I'm a 20-year technology veteran with hands-on experience in cloud security, vulnerability management, endpoint protection, security operations, and infrastructure reliability. My work connects practical security controls with the systems and automation that keep services running.
I write here because the best way I know to think clearly is to write it down, then come back and argue with myself a week later.
I've secured AWS, Azure, and GCP environments, deployed cloud security posture management across all three, and automated provisioning with Terraform and APIs. I've strengthened identity and access controls with IAM policies, multi-factor authentication, and role-based permissions. I've also added cloud posture checks to delivery pipelines to block production deployments with critical security findings.
I've led enterprise vulnerability assessment and remediation programs, validated findings, investigated false positives, and helped teams focus on confirmed, higher-risk issues. That work includes web application and cloud infrastructure assessments, remediation timelines, and reporting that makes exposure and progress clear to both technical teams and leadership.
I've managed endpoint detection and response at a scale of more than one million endpoints, improved threat visibility, and replaced legacy endpoint protection. My experience includes threat modeling, risk assessment, incident investigation, digital forensics, and bringing cloud security findings together with security monitoring data.
I've remediated infrastructure vulnerabilities and configuration gaps, and built highly available SFTP and SMTP services to remove single points of failure. I care about security that improves resilience rather than getting in the way of it.
I've worked with CIS Benchmarks, the NIST Cybersecurity Framework, SOC 2, ISO 27001, and PCI DSS to strengthen controls and support audits. I've also built a live ransomware demonstration platform and trained technical teams on endpoint security.
My certifications include AWS Certified Solutions Architect – Associate, AWS Certified Security – Specialty, GIAC Certified Incident Handler (GCIH), GIAC Penetration Tester (GPEN), CrowdStrike Certified Falcon Administrator (CCFA), and CrowdStrike Certified Cloud Specialist (CCCS).