Ryan Mcandrew Email & Phone Number

Austin, Texas, Us

PKI EngineeringPKI Design and Architecture Hardware Security Module (HSM) engineering Cloud and traditional PKI implementationsCertificate Lifecycle ManagementAdvocate for best practices and industry standards

Palo Alto, California, Us

Planned and designed new PKI infrastructure at Plume Design, IncServed as the SME for PKI related topics, collaborating with multiple teamsResponsible for certificate issuance and lifecycle managementConfigured single sign on applications for seamless user experience

San Francisco, California, Us

Served as a senior member of the Public Key Infrastructure (PKI) teamResponsible for new Root Certificate Authority (CA) builds Led effort to migrate current Root CAs to new hardware security modules (HSM)Served as a subject matter expert for Thales/Gemalto HSMsAssisted with planning HSM deployments across multiple data centers Responsible for migrating all current PKI keys to new HSMs Maintained daily operations of Wells Fargo’s PKI

Atlanta, Georgia, Us

Served as a subject matter expert for Delta’s SHA1 to SHA2 migration Conducted Venafi administrative tasksResponsible for Certificate Authority buildsMonitored the Crypto Command Center for Gemalto HSMsAssisted various projects with their encryption needsServed as a subject matter expert for HSMs Provided guidance on securing the PKI infrastructure

San Francisco, California, Us

Hardware Security Module (HSM) lead engineer for the Enterprise Evaluated and on-boarded new HSM technology including Futurex and Thales/GemaltoKey holder for the Enterprise Key Management teamParticipated in annual Web Trust and internal audits Responsible for the development of the SHA2 two tier PKI, this included documentation, development and deploymentDeveloped an improved Key Recovery Agent ProcessAssisted with Code Signing projects Built all SHA2 Network Device Enrollment Services servers supporting multiple customersResponsible for build and configuration of Web Enrollment Services Worked closely with Auditors during annual PKI audit Served as a subject matter expert for Hardware Security ModulesDeveloped Monitoring tools and automated tasks Extensive troubleshooting within the Enterprise PKILead Tech Refresh Project that included migrating Certification Authorities to Windows 2008 R2Worked with multiple teams to improve Domain Controller certificate issuance process Assisted Smart Card team with migrations to a new Hardware Security Module Configured Certification Authority backup servers Migrated All Certification Authorities to new Hardware Security Module

Falls Church, Va, Us

Lead of operations for the Federal Public Key Infrastructure projectManaged a small team of system administrators and other trusted rolesManaged cross certificate relationships with various entities Provided Systems Administration for a broad scope of different technologies (Windows Servers ,Linux Servers, as well as Apache Web Servers, SAN, Cisco firewalls, switches, and load balancers)Performed certificate issuance and revocationParticipated in the change management process as a voting member of the Change Control BoardDeployed all system changes and modificationsPerformed vulnerability scanningManage all aspects of a fully functional PKI systemSystem monitoring Developed Monthly statistical reportsPublishing and Monitoring of Certificate Revocation Lists (CRLs)Managed CRL publishing on 8 web servers as well as LDAP directories which mange over a billion inquires a monthEnsured all PKI policies are meet and followed

Mclean, Va, Us

Provided Public Key Infrastructure (PKI) research and development through the engineering of a Microsoft Root Certification AuthorityDeveloped an elliptical curve cryptography (ECC) Root CA, on a Windows Server 2008 R2 platform for the NSALed the Developed and deployed an ECC Root and Subordinate CA used to create VPN tunnels Developed and deployed a Redhat Linux Root CAServed as a subject matter expert for the Windows 2008 R2 Certification AuthorityDeveloped all installation and operations guides for each system deployed Served as a Entrust CA subject matter expert of the Dept. of Treasury PKIDelivered a white paper to the FBI recommending solutions to a PKI operational issueCreated a Troubleshooting document for known issues with Microsoft Certification AuthorityDeveloped an audit log review system for all Dept. of Treasury CAs as well as their shared service provider CAsDeveloped a standard operating procedures document for Dept. of Treasury PKISupported the DoD Coalition PKI severing as a policy expert to complete Certificate Policy documents Played a key role in the completion of the DoD PKI Description document for DoD PKI

Reston, Va, Us

Maintained and issued over 50,000 digital certificates for the DEA’s Controlled Substance Ordering SystemEnsured all certificate policies were developed and enforced in accordance with the Certificate Policy (CP) and Certificate Practice Statement (CPS) to achieve and maintain cross-certification with the Federal BridgeLed engineering efforts on three Certificate Authority systems to include development of a Pilot Suite used by third party software developers to ensure compatibility with the DEA E-Commerce ProgramBuilt and configured a Certificate Authority mirroring the production system to be used for testing and training purposesLed the Research and Development (R&D) effort to include product evaluations and recommendations for improvements to the Certificate Authority and Directory serversServed as main point of contact for vendor relations and ensured compatibility with third party softwareLed the cryptographic migration from 1024 RSA certificates to 2048 RSA certificatesCoordinated and performed key signing ceremonies for both subordinate and Root CAs

Fairfax, Virginia, Us

Responsible for management of digital certificates