
CISSP; Information Security Analyst, Architect, and Engineer
Greater Atlanta Area

CISSP; Information Security Analyst, Architect, and Engineer
Greater Atlanta Area
Information Technology Professional with fifteen (15) years experience, covering a diverse mix of disciplines and technology. I have twelve (12) years of direct experience in Information Security: focusing on Security Architecture & Design, Information Risk Management, and Computer Forensics.
I am also a critical thinker that is comfortable thinking outside the box and examining problems and solutions from unique perspectives. As such, I would be interested in an Information Security Architect/ Engineering position that would allow me to apply my broad skills and experience towards challenging and unique applications.
Identity Management, Information Risk Management, Information Security, Information Security Management, Information Security Architecture, Information Security Engineering, Privacy Champion, UNIX Systems Administration, Vulnerability Management, Incident Response, Linux, HP/UX, AIX, OS/400, MySQL, Perl, Python, RealBASIC, Visual Basic, PHP, 3D Modeling, 3D Animation
(Public Company; 10,001 or more employees; SO; Utilities industry)
December 2005 — Present (4 years 1 month)
Key contributor for the creation and editing of Information Security policies, standards, and best practices. Conduct risk assessments, security awareness fairs, and drive the strategic security direction for the company.
Primary analyst providing management and support of the Company's geographically distributed & redundant PKI Infrastructure, supporting over 300,000 certificates.
Primary analyst providing management and maintenance of the Company's Internet Web Filtering infrastructure, supporting over 25,000 users over (2) OC-3, and (1) T-1 communication links, with best of breed hardware and software.
Primary analyst providing forensic analysis and support for the Company's legal and Corporate Security divisions by utilizing commercial and open-source tools and utilities to extract forensic evidence utilizing industry best practices.
Primary analyst providing support for UNIX security consulting, and incident response.
(Public Company; 10,001 or more employees; HD; Retail industry)
June 2002 — February 2005 (2 years 9 months)
At Home Depot I was an Information Security Consultant & architect in the Information Risk Management Department, primarily acting as consultant for eBusiness and other IT Projects.
Major Accomplishments
* Designed, and implemented a custom application to increase employee productivity for provisioning new associates.
* Designed, and implemented a custom application to increase employee productivity for processing employee terminations.
* Designed, and implemented a custom application to increase the accuracy of employee monthly metric reporting.
* Designed a custom application to increase employee productivity for processing user requests.
* Designed, and implemented a custom application to increase employee productivity with managing user accounts.
* Implemented numerous korn, bourne, and c-shell scripts to increase productivity, and to provide increased reporting based on business needs.
(Privately Held; 11-50 employees; E-Learning industry)
March 2002 — June 2002 (4 months)
Developed courseware for, and instructed students, in learning Linux & UNIX Systems Administration.
(Financial Services industry)
October 2001 — January 2002 (4 months)
What a short ride, but a fun one none-the-less. As the last person hired, I was also (one of) the first to be let go when the economy went south after 9/11.
While at Visionary, I was both an Information Security Analyst and UNIX Systems Administrator, and implemented several processes to increase the overall security of the development and production networks.
Major Accomplishments
* Architected and implemented redundant automated server monitoring processes and applications (Solaris, Red Hat) for maintaining VSI's production, and non- production servers at primary and backup hosting facilities.
* Implemented web-based systems administration portal (Linux, Solaris), along with custom scripts (Perl, bash) to securely delegate administrative tasks to non-administration personnel.
(Privately Held; 51-200 employees; Computer Networking industry)
November 2000 — September 2001 (11 months)
I was a jack of all trades while at Interland. I provided 3rd level support for Interland's dedicated clients, and 2nd and 3rd level support for Information Security Incidents.
Major Accomplishments
* Designed, developed, and implemented a web-based administration portal for use by first and second-level Interland support-staff, and customers, to provide limited root-level access without end-user's requiring the root password to perform specific administration tasks.
* Developed the curriculum for, and facilitated several UNIX Fundamentals classes, for first and second-level Dedicated Hosting support staff to provide cross-training and increased knowledge
to support staff.
(Public Company; 1001-5000 employees; SONE; Computer Software industry)
June 1999 — November 2000 (1 year 6 months)
I was in S1's (formerly Security First Technologies) Information Security Group where I was responsible for overseeing the secure installation of S1's product during customer engagements.
Major Accomplishments
* Developed, and implemented processes by determining reporting needs and implementing the methods to facilitate the prompt and accurate reporting from IDS and assessment products.
* Designed, and implemented Corporate Global DNS Infrastructure by moving S1's original DNS topology from being flat, with a single-point of failure, to a topology which was distributed, hierarchical, and redundant based on BIND & FreeBSD.
* Developed, and implemented S1's Corporate Global Email Infrastructure by utilizing LDAP (Sun Directory Server) to tie pre-existing Lotus Notes, Microsoft Exchange, and Netscape messaging platforms together in preparation for S1's eventual migration to an all- Microsoft Exchange environment.
(Public Company; 1001-5000 employees; SONE; Computer & Network Security industry)
June 1999 — November 2000 (1 year 6 months)
(Privately Held; 1-10 employees; Information Technology and Services industry)
November 1997 — June 1999 (1 year 8 months)
Systems & Network Engineer for regional ISP in Orlando. Worked closely with Orange County Sheriff's Office on several computer crime cases involving hacking, etc.
(Privately Held; 1-10 employees; Internet industry)
November 1997 — June 1999 (1 year 8 months)
(Privately Held; 1-10 employees; Internet industry)
March 1993 — November 1997 (4 years 9 months)
computer art, computer animation, writing, ancient history, Egyptology, computer programming, science fiction, politics
CISSP, ISC(2), ISSA, ISSA - Atlanta Chapter, ISACA, ISACA - Atlanta Chapter, USENIX, SAGE
Employee of the Quarter, 2000, Recognition for Outstanding Achievement, 2003