Currently providing development and technical leadership of the IAM WS product. A custom enterprise security abstraction layer API that services the global enterprise and external customers in authentication, authorization, MFA, identity, access governance and other enterprise security needs. Currently working with many architects to transform the IAM WS to a micro service based architecture and a to a true scalable cloud API.Developed and designed a large portion of the IAM WS. A tier 1 application with no planned downtime, using industry standards (C#, ASP.NET, WebAPI, SCIM, OAuth 2.0, JSON, and JWT) to handle and process all external customer authentication (millions per month), 300+ internal application custom SSO authentication, full login page capabilities and many more InfoSec capabilities in both the internal network and DMZ. API integrates into many custom and off the shelf systems with deep knowledge and integration such as MS Active Directory, LDAP, SOAP, RESTful WS, SAML, CORS, and many off leading security products.Provide consultation on security incidents and remediation. Seen as a SME on web security and authentication/authorization. Regularly advise development teams and architects on web security and constantly consulted during system architecture inside and outside of IT on web security, identity & access management, authentication and authorization.Worked with Intel’s risk management team on multiple engagements and products in identifying risk scores, threats, and applying controls. Lead the team on a few risk assessments where risk acceptance was the appropriate step and risk waivers were needed with director level approvals.Provided key leadership and a driving force in the transformation of the team to SAFE agile methodology (SCRUM).

Started the web pen test initiative within InfoSec. Lead the creation, obtaining funding and approval of a part time web pen testing team. Designed a web pen testing framework that allowed for a lite and full pen test. Web pen tested an Intel top secret web application before transitioning into joining the Intel Red Team. On the Intel Red Team, participated in multiple attack simulations, security assessments, information gathering, and other adversarial type exercises and training.

Took over product owner role near the birth of the IAM WS. From a few customers to over 300 different applications across Intel and becoming one of the few tier 1 enterprise applications within Intel.Owned conveying the vision to stakeholders, management and the development team. Provided business metrics, influencing the security architecture, hundreds of customer engagements/on boardings, owning the roadmap, prioritizing user stories for each release, product backlog grooming, dealing with ITERP’s, and marketing/training customers and the team as the secure SOA WS.

Developer of Intel’s custom enterprise Identity and Access Management system that was used by 95% of all Intel’s global employees. Technologies used C#, ASP.NET, MS SQL.