net-SNMP to fix bug in pass_persist table handling code* Performance-related patches to Nagios (accepted into Icinga).* Small patches to Sidekiq, BugsnagMy online username for projects and technical discussion is perldork.

Project lead / team lead / lead developer / mentor on a software development team of 16 - design, implementation, and maintenance of highly available, scalable software with a focus on self-service processes and extensive use of open source software. Projects include: * Highly available web-based outage management tracking system* Distributed, fault-tolerant, enterprise level monitoring system based on Nagios (monitoring 150000+ nodes).* Rails-based Router ACL change management-tool (national scope)* Rails-based video on demand configuration editor used nation-wide to manage video on demand site configurations* Development and informational layout for Wiki and systems and application related documentation, * Patches to open source tools in C, perl, php, and ruby.* Community building (lead standards meetings, started and lead Comcast Tech Talks, mentor within and across teams).Responsibilities:* Requirements gathering, release planning, iteration planning.* Training and mentoring of new and current staff* Develop, refine, and enhance SDLC processes, including: ** Testing methodologies and frameworks ** Cross-team relationship development (including monthly cross team tech talks), ** Code reviews* Development of team standards, operational practices and procedures* Oversee and encourage open source contributions from team to OSS community. * Oversight on team direction, pacing, and code/architecture quality.

Government customer. Systems Integrator, Test Engineer, Lead Systems Engineer, Operations Engineer.Lead on network and application monitoring and performance trending for all networks and systems (over 500 nodes located around the world) using CA's eHealth, SNMP agents, and custom application-level scripting with perl, python and ruby. Recommended, setup and maintained monitoring and host configuration software for integration and development environments: Cacti, Nagios, Puppet, NfSen, and custom integration code, including text-to-speech.Served as test engineer, installed in-house built software and helped troubleshoot and enhance documentation formats and procedures. Deployed software to production environment as needed.Created one off and longer term usage scripts using perl to support customer functionality. Examples: script to replicate LDAP records in near real-time between LDAP server instances based on attribute values, script to imitate user interaction with customer website to monitor web site performance and alert support personnel if the web site failed to respond properly or in an acceptable time frame. Helped administer LDAP servers and troubleshoot problems on development, integration, and production networks. Helped identify and troubleshoot problems on both the production and test environments related to system / software functionality. Worked with Bluecoat hardware proxy as a reverse web proxy.Helped write system requirements and other technical documentation for several projects. Worked on a variety of system engineering and network engineering projects, including GUI automation, reverse-engineering / data extraction tasks, network capacity planning and analysis, and code auditing (Visual Basic).Trained, mentored, and tasked junior staff members as needed. Performed technical interviews for new system adminis

US-CERT contract.Used commercial IDS software (QRadar) to monitor network traffic, created protocol-specific signatures and classifications for traffic for IDS, identified and labeled ports with well known service names (if available). Helped analyze log entries/configurations from compromised systems as needed. Helped coworkers troubleshoot UNIX and Linux server problems. Helped create scripts to automate system administration tasks. Installed and set up Linux servers. Created logical, physical, network, and data flow diagrams for two projects to assist with SSAA process. Wrote text on system and network design to assist with SSAA process. Coded custom software to interact with IDS database in ways not provided by IDS vendor to meet needs of client.

DHS contract.Administer and troubleshoot WebLogic, Apache, Tomcat, MySQL, CVS, DNS on Windows 2000, sendmail. Administer, setup, configure, troubleshoot SANs made of pairs of Sun T3 disk arrays. Use Veritas Volume manager and Solaris LVM to configure software and hardware raid and large volume mapping across the disk arrays. Set up fiber channel network for SAN made of T3s. Administer, monitor, upgrade, and troubleshoot Cisco network devices: 515E PIX, 2620 router, 2950 switches, 4235 IDS. Setup and administer VPN server and clients using Cisco PIX, Cisco Concentrator, and Cisco Concentrator VPN client. Document existing network at many different levels, including logical network diagrams, system architecture diagrams, and service-specific diagrams (e.g. mail configuration).Help design software life cycle processes, including bug fixing process, developer code standards, source code control, and software build and roll out processes. Perform build master duties and automate nightly builds, generation of UML class diagrams, and javadocs from java source code. Train users on CVS usage. Design, develop, and troubleshoot software components using Java. Implement hardware configuration management package and hardware and software configuration management policies. Develop and implement backup software for LAN using scripting tools and COTS packages. Research and make recommendations on purchases of new hardware and software as needed. Train and assist other administrators and developers on team as needed. Document hardware and software policies and procedures. Recommend software, set up, and maintain Intranet (TWiki, IRMA, Bugzilla, CVS Monitor, View CVS, web-based chat).Software development - integrated DBCP (database connection pooling) into GEWIS system. Integrated ant and created build scripts. Designed and coded web applications. Integrated and customized CAIDA visualization java applet in order to provide a geographic view of network data.

Software development/consulting. Work with Verisign/Network Solutions through Vanward Technologies on several contracts. First contract: allotted two months to write Verisign Retail Partner XML Client CGI reference client package, which included: cross-platform installer script, multi-tier client/server programs, support site setup (both system level and webmaster level) and full documentation. Retail Client package uses object-oriented perl, XML, and XML/HTTP POST technologies. Work included spec interpretation, system design, implementation, unit testing, system testing, and documentation. Distribution in full is available at http://webwizarddesign.com/max/projects/VRPP_CGI_Sample_1.0.zip. Project two involved both maintaining and updating a Java middle-ware component in the Verisign system, the Bizcard Engine. Work included component design, design documentation, implementation, unit testing, and sub-system testing. Component involved use of HTTP/HTTPS transfers using both the JDKs' HTTP/URL classes as well as custom classes built using SSLJ (RSASafe) to support HTTPS connections to SSL version 2 web servers. Unit and system testing are done using Jython. Project three involved middle tier work on the Fulfillment Gateway component of the Verisign system. Work included design, documentation, implementation, and unit/system testing of code (with JUnit and jython) to enhance current functionality as well as refactoring of existing code. I set up monitoring of CORBA-based servers using Cricket to monitor high level statistics such as successful/failed transactions / minute, account sign ups / cancellations per minute, and overall transactions per minute.Additionally, I recommended and installed DNS and MTA related software on a Vanward server. This included a chrooted instance of BIND 9 that acts as the primary server for several Vanward DNS zones, qmail as the MTA, POP3 and IMAP services over SSL, and a web mail client.

Software development, software life cycle process design, network/system administration, network monitoring. Work as a member of a six to ten person team developing a distributed system, first for unattended delivery of packages, then for access control, in Java. System is n-tier development and included both wired and wireless components. Use many frameworks and Java technologies, including EJB (1.1 -- stateless), MDB, Struts, JMS, JNI, Cocoon (XSLT/XPath). Use and help implement groupware and software life cycle tools, including: TogetherJ, CVS, ant, Resin, Weblogic 6.0, Twiki, mailman, Bugzilla. Help integrate software development practices into team, including use of some parts of Extreme programming. Design and implement software components both as an individual and on teams. Design and implement/enhance notification system for both real-time and batch notifications in the Brivo system. Design and implement build and deployment scripts using perl that interact with ssh/scp/AIM/email. Setup and configure network monitoring policies using SNMP, Openview, perl, MRTG, Net-SNMP agents on eight servers, and Big Brother. Perform system administration and configuration duties, including setup of web servers, database servers, mailing list management software, user accounts, sendmail, LDAP, and Linux systems. Work in environment with very short develop/test/release cycles (5-6 weeks) with tight deadlines and constantly changing technologies.

Software development. Work as member of ten person development team on an all Java system designed to automate Carey International's business processes. System used three-tier architecture with CORBA for network transparency. TOPLink used for object-relational database mapping, Visibroker as the ORB, Oracle 8i for the database. Worked as one of four GUI developers using JDK 1.2.2 and Swing to develop and troubleshoot client GUI. Fixed bugs in both UI and middle layers, wrote system tests, reported bugs in other areas of the application, re-factored code. Additionally, wrote perl scripts to perform system maintenance and monitoring tasks per client specifications. Used Visual Source Safe for source code control and PL/SQL developer for SQL debugging and database drill down. Developed Java code using Borland's Jbuilder for Windows NT. Assisted with UNIX and network trouble-shooting.

Software design and analysis, implementation, trouble-shooting, and configuration. Design, document, test, and implement software in Windows with Visual Basic, perl, and Cold Fusion. Manage development efforts of two person developer team. Create object-oriented perl scripts for use in a cross-security level, networked application utilizing XML and SSL. Create Java servlets for use within the same project. Use RCS/SCCS for source code control. Write shell scripts, administer UNIX Systems for the Operational Support Facility of the Defense Information Systems Agency. Develop scripts supporting the segmentation process of Empire agents and HP NetMetrix tools for the Global Command and Control System and the Defense Information Infrastructure. Develop and troubleshoot high-level SNMP filter and display application, consisting of VB application and web-based display module. Analyze security for UNIX-based systems. Perform technical interviews for positions within Van Dyke. Design and implement web interfaces for Visual Basic project using perl, Cold Fusion, and Java.

UNIX Systems Administrator / Database Administrator for the United States Patent and Trademark Office, Scientific and Technical Information Center, Inter-library loan department. Responsible for maintenance of Sun SPARC20 server, Sun SPARC10 workstation, Cuadra-Star relational database software (260,000 records in 30 databases), and 18 PCs on a TCP/IP LAN. Provide first line of support for the LAN/PC/UNIX related problems for 28 users. Install software, configure PCs and Sun workstations, monitor system security, perform system administration tasks, track software licenses, and train users on DOS and UNIX software and hardware. Managed and trained one junior level systems administrator.Automate system administration tasks using shell tools and perl. Automate report generation. Created monthly reports using UNIX and Excel. Create statistical reports using Star, Excel, and UNIX scripting tools. Provide consulting on purchases of new software and hardware for LAN. Assist supervisor in determining how to provide better service to clients and staff using UNIX, the Internet, and third party tools. Create macros for use with Star database system. Created UNIX manual pages using the an macro package. Installed and configured sendmail on UNIX machines.Developed a set of perl scripts to parse requests sent via e-mail sent from Intranet web pages and load them into the Star database system. Developed an accounting system for the Star database system using perl. Created an intra-server messaging system. Created customized menus for users not interested in or not knowledgeable in UNIX. Created shell and perl daemons. Installed and setup Apache web server on a UNIX workstation.