Gregory Welch Email & Phone Number

Reston, Virginia, Us

Minneapolis, Mn, Us

Leader of all Compliance and IT technology initiatives. Managed multiple teams ranging from offshore DevOps, Desktop Support, and core IT. Responsible for compliance, operations, budget, resourcing and planning for fast moving technology startup/marketing services company. Strong communication and process development and improvement skills used daily. Spearheaded AWS cloud migration initiative, managing in-house, consultant and client teams, developed project cost estimates projected savings when project complete. Worked to define architecture, maintaining budget and security design. Compliance - Director of all compliance initiatives, resulting in 100% audit successful completion rate with third-party SOC2, HIPAA, and PCI-DSS audits, Created > 50 new practices resulting in reduced audit findings / compensating controls by 80% Researched, collaborated on and Authored > dozens Policies/Procedures/Standards for IT Security and Business Operations IT and Security consultant to Revenue Growth Sales and Marketing teams, providing consultation on security practices and data protection architecture for prospect client requests for proposal and exiting client vendor management programs. Technical advances and upgrades have directly resulted in significant cost savings, 2X EBITA growth each of last 2 years Chair of the Consumer Fraud Management Team monitoring redemption traffic and developing solutions related to fraudulent activity in loyalty programs. Operationalized new transaction monitoring softwareSupervise the Vendor Management programPrincipal Network Engineer responsible for architecture, planning, documentation, procurement, implementing and validation of systems. Oversees WAN, LAN, WiFi, VoIP, Firewall, VPN, DHCP, DNS, Active Directory, WAF, and Vulnerability pentestingKey stakeholder within Software Engineering Project Management and the Engineering Architecture Team, driver of fraud and security improvements within an Agile framework

Eden Prairie, Mn, Us

Principal Security Engineer for global medical device manufacturer. Driving improved architectural design and ensuring availability and integrity of complex web-hosting and customer service technology stack. Managed worldwide fleet of firewalls, more than 80 facilities worldwide, coordinating maintenance and management functions around the clock, around the world. Partnered directly w/ firewall vendor; dozens of initiatives designed to optimize performance, maximize agent efficiency while protecting endpoints from significant malware events.Designed Data Center Isolation project inserting a layer of protection between end users and primary data center. Developed equipment life-cycle planning guide to facilitate budgeting requirements and device availabilityStrong collaboration w/ business analysis teams, coordinating deployments and upgrades to F5-Big IP InfrastructureTeam Leader on infrastructure upgrades. Drove initiative to evaluate and update existing network monitoring / packet capture solution. Designed evaluation criteria, vendor coordination and due diligence recommendations.Monitored end-to-end network configuration, maintained long haul circuits, troubleshooting issues w/ performance software.

Lead Engineer for network architecture & design, monitoring, management, and maintenance of high tech global medical device company ensuring high availability, disaster recovery and business continuation.Company advocate with telecommunications partners coordinating site surveys, defining / ordering circuits and adding WAN interfaces to existing network infrastructure. Developed cost estimates and integration plans for Senior management in support of company acquisitionsDevelop job descriptions & position justifications for team positions, conducted technical interviews & hiring recommendationsSpearheaded initiative to evaluate and update existing network monitoring options with newly available software. Managed project from initial meeting with vendors, to selecting evaluation candidates, to final selected product and implementation. Network--Cisco wired network consisting of ASR and ISR Routers, 6500, 4500, and 3750 Switches. Managed network infrastructure with: ~ 18 sites and ~ 200 network nodes. Extensive experience with BGP, EIGRP, DMVPN tunnels, Websense and IronPort web filter, and Cisco WAE WAN accelerators. Configures and maintains, VLans, Port-Channels, HSRP Standby Groups, Spanning-Tree, Switch Stacks, Layer 2 & Layer 3 Routed connections. IP address management and deployment via Windows DHCP and BlueCat Adonis. Security—Lead network engineer of Security Team managing software vulnerabilities, risk assessments and risk mitigation strategies. Cisco 5510 ASA/ASDM firewalls for secure remote access. Configured, managed and maintained internet links, NAT rules, Access-Lists, TCP/UDP port restrictions, and VPN access. DMZ network design for public access of servers. Managed identity awareness and access to corporate data.

Primary company representative and technical expert providing 24x7 High Availability / High Reliability, secure communications to the entire 401st AFSB Brigade, with direct support for the Brigade Commander: Bagram Air Base, Afghanistan. Provided and Managed End to End communications capabilities including: Satellite up-link, Microsoft servers and workstations, Cisco Routers / Switches, Cisco Call Manager, Tandberg Video Conferencing and management all local COMSEC. A demonstrated ability to lead and participate in technical projects, handling day-to-day task management, prioritization, support, while providing effective communications with team members, including status reporting. Interpersonal skills and the ability to communicate with management, peers, and customers via reports, email, or verbal updates. Network—Years of related experience in network environments, including network engineering (hardware and software), network security practices and designing, planning and implementing LANs and WANs provisioning and deploying Layer 2 and Layer 3 Cisco Switches. Adept with the design, set-up, deployment, test and evaluation of network infrastructures. Security—Maintained a TS DCID 1/14 security clearance and served as COMSEC custodian. Information Assurance Officer managing access and security to secure communications. Ran monthly vulnerability and risk assessments of network and computer systems ensuring systems were compliant with US Army standards. Managed software patching cycle for all systems allowing for 100% compliance and compatibility uptime. Voice--Experience and competency working with call control and various phone features, Dial Plans, Route Plans, partitions, voicemail, Voice Gateways, Cisco Routers, Routing Protocols, Networking, TCP/IP, PSTN Provisioning. Monitoring/Management--Perform system checks and maintenance, develop and enforce network configuration standards, establish Port-Security protocols and monitor network access.

Develop financial strategies to meet client's needs and objectives. Manage client's goals with client's resources while respecting client's risk tolerance. Focus primarily on mutual funds, annuities, managed accounts, life insurance, health insurance, and long term care insurance. Financial strategies often required extensive partnerships including: extended family, Attorneys, Accountants, Business Partners, and Bankers. Expert user of Salesforce.com and various proprietary software suites.

Randolph Afb, Tx, Us

Served 8 years 4 months. Staff Sergeant, Honorable Discharge. Managed numerous construction projects, monitored fundingand budgets, wrote performance work statements (PWS) and solicited bids on USAF requirements, developed streamlinedservice contract payment processing program using the Government Purchase Card (GPC) for service contracts, supervised andtrained new airman, and provided technical expertise to military commanders. Trained in: computer aided drafting, manualdrafting, surveying, soils analysis, contract administration, construction contract management, computer networking, satellitesignals acquisition, COMSEC management, and security procedures.

Minneapolis, Mn, Us

Advanced quickly from teller to newly created position as "roving teller" for several branches, promoted within first year to newaccounts and consumer loans representative. Developed strong customer service focus that has served throughout my career.

Graduate Certificate, Cybersecurity: Managing Risk In The Information Age, It Security

Business Administration

Education record