Robert Castillo Email & Phone Number

New York, NY, US

We help companies migrate to the cloud. Full Devops/Cloud team available in four weeks, including Cloud Architect and Scrum Master. We’ll take your business requirements, create an architecture, roadmap, and completely manage your cloud migration."You Code/We Cloud"

Roswell, Georgia, US

Led cloud migration for warehouse robotics company. Collaborated with devops, architecture, development, IT, pre-sales, legal, and compliance teams for security and architectural initiatives, including SSO, secure network & cloud architecture, SDLC training, Threat Modeling, GDPR, Incident Response, etc.

London, GB

• Identity and Access Management Architect working with various IDAM development teams, focusing on identity, security, and privacy issues. Worked across the organization with Product Management, Security, Privacy.
• Identified business risk with Password Hashing, aligned Architecture, Security, and Product Management teams, and designed solution that worked on legacy and next generation solutions.
• Hands on work with SAML, OAuth, and OIDC federation protocols. Designed solutions from protocol level to UX. Supported new product features as well as remedying legacy issues.
• Created Globalization design that supported privacy regulations across legal jurisdictions while still allowing for design goal of One User worldwide.
• Designed JWT token upgrade. Standards-based solution simplified design, provided extensibility, improved security (key rotation), and improved scalability (client-side token verification).
• Worked with UX and Product Management teams on login flows (password reset flow, new user flow, federation, etc.)

Fort Lauderdale, FL, US

• Security Architect for file sharing acquisition. Worked with Software Development, Product Management, and Security teams to ensure that user data was properly secured.
• Identified business risk with Password Hashing, designed and coded solution.
• Designed and coded two factor authentication system. Features including SMS and voicemessages to send TOTP codes, one time passcodes for offline use, and GoogleAuthenticator support. Future plans included geofencing.
• Introduce process improvements and security training for agile development team, including: threat modeling, mitigating web-based threats, code review checklists, unit testing, and static analysis tools.

Fort Lauderdale, FL, US

• Rewrote Active Directory components to support enterprise customers, including cross-domain, multi-forest support for machine identities, group membership, and SID resolution.

Redmond, Washington, US

• Member of local security team for Microsoft acquisition. Involved in all security remediation and adoption of SDL: threat modeling, attack surface analysis, code reviews, fuzz testing, penetration testing, and tool.
• Created design for digitally signing unprotected files so that they can be verified during streaming without reading the entire package. Approved by Microsoft Security team without any changes.

US

US

• VPN Gateway development to provide realtime backup safely over the Internet. Designed and implemented WinSock Layered Service Provider (LSP) in C++ to intercept client/server socket calls and redirect connections to a.
• Extensive RADIUS server development in C++. Added several features to cross-platform server, including authentication (PAP/CHAP, TACACS+, SecurID), proxy support, and concurrent user limits. Implemented server redesign.