William Schaffer Email and Phone Number

Software engineer working on an AWS internal product that performs static analysis of customer IaC to determine whether their infra will be able to successfully deploy inside Amazon’s isolated clouds, prior to ever attempting a deployment and eliminating the need for cleared engineers with access to the cloud. Also supports AWS Commerce Platform Operations inside 2 isolated clouds with DevOps, subject-matter expertise, and break-fix.- Overhauled the product’s React frontend user interface, including migration of 21 dependency packages to their latest versions, increasing code maintainability by updating its paradigm to use React functional components instead of OOP, creating new documentation for the project, all while updating the UI to use modern AWS visuals.- Identified an issue with the product’s ability to respond to internal service errors and errors from dependent services - designed and implemented a solution, including design reviews, updates to Cloud Formation IaC, and updates to Python source code, that uses AWS SQS queues, dead-letter queues, and step functions; enabling the service backend to automatically reprocess API requests and to send failed retries to a DLQ for investigation.- Tested and implemented 6 new ‘rules’ for scanning customer IaC, enabling the service to expand its coverage to 60+ teams within AWS, and helping to prepare the product for customer-facing general availability.- Supported the AWS Commerce Platform Operations team with cleared DevOps expertise, resolving 18 customer-owned issues in two AWS isolated clouds.

Software Engineer working in the security space. Designs, deploys, and maintains software comprising Microsoft's internal security safeguards as well as customer-facing products utilized by federal and civilian partners across 8 distinct clouds. Works with big data pipelines aggregating and reporting security vulnerability scanning metrics reducing attack surface for 20% of the Internet.- Led a project to design and build a backend orchestration tool supporting internal vulnerability scanning, improving service reliability and reducing number of customer-reported incidents by an average of 8 per week.- Developed and deployed a dashboard to allow internal teams to track security key performance indicators, resulting in improved actionability for KPIs and saving 2,000 work-hours per month.- Implemented ‘zero-touch’ deployments of the vulnerability reporting infrastructure and code by translating it into Infrastructure as Code as Azure Resource Manager ARM Templates and automating every step required for buildout and subsequent patch deployments; decreased time spent on operations by 80% and enabling continuous delivery for 8 distinct clouds.- Conducted the initial deployment and end-to-end testing of the vulnerability scanning service in a newly created classified cloud, bringing the service to general availability and enabling scanning against 100,000+ new assets.- Modified 10,900 lines of code for the container image vulnerability scanning feature and worked with product stakeholders to bring the feature to general availability in 8 distinct clouds.- Developed and implemented an automation solution for patching 12 microservices running on a Kubernetes, Linux, and Windows backbone, reducing maintenance by 48 work-hours per week.

Systems Administrator working as a technical leader for 48 personnel across 6 MTOC IT responsible for the deployment, operation, maintenance, and cyber and physical security for 4 rapidly-deployable tactical computer networks and C4I intelligence systems valued at $135.2M.- Developed 48 standard operating procedures used by 2,000 personnel worldwide for performance of expert-level maintenance tasks that would have otherwise required on-site expertise; saving the government $60K annually.- Implemented the organization's first-ever information security plan, resulting in 70% increase in breach incident response time, 100% user adherence to procedure, and compliance with organizational directives.- Supervised remediation of 3,500 security vulnerabilities on 500 assets, enabling the systems to be deployed on time and process 7,000 hours of intelligence product for transmission to headquarters analysis and exploitation.- Coordinated establishment of five strategic satellite communications (SATCOM) circuits between 4 NATO countries, enabling situational awareness communications for national commanders.- Performed first-ever execution of information security incident response plan, resulting in no compromise of classified material while minimizing user down time to less than 1 minute.- Acquired and implemented best-practice information security tools, including McAfee ePolicy Orchestrator and Tenable Nessus Vulnerability scanner, increasing security posture of 4 networks by 50%.- Led installation and initial training of five $250K rapid response kit (RRK) computer networks resulting in 4 successful deployments supporting NATO priorities with Command and Control assets.- Managed successful Command Information Security and Physical Security programs. Maintained accountability for 1,450 items of classified material totaling $2M while spread between 5 countries.

MSSA is an 18-week intense technical training program hosted by Microsoft. Participated in accredited college courses with the goal of transitioning into a technical opportunity at Microsoft and their Enterprise Partners. Coursework included:- Software development fundamentals: core programing, object-oriented programming, software development life cycle, data structures and algorithms, web and desktop applications and databases.- Focus on programming including C#, SQL, HTML, and CSS.- Implemented Microsoft Azure infrastructure solutions and general cloud computing concepts.- Developed a multi-tiered, scalable web application using Microsoft ASP.NET MVC with C#, Microsoft Azure, and SQL Server for an application that allows users to manage and budget financial transactions.