• Accelerates customers adoption of Azure cloud through a wide range of methods including migration and modernization projects to re-architecting line of business applications.• Implements and demonstrates proof of concept workloads to drive customer understanding of Azure cloud technologies.• Conducts Architecture Design sessions with customers for both greenfield and brownfield cloud migration efforts.• Collaborates with Microsoft Partners on migrating workloads to the cloud.

• Key leader within the Chief Information and Security Office (CISO), driving the design, review, and development of cloud security architecture.• Served as subject matter expert for Microsoft Azure cloud security, specializing in critical cloud native security controls and capabilities.• Identified emerging cyber threats, recommend cybersecurity enhancements in cloud environments.• Collaborated with IT and business stakeholders to establish and maintain architecture roadmaps and define the target security architecture direction for Azure and cloud platforms.

• Architected, budgeted, and spearheaded enterprise cloud migration to Microsoft Azure, focusing on resiliency, achieving significant cost savings compared to physical data center.• Strategically planned and implemented Azure cloud-native security technologies (Front Door/Firewall/Application Gateway) to protect critical, public-serving applications for the State of Florida.• Designed and managed the rollout of Azure B2C for citizen identity and access to public-serving applications.• Established Cloud Landing Zone environment based on Microsoft Azure Well-Architected Framework for future growth and security.• Mentored operational staff and led cross-functional teams in migrating to IaaS VMs, PaaS App Services, and other Azure cloud-native technologies.• Devised and oversaw the implementation of IAM procedures for cloud access using Microsoft Entra, Azure Active Directory, Privileged Identity Management, and Conditional Access.• Acted as a consultant, offering guidance and producing regular reports for senior executive leadership on cloud initiatives and strategies.

• Developed and managed Splunk monitoring dashboards and metrics using Puppet configuration management in a DevSecOps environment for multiple AWS and cloud-based clients.• Executed threat-hunting activities and conducted investigations/analyses utilizing Splunk and other aggregation tools.• Spearheaded security audits based on PCI-DSS standards and prepared comprehensive reports for client Quarterly Operations Reviews.• Performed vulnerability scanning for both internal and client environments using OpenVAS/Nessus, and created aggregated reporting dashboards via Splunk.• Conducted in-depth baseline security reviews of firewall and network infrastructures for clients.

• Planned, deployed, and managed multi-site, high-availability firewall migration to Palo Alto firewall platform.• Led multiple migration/upgrade/standardization efforts of a legacy physical/virtual environment to VMware ESXi reducing hardware management and operations costs by 35%.• Designed secure implementation of network, compute, and management resources for IoT/ICS across a multi-site environment.• Implemented multi-site backup strategies using both traditional and cloud storage in AWS S3.• Supervised IT staff and contractors in the setup and configuration of new and existing hardware and software using ITIL/ITSM standards.• Developed basic log monitoring/alerting solution using Graylog and Elasticsearch.• Routinely performed internal auditing and vulnerability scanning for security and policy violations and managed external penetration testing with outside vendors.

• Enhanced agency security by automating and implementing user lifecycle management and auditing processes.• Designed and developed scripts/tools for quarterly auditing of user access levels and file object permissions, generating detailed reports for senior management.• Expertly administered a large-scale Windows Active Directory domain, managing 3000+ users and 100+ servers across multiple sites.• Successfully managed and deployed hardware and software changes in compliance with change control procedures.• Authored and documented robust PowerShell automation scripts to streamline various system administration tasks within a Microsoft Windows Active Directory environment.

• Successfully implemented secure network infrastructures from inception to completion, collaborating with and managing external contractors to design, plan, and install tailored networks for clients.• Conducted comprehensive security audits and crafted audit reports tailored for presentation to both technical staff and senior management within client organizations.• Established usage and security processes and procedures for client infrastructures, emphasizing ITIL service management standards.• Executed feasibility studies to provide clients with technology purchasing guidance, ensuring maximum ROI.