Stefan Maerz Email & Phone Number

Knoxville, Tn, Us

San Francisco, Ca, Us

● Deployment of endpoint security telemetry system (osquery and FleetDM) across 10k hosts● Led vendor consolidation efforts, decreasing security tooling spend by $750,000 annually● Redesigned Kubernetes threat detection tooling with Falco across the Fastly control plane: 12 EKS and GKE clusters, 660 nodes, and 250 production workloads. ● Led migration effort off legacy cloud security platform saving $250,000 annually● Drove migration to new observability tooling for system monitoring, alerting, visualization, and response using Splunk, Prometheus, Alert Manager, OpenTelemetry, and Grafana. Redefined response processes resulting in observable behaviors and actionable alerts.● Wrote custom Flask API to integrate desperate vulnerability management systems. Instrumented logging and Prometheus metrics using the RED method to make service observable● Security and operational incident response● Redesigned patch management processes for security tooling

Oak Ridge, Tennessee, Us

In my role I support the mission of the Y-12 National Security Complex and Pantex Plant by providing strategic guidance and systems design across many aspects of mission. I provide innovative, cutting edge, and secure technology solutions to meet the needs of our mission.● Architecture Review Board member: analyze proposed system architecture● Consult with stakeholders to ensure security is built into each phase of the SDLC● Systems design● Develop strategic enterprise gap analysis of existing security capabilities● Redesigning enterprise IAM/PAM/SSO strategy● Develop Enterprise Zero Trust strategy● Develop architecture for cloud services

Oak Ridge, Tn, Us

I worked at Oak Ridge National Laboratory's National Center for Computational Sciences (NCCS)/Oak Ridge Leadership Computing Facility (OLCF). I was a cyber security engineer supporting Summit, Frontier, and Titan, three of the world’s fastest supercomputers.https://en.wikipedia.org/wiki/Titan_(supercomputer)https://en.wikipedia.org/wiki/Summit_(supercomputer)https://en.wikipedia.org/wiki/Frontier_(supercomputer)● Led two incident response efforts against sophisticated and motivated threat actors● Led federated identity management initiative: including policy, architecture, systems engineering, and software development● Build and maintain security services: Splunk, Bro/Zeek, Nessus, osquery● Design and deploy 100 Gbps Bro network monitoring cluster ● Deployed endpoint detection and response tool osquery●Development of security policy and architecture/design throughout the entire systems development life cycle of supercomputers● Software development of a secure password vault based on smart card public key cryptography● Management of services via Puppet and Kubernetes of security services● Security architecture and security engineering design

Los Alamos, Nm, Us

I worked at Los Alamos National Laboratory (LANL), a contractor to The Department of Energy's National Nuclear Security Administration (NNSA). I worked in the Office of the CIO and provided support to LANL's Information Security Program, which provides information security governance to the Lab.● Manage System Change Process: work with information security officers to analyze proposed changes, assess risk/vulnerabilities, and develop/recommend alternative architectures● Develop and update Security Plans● Security testing and evaluation● Serve as LANL’s technical evaluator for the NNSA’s deployment of a common Archer deployment. Collaborated with DoE sites including Lawrence Livermore National Laboratory, Sandia National Laboratory, National Security Campus, NNSA HQ, and NNSA's Information Assurance Response Center (IARC)● Serve the cyber security technical advisor on the advisory committee for LANL’s nuclear and hazardous waste tracking system

Rolla, Missouri, Us

I was the Systems Administrator at The Community Partnership (TCP), a non profit SMB. During that time I had full responsibility for all IT Operations, implemented a variety of enterprise technologies (including an Active Directory domain, email services, file servers, and backup services), and implemented an information security program.Accomplishments:● Implement, maintain, and support server, desktop, and network infrastructure● Led security initiatives● Project management● End user support● IT and information security training● Vendor Management● Implement and maintain information security program● Email migration and Maintenance● Website Development and Maintenance● Technical Documentation● Cut information technology expenses by approximately $10,000 per year by reinventing TCP’stechnology support model

Rolla, Mo, Us

I served as the Teaching Assistant for my department's advanced networking class, IST 3321, Network Performance Design And Management.This class covers the exam objectives for the CCNA Composite (200-120) exam, including:● TCP/IP● Subnetting, VLSMs, and Supernetting● Cisco IOS● IP Routing: Static Routes, RIPv1/v2, OSPF, and EIGRP● STP● VLANs and InterVLAN Routing● Network Security and NAT● IPv6Acomplishments● Develop lab content● Supervise labs● Maintain Cisco Routers and Switches● Hold office hours and answer questions about class

Us

I consulted for Your Community Health Center (YCHC), a brand new Federally Qualified Health Center aiming to provide high quality medical care to underserved members of Phelps County, Missouri. I assisted YCHC with their technology needs: starting from a vision, transitioning to an operational medical clinic, and finally transitioning to a more sustainable managed service provider.Accomplishments● Deploy and maintain desktop infrastructure● Configure and maintain email services● Information security training● Led technical aspects of transition to managed service provider● Served as the clinic’s technical lead on electronic medical records system implementation for initial project phases● Vendor Management● Advise YCHC Management on vendor contracts● Advise YCHC management regarding information security policy in relation to HIPAA compliance

Rolla, Mo, Us

Dating back to high school, I was an undergraduate Research Assistant at Missouri S&T's Rock Mechanics and Explosives Research Center. In this time I was able to experience state of the art research in a variety of abrasive waterjet machining applications. This included collaborating with industry partners such as Boeing, KMT Waterjet systems, and GKN Aerospace.Accomplishments:● Member of research teams investigating: waterjet controlled cut penetration, waterjet assisted milling, and waterjet composite cutting● Operate and maintain PaR Systems 5 axis CNC waterjet cutting system for experimentation● Sample processing including digital measurement and digital image analysis

Master Of Science - Ms, Cybersecurity

Master Of Science - Ms, Cybersecurity

Bachelor Of Science - Bs, Information Science And Technology