Led and assisted with a broad selection of initiatives as a member of both the Security Operations and Platform teams during Snowflake's journey from small startup to enterprise organization. Primarily focused on secrets management and identity, but also contributed to a number of other efforts across the company. Some key projects included:• Bootstrapping the development and adoption of Hashicorp Vault across all environments. Evolved the architecture of our deployments from one manually-updated standalone VM per region to 100+ high-availability clusters deployed on Kubernetes serving nearly all Snowflake workloads. As the service grew more business-critical, expanded management personnel to include a subset of the Platform team for 24/7 on-call support, established a customer SLO, added comprehensive monitoring and alerting, and more.• Building and maintaining internal public key infrastructures for development and production environments using a combination of AWS ACM PCA and Hashicorp Vault. Use cases included everything from code signing to service identity and a 3-tier certificate authority hierarchy was constructed to support them. More recently assisted the Production Security team in designing an in-house service identity solution intended to be a partial replacement for the current PKI.• Advancing our infrastructure-as-code configuration management for Vault. Initially used Terraform, but ultimately migrated the entire codebase to Pulumi written in Go. Automated linting/testing and continuous deployment were developed to improve release velocity. User experience was improved via the addition of YAML resource definitions that made it easy for customers to submit their own resource requests.• Developing and maintaining the infrastructure behind our Replication features, allowing customers to seamlessly copy data between geographic regions and cloud providers. Later engaged with the Deployment Automation team to fully automate Replication setup.

Responsible for building, maintaining, and improving security infrastructure within Box's production environment. Current projects include:• Deploying Bro IDS across all datacenters for full production traffic analysis. Overseeing deployment of fiber taps, configuring tap aggregators, and tuning analysis clusters using techniques published by Berkeley Lab and Suricata core developers.• Standardizing and automating the deployment of baseline configurations for public cloud platforms. Baseline configurations are defined via Terraform and include critical security controls, such as settings for logging, authentication, and role permissions.• Assisting Compliance with auditor request translation, technical implementation of required controls, and evidence collection. Heavily involved in maintaining Box's PCI DSS certification.

Providing audit and advisory services to clients in the Bay Area and beyond. Currently specializing in PCI DSS compliance for e-commerce businesses and service providers with cloud-hosted infrastructure, but fulfilling client needs in many other areas. Recent projects have involved: • PCI DSS v3.2 Reports on Compliance and SAQ assistance • PCI DSS v3.2 gap assessments and architecture advisory • SOC2 type II internal audit program development and execution • ISO 27001 internal audit and advisory • Security best practices policy development and delivery of staff trainingAlso delivered a presentation on PCI Compliance and Serverless Architectures for NCC CON 2017. Current research includes prototyping compliance-as-code/audit automation frameworks and studying the use of prepaid cards to facilitate fraud.

Gained extensive experience performing PCI DSS v3.1 gap assessments and Reports on Compliance for a variety of clients in Northern California and the surrounding area. Client environments have ranged from Fortune 50 companies with massive worldwide physical infrastructure to small Bay Area startups providing services via virtual private clouds, allowing exposure to a huge variety of technologies and scales. Quick to learn new technologies, determine potential security and compliance problems, and relay detailed remediation suggestions to the client. Transitioning towards leading engagements and looking to obtain my CISA and QSA in the near future.

Assisted with a variety of security audits and assessments for companies of all sizes along the East Coast and in Canada. Extensive experience with PCI (v2/v3) and HIPAA, as well as some with FISMA, SOC, SSAE16, and more. Responsibilities during engagements included everything from scheduling meetings with management and employees to inspecting logical and physical architecture to writing reports and recommending plans for remediation. Engagements were very independent, requiring self-scheduled travel and accommodations, and several client projects were handled at once. Currently organizing recruitment efforts here at RIT and maintaining a part-time support role while completing my degree.

Responsible for assisting in System and Database Administration tasks centered around building, maintaining, and visualizing the Office of Development and Alumni Relations' internal database. Current projects involve installing and implementing Tableau Server for data visualization, utilizing geocoding services to convert database addresses to rooftop latitude and longitude, testing and troubleshooting SQL reports, and more.

Interned for the Tier II IP Data Support Team out of Frontier's Rochester location. Helped build, maintain, and troubleshoot nationwide network infrastructure, from customer modems to core backbone routers carrying entire regions' worth of traffic. Mostly interacted with Juniper and Cisco equipment, but also encountered boxes from Alcatel and many other manufacturers. Also gained extensive experience assigning and troubleshooting IP address spaces, as well as maintaining a corporate wiki.

Assisted with the Computer Hardware Asset Management Project; tracked down and catalogued misplaced Draper computer equipment, managed property databases, and created and organized inventory files. Missing assets were located via various network tools and personal investigation. Summer quarter internship.