SUMMARY
Accomplished Information Security Engineer and Cloud Security Consultant with over a decade of experience
in securing enterprise environments, building scalable solutions, and driving innovation in cybersecurity.
Expertise spans AWS cloud architecture, Identity and Access Management (IAM), penetration testing, and
secure software engineering. Proven ability to integrate on-premises IAM with cloud platforms, develop
advanced middleware solutions, and drive application security initiatives. Known for mentoring teams,
delivering technical training, and building high-performance environments in global organizations.
Certified CISSP, OSCP, and AWS Cloud Practitioner, with a strong foundation in computer science and a
passion for leveraging cutting-edge technologies to safeguard digital assets.
EDUCATION
May 2013
Northern Kentucky Univeristy, Highland Heights, KY
Master of Science in Computer Science
May 2013
Northern Kentucky Univeristy, Highland Heights, KY
Graduate Certificate in Secure Software Engineering
Jun 2008
Wright State University, Dayton, OH
Bachelor of Science in Computer Science
EXPERIENCE
Mar 2020 - Present
Amazon Web Services, Cincinnati, OH
Senior Security Consultant
- Working side-by-side with AWS customers to secure customer environments.
- Building IaC security solutions for customers
- Advising customers on security best practices
- Work with customers to integrate on-premises IAM with AWS
- Developed end-to-end analysis mechanism for identifying overly permissive AWS Roles
- Developed middleware solution for caching IAM users/groups to overcome an AWS SCIM limitation
- Internal projects:
- Owner of the IaC training day for Security New Hire Bootcamp
- Help develop and deliver AWS Jam events
- Training Partners to deliver AWS Security offerings
May 2018 - Mar 2020
Fifth Third Bank, Cincinnati, OH
Staff Site Reliability Engineer
- Responsible for building a scalable and highly-available environment for deploying identity solution.
- Using AWS for building highly-available and scalable environment
- Bulding infrastructure as code
Lead Application Security Engineer
- Responsible for driving application security across the Consumer and Corporate & Commercial Lines of Business.
- Drive remediation of vulnerabilities found in Application Security Assessments / Penetration Tests
- Work with application teams to automate security scanning into development pipelines.
- Train developers and management on application security
- Collect security attestations from externally hosted applications within the LOB
- Mentor Security Champions
Jun 2015 - May 2018
Procter & Gamble, Cincinnati, OH
Associate Manager
- Security Engineer
- Implementation of SSO for SAP using SAP Secure Login Client. Configuration of PingFederate for federation and SSO.
- Identity & Access Management Solutions Manager
- Responsibilities include PingID Federation configuration and implementation (SSO, Federation, MFA).
- Ethical Hacker
- Responsibilities include leading and performing penetration tests on internal applications and infrastructure.
Jan 2013 - Dec 2019
Northern Kentucky University, Highland Heights, KY
Adjunct Instructor
- Courses:
- CSC 364 - Data Structures and Algorithms
- CSC 360 - Object Oriented Programming II (Java)
- CSC 260 - Object Oriented Programming I (Java)
- INF 120 - Elementary Programming (Python)
Jun 2010 - Jun 2015
Sogeti, USA, Cincinnati, OH
Senior Consultant
- Procter & Gamble
- Integrated Informatics Platform (IIP): Database for Genomic Projects. Platforms: Java, Spring, Hibernate, Apache Wicket, Oracle 11g DB, Apache Struts
- GRAphgical Structures Project (GRASP): Graphical Database for Chemical Structures. Platforms: Java, Spring, Hibernate, Oracle 11g DB, Symyx Isentris
- GE Aviation
- PALIS: Messaging system for GE/Rolls Royce F-136 engine for F-35 Lightening II Joint Strike Fighter. Platforms: Java, Hibernate, Axis2, JSF
Jun 2008 - Sep 2009
Crown Partners, Dayton, OH
Associate Consultant
- Developing extensions for EMC Documentum, Developing Java code for use in website marketing analytics, Developing Java code for internal website, SQL and EMC
Documentum DQL experience. Some work with EMC Captiva and EMC DocSci products.
- Platforms: Documentum, SQL, Java, Windows Platforms, *nix Platforms, Virtual Machines