Created monitoring of all systems and services and set up around the clock on call rotation including many custom scripts to monitor specific Architected and set up a PCI certified network to minimize compliance overhead while increasing security of most sensitive dataMade systems highly available to reduce outagesInstigated company wide security trainings for both technical and non technical employees including regular phish testingWrote ansible, python and bash scripts for automation of backups, updates and configurations of various systemsCreated the company policy technical handbookMade the company PCI compliant, and managed the first and all subsequent audits and pen testsSetup a vulnerability discovery and notification system to minimize risk of being hackedHired and trained employees for Help Desk, System Administrator and DevOps rolesImplemented WAF and CDN for multiple corporate WordPress websitesConfigured and monitored DNS for DKIM, SPF and DMARC to improve email deliverability for both corporate and marketing purposesOversight of hiring and termination processes to ensure smooth transitions for employees Improved physical security of building with door badge system and camerasSetup Incredible PBX / Astrisk telephony system for call center, including custom python scripts to create additional functionality within the phone systemManaged cloud hosted systems in both AWS and GCPSetup self hosted systems at a colocationInstalled and configured switches, firewalls and wifi access pointsRegularly review costs and minimize expensesPurchase and renew all IT contracts

Architected security infrastructure for production environment.Authored software to extract Nessus scan information for weekly email reports, and creating tickets for new vulnerabilitiesPerformed internal audits in preparation for company's first SOC2 Type 1 and Type 2 auditsWrote training material for company-wide yearly security training and OWASP developer trainingCoded scripts for automation of training audits, server security auditing, etc. Reviewed security for cloud deployments on AWSCreated policies and controls to manage riskDesigned and created internal social engineering pen tests, using both email, phones, and actors to test employee preparation and readiness, and improve security trainingAudited office and production firewalls to ensure security of device and networksScanned server settings for security concerns and made recommendationsExecuted access audit reviews with many various systems by pulling their data into a single databaseEnsured secured setup of new office products, such as DropBox and AirWatchSetup and maintained camera systemPerformed Risk Assessments and Security Audits

Set up criteria for selecting a data center, then toured and ranked data centers based on those criteriaDesigned network architecture for new data center installationInstigated company security program, hosted weekly security meeting with key playersCreated security training material for and presented training to new hiresReviewed legal contracts for security concernsImplemented puppet server to bring Linux desktops and laptops into compliance

Created and maintained company IT security policies and procedures, ran quarterly security trainings and assessments, and prepared for first PCI financial security and SOC2 privacy security auditsInstigated and led security team of developers and system administrators with focuses on internal auditing and OWASP security issue detection and correctionLed a weekly interdepartmental meeting on risk managementWorked with customers on IT and Security concernsManaged Log Watch, Nessus, Firewalls, Filters, and Snort serverResponded to security events as necessary Wrote and reviewed company policies relating to security best practices and proper procedures for system changes and improvementsReduced office and production software expense by more than 75% by replacing commercial with open-source software whenever possibleImplemented a Network Operations Center (NOC) to monitor and resolve issues in productionDesigned high-availability networks with 99.9% uptime with Service Level Agreements (SLAs)Created out-of-state Disaster Recovery site for company continuity in the event of a disasterLed a team of systems operators including 9 server and 7 desktop administratorsGrew infrastructure and built it to serve over 200,000 page views an hourManaged company growth from a dozen employees to nearly 1,000Leadership of multiple overseas teamsCreated and managed a 24x7 helpdesk team