Assisting organizations Shifting Left security into their development teams....The Last Firewall

-Ensure the security of cloud applications prior to release.-100% Azure cloud operations-Designer of the Security Operations Center Incident Response Infrastructure and Processes-Migrating applications to Kubernetes -Kubernetes security -Lead of Security Awareness 'Shift Left' efforts securing applications to OWASP ASVS Level 3

Responsibilities: - Liaison between public cloud R&D DevOps (mostly AWS) and network/security operations for managing aprox. 5-10 application handoffs from R&D to daily operations support - Lead operations engineer and security engineer for all of Medtronic vmWare NSX private cloud hosting approx. 2000 applications, 20 global hosts, 14 VXLANS, 100 internal customers. - Responsible for taking an R&D private cloud based on VMware NSX and operationalizing it for production- Soley responsible for private cloud VMware NSX security operations of approx 400 application based firewalls and AV management.- Spearheaded the design of a hybrid cloud solution architecture that allows applications to float between public and private clouds. Cloud applications are created from Service Now and deployed to test/stage/prod via Gitlab and maintained via Puppet.- Responsible for working with approx. 100 internal customers assessing their security requirements and allocating security assets to protect their infrastructures. Specifically responsible for firewall/IPS protection and ensuring compliance with corporate security standards.- Defining and development of cloud automation tasks/reports based on Python, Powerscript, Perl- R&D into reducing our firewall (approx 400 major firewalls) capital and operations overhead thru the use of private VLANs and software firewalls- Provided global training on our Public/Private cloud, Cloud Automation, Software Defined Networking and Cloud Security to our operations team (approx 50 staff) in EU, AsiaPac, Americas.Technologies:- Vmware NSX- Amazon AWS- Check Point vSec, VSX, MDS - Bluecoat proxy- Ravello Cloud- IPS - Cisco Firepower - IBM Proventia- Tufin

idpoint Engineering ManagementDefined and managed delivery of information security services and training in support of enterprise customers.Built extensive models for labs and simulations in virtual environments: AWS, VMware, VirtualBoxConducted 50+ training classes on Check Point MDM, VSX, Gateway product suite training with over 250 students on these systems.Migrated data center with no downtime for large international auto parts vendorMaintained one of the top technical blogs for Check Point firewalls - dreezman.wordpress.com3M Security Engineering ContractorSuccessfully managed 400 firewalls in MDM environmentPlanned and deployed up to 1200 firewallsCreated web-based automated tools to manage and monitor 400 firewallsUnited Health Care Security Engineering ContractorFully responsible for P1/MDS firewall management of 250+ firewallsBuilt automated tools for migrating applications to security environmentsUsed AWS, VMware, Virtual Box to build models for labs and simulations in virtual environmentsImplemented and supported migration and training of Check Point MDM/VSX for 120+ administratorsConducted 50+ training classes using Gateway Product Suite Training for 250 students on CheckPoint MDM, VSXIntegrated SEIM log management into RSA Envision and executed forensics with EnvisionLaunched virtual firewall environment supporting $20 billion government contract for health car

Founder and CEO of information security consulting firm with 4 employees. My principal role was performing security audits for the banking industry and business developments.- SOX/PCI/HIPAA/NIST security auditing- Penetration testing- Social engineering- Security architecture consulting

-Founder and CEO of 15 person information security services firm that serviced about 75-100 clients in the Midwest -Focused and developed expertise in -Technical team management - Security architecture consulting - Business development - Security research into new markets

-Developer on Sidewinder Internet firewall team.-Unix kernel, device driver and application developer working in C, C++, Perl-Followed strict software engineering development standards with formal methods and verification-Key Developer/Team Lead of military grade Internet firewalls for National Security Agency for 5 years-Researched multi-level compartmental mode workstations -Researched distributed system security issues-Secured multiple ARPA grants to study security issues associated with SNMP network management stations

-Created a VHDL hardware simulator in Ada