• Strengthened security and compliance in AWS environments by implementing IAM roles, SCPs, and AWS Control Tower guardrails as part of the organization's security strategy.• Developed custom internal tools for user lifecycle management, including Python-built SCIM automations and provisioning/deprovisioning bots.• Automated processes and procedures to apply RBAC/ABAC conditions across over 120 SaaS and internal applications, enhancing access control.• Developed and implemented a robust CI/CD pipeline using GitHub Actions, emphasizing secure processes and best practices to enhance workflow efficiency and safeguard code integrity.• Designed and deployed an automated AWS Workspaces environment using AWS products (EventBridge, LAMBDA, IAM) and Okta Directory Services to improve infrastructure management.• Utilized multi-language scripting (Bash, Powershell, Python, Terraform) to address infrastructure and process gaps, optimizing systems and processes.• Participated in FinOps SaaS audits, product evaluations, and optimization initiatives to drive continuous improvement and cost-efficiency.• Supported incident response efforts using Rapid7 and SentinelOne tools, refining alerts and configurations to maintain a secure environment and reduce attack surfaces.

• Strong technical understanding in information security technology along with experience in the challenges of providing a secure IT environment • Effectively supported SOC 2 audits by leveraging comprehensive knowledge of supporting frameworks such as NIST and ISO, ensuring adherence to Trust Services Criteria and enhancing overall security posture.• Conducted incident response efforts using Crowdstrike EDR to maintain a secure environment and mitigate threats.• Utilized Tenable (Nessus) and ArcSight, along with firewalls, SIEM, and IPS systems, to enhance security controls and maintain a robust cybersecurity posture.• Maintained security patching schedules to proactively address ongoing system vulnerabilities and reduce risk exposure.• Performed vulnerability scans to identify at-risk systems and promptly remediate issues, strengthening the overall security stance.

• Managed IT infrastructure for 11 stores across the country• Led planning, budgeting, delivery, and ongoing support for information technology products beyond the demarcation point at each location• Coordinated migration from onsite VOIP phones to cloud based solution which has allowed seamless transitions between work and home offices for employees • Led company through migration to Office 365 to increase collaboration and communication effectiveness• Migrated company from Server 2008 domain architecture to Server 2019 virtualized. • Planned and implemented the transition from an MPLS network to SD-WAN networking across entire company which led to a 108% savings in internet costs• Absorbed proprietary retail support contract from vendor saving ARG retail operations additional costs and increasing the timeliness in which issues are resolved• Created training documents for staff to keep them up to date on most current threats and to reduce the chances of social engineering tactics• Adjusted project plans to account for dynamic targets, staffing changes and operational specifications.

• Assess and analyze security measures implemented within the organization to reduce the impact or likelihood of a threat• Performed risk assessments regularly to find solutions that are acceptable in comparison to the value of the asset• Run penetration tests and network scans to monitor and contain vulnerabilities within the organization• Develop standards and procedures for end users and IT staff, to ensure and minimize generation of unnecessary breaches • Utilized Crowdstrike EDR

• Maintained the protection of clients' data and systems with firewalls, security solutions, backups, redundancy and disaster recovery solutions• Documented post-incident response and root cause analysis• Contributed to development and refinement of Standard Operating Procedures by modifying and creating playbooks for all tasks performed• Assisted with technology planning through ongoing research of new and better products• Implemented corrective plans of action for network performance issues including availability, utilization, and latency.

• Monitored server arrays with the use of systems such as GFI Max• Developed and utilized BCDR processes

• Led the companywide install of Cornerstone through the creation and implementation of network diagrams, knowledge of network level operations, and practice needs• Consulted with owner on intelligent IT purchases that resulted in a reduction in IT expenses

• Physically repaired computers and performed software-based troubleshooting on residential and corporate clients