Providing vCISO, Fractional CISO, and CyberSecurity consulting services

Director of Security & IT- Built and Manage Information Security and Risk Management program- Led company through audits achieving SOC 2 Type 2 and ISO 27001 certification- Built enterprise IT function across two offices- Manage a team of security and IT engineers- Collaborate with product, legal, and engineering teams to ensure compliance with EU GDPRSystems Architect - October 2014 - December 2015- Building an in-house PaaS using modern containerization technologies - Automating AWS through IaC- Write tools in Ruby to interact with internal and external APIs

- Remediate security vulnerabilities found by external tools and internal staff- Write chef cookbooks for automating server builds and system changes- Author AWS EC2 automation tools for building cloudformation stack- Key member of team managing and implementing migration from Rackspace to AWS- Work with software engineers to diagnose and fix production issues

- Managed systems engineering team- Managed linux systems in a Rackspace hybrid cloud and AWS- Built new monitoring and metrics system - Wrote chef recipes to automate cloud server builds- Managed hiring for systems engineers

- Manage team of site reliability engineers (systems, network, software, security)- Work with vendors to negotiate pricing on new purchases and bring down costs on existing service- Managed 250+ servers across 5 global datacenters- Managed growing Hadoop cluster and associated services- Managed network delivery performance for BGP Anycast- Implemented cobbler and chef to provide consistent system builds- Implemented network device monitoring to aid in troubleshooting and capacity planning- Created information security program- Manage external general controls audits- Work directly with executive management on tech strategy and execution

- Lead information security related initiatives- Developed and maintain information security policy and procedure documents- Provide support and materials for use in sales generation and pre-contract due-diligence- Lead Business Continuity and Disaster Recovery planning and testing- Develop and conduct recurring security awareness training for entire staff- Developed and maintain incident response procedures- Lead security incident response team- Developed, maintain, and conduct IT audits to assure systems and controls comply with policy- Work with software engineering team to ensure secure coding practices are followed- Manage 250+ Linux (CentOS 5) systems running on bare-metal and Amazon EC2- Support SaaS product consisting of J2EE applications running on Apache and Tomcat- Create puppet manifests to manage automated system deployment and configurations- Provide leadership and guidance around all Content Delivery Network(CDN) integrations- Compile and evaluate metrics for capacity planning and capacity management activities- Handle day-to-day network administration tasks(R&S, LB, GSLB)

- Installed and managed RSA SecurID system supporting two-factor authentication- Regularly provide security audits for PCI and SOX compliance- Member of security incident response team- Managed day-to-day storage engineering needs on EMC Clariion and NetApp- Led initial setup and regular maintenance of Nagios-based monitoring system- Major contributor in complete production network redesign and implementation- Set up Solaris Zones for datacenter virtualization- Managed over 400 systems running a mix of Solaris 8-10, and Linux (RedHat/CentOS)- Led migration from Sun-branded SAN to EMC Clariion CX3 on a Cisco MDS9000 fabric.

Yahoo Mail - Senior Service Engineer - 2005-2006- Managed over 10,000 servers in geographically diverse datacenters- Lead liaison between Yahoo Mail and Yahoo Small Business in supporting the Small Business email product- Setup and maintained monitoring infrastructure for Business Mail product- Collected data and presented monthly capacity and metrics for Business Mail product- Defined new SLA and escalation processes for support of the Business Mail productYahoo HotJobs - Senior Unix Systems Administrator 2001-2005- Managed over 600 Solaris, Linux, and FreeBSD systems- Developed large environment system admin tools to maintain consistency among large numbers of systems- Managed EMC Clariion 4500/4700 storage systems- Created standardized system build procedure documentation- Implemented automated change management system for network devices- Managed load-testing and roll-out for new resume search engine technology- Managed integration of Yahoo technology into HotJobs infrastructure- Moved primary datacenter from HotJobs NYC datacenter to Yahoo Virginia datacenter- Participated in BCP failover of primary site to disaster recovery site so that primary site could be moved- Set up and maintained Veritas Cluster Server on multiple Oracle database servers

- Managed two systems administrators- Designed, set up, and maintained web and content management infrastructure running on Solaris and Linux- Wrote software to manage content, code deployment, and monitoring

- Maintained RADIUS, LDAP, Web, Email, USENET News, and other ISP-related services- Designed and implemented a major wide-area network expansion- Moved primary data center from CT to NYC

- Set up and maintained Web-Based Email infrastructure serving over 4 million users- Set up Auspex and Network Appliance network filers for email storage- Set up automation scripts to keep configurations consistent among all key systems

- Set up, managed, and monitored Netscape(iPlanet) web servers running on Sun Solaris- Engineered and implemented improved security policy- Wrote scripts for automating the retrieval and processing of webserver log files for data mining purposes

- Managed and supported 50+ Solaris, BSDI, FreeBSD and IRIX systems providing ISP-related services

- Designed and managed networks for regional ISP- Set up and maintained several FreeBSD and Solaris systems providing ISP-related services

- Provide end-user troubleshooting of connectivity issues- Managed installation of dedicated circuits- Managed company-installed customer premise equipment