Operating as a freelance security consultant on short to medium term projects, engagements obtained independently and through regional consulting companies. Assignments included conducting penetration tests, security automation (via bash, python, powershell), cloud security audits and compliance, injecting security checks into existing SDLC processes, providing general security, architecture and tooling guidance often involving container and kubernetes environments.Working with AWS, Azure and Colocated infrastructure. Tooling included Legion, Burpsuite, ZaP (zed-attack-proxy), Nuclei, SQLmap, Nmap, YARA, Wireshark, OpenSCAP, OWASP Dependency-tracker, Dockle, Clair, Kubiscan, Cloud Custodian, BinaryAlert, CloudSploit, eBPF monitoring (Tracee, Falco, Cilium).

Leading the initial DevOps and Security effort to design and build out the production stack in AWS, leveraging terraform, docker and automated builds with security checks (SAST, Secrets, DAST, Dependency analysis) injected into the CI/CD pipeline.Automated HIPAA, SOC-2 compliance via Vanta.

Leading the security architecture and engineering effort, implementing continuous security across all facets of the organization, harboring a close working relationship with the DevOps, Development and Business teams. Multi-cloud environment consisting of AWS, Azure and GCP. Security tooling includes Nessus, Jenkins, SonarQube, Amazon WaF, NAXSI, Amazon GuardDuty, Wazuh/OSSEC, AlienVault, OWASP Zap, Burp Suite, ELK (ElasticSearch, LogStash, Kibana), Custom threat intelligence, CIS benchmarks, SELinux/Apparmor, ClamAV and Custom system hardening. Heavily leveraging automation and security injected into continuous integration pipelines for applications and container infrastructure (docker, kubernetes and cloud foundry). Worked through pre-IPO security requirements, HIPAA, HITRUST, EPCS, SOC2 and SOX compliance.

Led the organizations transition to a DevOps methodology, responsible for all cloud infrastructure, security and QA automation. Migrated to an automated deployment pipeline using Jenkins with thorough security checks (static, dynamic and dependency analysis) and automated QA tests to validate build health. All security data aggregated into Sonarqube which was fed by tooling such as OWASP dependency-checker, OWASP ZAP, RIPs and custom built checks in Python/Shell. Implemented monitoring regime consisting of NewRelic, Geckoboard, Rollbar and PagerDuty. Worked with multiple teams to help automate their routine tasks such as data analytics ETL's and QA tests that were manually driven.Drove large scale infrastructure projects including an ElasticSearch cluster (20+ nodes) for analytics and creating an environment for powering Scala driven development. Responsible for the initial architecture, configuration, security and automation for all infrastructure projects. Managed one direct report.

Led the organizations infrastructure effort, migrated from Rackspace to hybrid colocation/cloud based solution which significantly improved performance, security and reduced our infrastructure spend with a ROI in the first six months. Responsible for the security of the infrastructure leveraging OpenVAS for vulnerability scans, log aggregation using ELK (Elasticsearch, Logstash and Kibana), baseline system security, ongoing patch management and security compliance (U.S.-EU Safe Harbor, etc).Build out of high availability Linux environment including a Docker swarm, MySQL cluster using DRBD, clustered RabbitMQ, MongoDB, Nginx, Apache, Memcache and Redis. Responsible for the networking infrastructure (Layer4 and up) using Kemp load balancers, PowerDNS and HAPROXY. Performance tuned systems for IO throughput via the Linux kernel, sysctl, /sys, EXT4/XFS. Automated infrastructure configurations using Chef.

Lead Systems Engineer responsible for high availability e-commerce environment including security for PCI-DSS compliance. Led multiple large scale infrastructure projects including the build out of a RHEL6 clustered environment with shared EMC storage, highly redundant DRBD MySQL cluster and clustered application servers. Automated infrastructure builds and routine tasks in shell/python, managed the Cisco/Foundry routing environment and XenServer/VMWare virtualization. Utilized SSL Labs tooling to maintain PCI-DSS compliance through a series of scans and SSL grading, worked with vendors to conduct external penetration testing on a yearly basis. Successfully mitigated numerous large scale DDOS attacks. Managed internal infrastructure such as Active Directory, Exchange, Networked storage (EMC) and served as an escalation tier for notable issues on the Desktop side. Remediated security issues on servers, networking gear and desktops.

Systems Specialist of diverse Linux, Unix and Windows server environment with clients spread across multiple states. Management and support of custom internally developed application on top of an IBM universe database engine. Working with various other technologies such as firewalls, VMware ESX server, exchange, active directory and multiple open source applications.

Architect of customized Linux platform largely based on RHEL 5.x with a optimized runtime environment and custom high frequency kernel compiled from source. Creation of software and deployment mechanism for ITV over both OCAP and EBIF. Working with various open source and internal applications with hand customization of Linux libraries for performance. Oracle and mySQL implementation and administration. Co-Management of Cisco/Juniper based network.Creation and management of systems engineering team with two direct reports.

Consultant on the core help desk team which supported all in house systems, desktops and applications. Provisioned users, systems and managed the networking infrastructure at various office locations throughout the continental US.

Systems administrator for the remote team consisting of individual employees and satellite offices. Responsible for deployment, configuration and management of networks, systems and applications. Served as an escalation tier for the help desk team.

Configured and maintained Linux systems primarily Red Hat, SusE, Debian and FreeBSD. Installed software packages from source with customized FLAGS (cflags/cxxflags etc) and compile time settings. Resolved web server platform issues (apache, litespeed, tomcat) and web application deployment scenarios (php, perl, mySQL etc).Configured and administrated Windows 2000 server environments from application serving to web serving via IIS.

Initial triage for technical support requests, working directly with customers as a remote hands resource. Setup of physical equipment in the data center, racking servers, network and power cabling runs.Operated at three data center locations: - HostRemote (Cinnaminson, NJ) - NAC (Parsippany, NJ)- 401 N. Broad St (Philadelphia, PA)