• Designed and implemented enterprise identity, entitlement, and access control architectures (IAM) including identity life-cycle, legacy single sign-on, cloud SSO, and multi-factor authentication with • Active Directory, Azure, and gateway technologies • Developed security solution frameworks for Enterprise APIs supporting policy-based RBAC/ABAC using CA API Gateway, ForgeRock Platform, JWT, OAuth, and SAML• Supported Compliance, IAM, and Network Security teams with security solution architecture and engineering support helping them connect strategy to solutions• Directly supported business delivery teams with designs, and examples of securing APIs, API authentication, and securing service-to-service communications • Evaluated current environment against NIST-800-53, and The CyberSecurity Framework• Integrated architecture processes into Kanban-based solution engineering to insure architecture non-functional requirements• Developed security capability models, reference architectures, and design patterns for enterprise use for network security, threat and vulnerability, and identity and access management• Developed infrastructure security direction for hybrid cloud integration and cloud migration projects to Azure and AWS• Scripted querying and reporting utilities for Active Directory using PowerShell• Written security tests and examples using Python, JavaScript, and Go• Maintained consumable security non-functional requirements list tied to standard security controls used by engineering excellence and DevOps areas• Provided security input to agile software life-cycles using OWASP/OpenSAMM as a reference• Participated in a datacenter design disaster that included network security and recovery planning • Participated in risk assessments for third parties and partners

Served as Technical Architect setting direction and architecting solutions for the IT Risk Management area.* Participated on IT Technical Steering committees to build a technical corridor.* Developed and implemented the security model for SOA using SAML.* Researched, engineered and helped implement an electronic discovery and vaulting system.* Researched and advised in selection and implementation of a hard drive encryption system.* Participated in selection and implementation of an Identity and Access Management system that also required an updated IAM strategy.* Directed upgrades and functional level switches of a complex Active Directory environment.* Participated on the Enterprise Application Architecture Team where we set direction for development techniques and tools.* Co-executed a company-wide forum for engineers, developers and architects.

Supported the Corporate Legal Department and Finance Areas as a consultant and as a developer.* Installed and maintained the primary litigation case management system.* Researched, selected and installed the legal document management system.* Developed one of the first company websites for legal collaboration.* Developed and maintained MS SQL reporting and transactional systems.