Senior Security Engineer and Technical Lead with 20+ years of experience across enterprise security, infrastructure architecture, cloud environments, endpoint protection, and security operations. Proven track record of building security capabilities from the ground up, partnering with engineering teams, and translating complex security requirements into scalable, practical controls.
Each case study below expands into a detailed technical blog post. The diagram or system image sits in the top-left corner alongside technical specifications, methodologies, and verified security outcomes.
Investigated a Snyk-reported path traversal vulnerability in Caldera, applied AI-assisted coding to develop an architectural remediation, conducted rigorous code review, and validated the fix via follow-up security scanning.
Built and matured enterprise security capabilities from the ground up, establishing endpoint and network controls, configuration baselines across macOS and Linux, and telemetry pipelines aligned with NIST SP 800-53 and SCF.
Designed infrastructure-as-code driven Web Application Firewall (WAF) patterns to strengthen perimeter defenses, and developed automated monitoring to verify the integrity and continuous health of security telemetry data sources.
Applied Wiz CSPM and AI-assisted workflows to continuously identify cloud configuration risks, assess exposure across cloud workloads, and prioritize high-value remediations in close partnership with engineering squads.
Replaced legacy firewall platforms with next-generation Palo Alto firewalls and designed the architecture to migrate remote access from traditional perimeter VPNs to Prisma Access SASE Zero Trust connectivity.
Architected secure AWS environments using EC2, RDS, and CloudFormation, embedding security controls into infrastructure provisioning, and led the migration of legacy ClearCase and SVN systems to modern Git workflows.
Over two decades of experience spanning enterprise security engineering, infrastructure architecture, cloud environments, and mission-critical systems.
Lead engineer for enterprise network and endpoint security programs, responsible for security architecture, tooling, control implementation, telemetry integration, and operational security improvements.
Senior infrastructure engineer responsible for network security architecture, identity integrations, infrastructure reliability, and secure connectivity.
Infrastructure engineer responsible for securing and modernizing AWS and on-premises environments, improving visibility, and supporting distributed operations.
Directly aligned with enterprise security engineering, application security reviews, security automation, and infrastructure architecture.
Certified expertise in detecting, analyzing, and mitigating security incidents, host & network compromise investigation, and remediation coordination.
Validating advanced proficiency in automated cloud security controls, DevSecOps pipelines, infrastructure as code validation, and continuous assurance.
Foundational security discipline across network security, identity management, cryptography, threats, and enterprise operational security.
Graduated with highest academic honors, providing rigorous foundations in computer architecture, systems engineering, networks, and data management.
Based in Portland, OR. Open to senior security engineering, application security leadership, and technical lead roles. Connect directly on LinkedIn or download my resume below.