Experience

• 

  Reflections

  Jan 1999 - Jan 2001

  • Dishwaster

    Jan 1999 - Jan 2001

  • Dishwaster

    Jan 1999 - Jan 2001
• 

  United states air force

  Feb 2005 - Feb 2007

  Network infrastructure technician

  • Extensive experience supporting the Common Imagery Exploitation System and News Dealer / Coastline, which supports Common Elint Tasking, Processing, Exploitation, Dissemination, Rapid Information Manager, and Multi Source Correlation system.• Monitored and maintained reliable operation of all data and voice communications circuits sustaining the Distributed Ground System-1 (DGS-1) in support of global war on terror.• Provided communications infrastructure sustaining U-2 and Predator intelligence exploitation ensuring mission is 100% functional.• Performed system administration and configuration for mission systems and networks based on user service requirements and network traffic patterns.• Performed troubleshooting of classified networks, identified degraded network performance and performed restoration actions to prevent down time.• Protected circuits and information systems through cryptographic interconnections and secure operating procedures to avoid compromising national security. Show less

• 

  Cygnacom solutions

  Feb 2007 - Dec 2010

  • Edited, and tested Certification Specification files for Entrust Security Manager to enable Smart Card Login with ESP.• Configured, and tested ESP for Smart Card Login.• Configured, and tested an Entrust PKI environment to integrate with Intercede My ID.• Documented and tested migration and upgrade procedures for ActivIdentity CMS version 3.8 to 4.2.• Migrated clients from Safenet CA3 to Luna SA HSMs.• Built VMware test labs to support development and testing of enabling applications with PKI.• Performed numerous upgrades patching Entrust Security Manager to Service Pack 3 on Windows 2000/20003 Server.• Installed, tested, and configured core infrastructure software components, including the Entrust PKI software suite and the Core Street Validation Authority software. Show less

  • Security Engineer

    Jan 2009 - Dec 2010

  • Security Administrator

    Feb 2007 - Jan 2009
• 

  Protegus

  Dec 2010 - Sept 2011

  Security egineer

  • Architected and implemented solution to migrate test lab to VMware vSphere 4 from Hyper-V and wrote procedures to patch/maintain the environment.• Migrated physical servers to virtual machines to consolidate the environment• Supported on-going PKI activities to include certificate lifecycle management operations and technical procedures to decommission rogue PKI services.• Re-engineered Single Sign-On solution, Quest Enterprise SSO, for better user experience and stability.• Engineered and implemented HBGary Active Defense solution for the enterprise.• Created BigFix Fixlets to push out various software patches in the enterprise. Show less

• 

  Entrust

  Oct 2011 - Aug 2013

  Senior deployment engineer

  • Lead Deployment of the Entrust Reporting Service for the Managed Services• Lead Deployment of the Entrust Identity Guard as a Service• Provide Entrust product designs with options on how to implement for various clients.• Design, Upgrade, and optimize Entrust Managed Service VMware infrastructure.• Re-design Entrust Managed Services shared storage solution to use a tiered storage approach.• Architect and implement VMware solutions for various Entrust products.• Review network architectures to validate multiple layers of defense are used.• Implemented VMware Replication to drastically reduce disaster recovery deployment time.• Configured and implemented PostgreSQL replication to reduce CA failover to under 5 minutes• Lead, designed, and implemented Red Hat Directory Infrastructure to replace Critical Path directory solution• Deployed iTop Configuration Management Database to provide configuration management that was ITIL for the project• Deployed Alfresco for a document management solution for the project• Deployed Identity Server for printing Smart Cards comprised of multiple Entrust products• Lead initiative to design and implement a DNS solution using PowerDNS• Lead initiate to provide a Single Sign-on Solution using Red Hat IPA and Red Hat Directory Server• Lead initiative to deploy patch management solution for Red Hat using Red Hat Satellite Server 5.5 Show less

• 

  General dynamics mission systems

  Sept 2013 - Sept 2014

  Senior systems engineer

  Write Python/Jython scripts to automate routine administrative tasksWrite WLST scripts in Python to automate configurations for OAM, OIF, STS, ODSEE, OHS, and OESConfigure SSO for web applications in OAMTest OES and OIF with soap utilitiesContinue to learn the Oracle IDM products

• 

  Cygnacom solutions

  Sept 2014 - Feb 2020

  - Technical oversight on all solutions designed in the company- Provide technical mentoring to team members- Peer review technical documents before delivery to client- Assist with creating estimates for clients by providing input on the technical requirements- Expert in architecture/implementation of derived credential solutions and integration's with AirWatch, IBM MaaS 360, JAMF, and MobileIron- Tested Utimaco HSM with Entrust Datacard products- Venafi solutions that leverage adaptable workflows Show less • Write Ansible playbooks to automate the installation and configuration of Entrust products• Write Ansible playbooks to automate various IT tasks• Provide Entrust product architectures with options on how to implement for various clients• Review network architectures to validate multiple layers of defense are used• Write Python scripts to automate installation of Entrust IdentityGuard, Self-Service Module, Ngninx, & PostgreSQL• Document, test, and performed CA Key Rollover for GSA US Access CA• Document, test, & performed Entrust PKI upgrades for various clients• Upgrade SafeNet HSM firmware & software• Configure SafeNet HSM for use with various PKI software• Migrate & upgrade Critical Patch directory server for various clients• Assist with writing CP/CPS for federal clients• Interview & hire new employees for the team• Mentor junior members of the team to set them on a path for success• Train team members on Entrust Datacard products• Architect Derived Credential solutions using Entrust Datacard products• Provide award winning customer excellence when working with clients• Set goals for team members and provide annual reviews on performance Show less • Write Ansible playbooks to automate the installation and configuration of Entrust products• Write Ansible playbooks to automate various IT tasks• Provide Entrust product architectures with options on how to implement for various clients• Review network architectures to validate multiple layers of defense are used• Write Python scripts to automate installation of Entrust IdentityGuard, Self-Service Module, Ngninx, & PostgreSQL• Document, test, and performed CA Key Rollover for GSA US Access CA• Document, test, & performed Entrust PKI upgrades for various clients• Upgrade SafeNet HSM firmware & software• Configure SafeNet HSM for use with various PKI software• Migrate & upgrade Critical Patch directory server for various clients• Assist with writing CP/CPS for federal clients Show less

  • Chief Architect

    Jul 2017 - Feb 2020

  • Manager Technical Solution Integration

    Jun 2016 - Jul 2017

  • Senior Security Engineer

    Sept 2014 - Jun 2016
• 

  Primekey (part of keyfactor)

  Feb 2020 - Jan 2022

  East coast & federal sales engineer

  PrimeKey is a pioneer in open source security software that provides businesses and organizations around the world with the ability to implement PKI security solutions such as e-ID, e-Passports, authentication, digital signatures, unified digital identities and validation. At PrimeKey, my role is to support sales efforts with my expert technical background. I have performed the following:- Support POC's interested in PrimeKey solutions- Use Ansible to automate PKI deployment and upgrades- Test the latest versions of Wildfly with EJBCA & SignServer- Contribute to the PrimeKey container initiative to build the best PKI container on the market- Test container builds with Jenkins- Maintain various scripts for automation and building PrimeKey products- Demo the power of the EJBCA PKI and SignServer- Work with developers to define enhancements to other open source projects such as Netflix Lemur Show less

• 

  Keyfactor

  Jul 2021 - now

  - Represent Keyfactor at CA Browser Forum to follow the public trust journey- Attend PKI Consortium to collaborate with the PKI enthusiasts around the world- Professionally record PKI content for Keyfactor Community using OBS, Adobe Premiere, & Audition- Visit Keyfactor prospects and customers to lead in-depth PKI consultations on best practices/architecture/troubleshooting- Receive guidance from Tomas Gustavsson and David Hook on PQC and PKI- Demo Keyfactor containers and talk to how Keyfactor leverages modern technology for PKI solutions- Collaborate with product marketing reviewing marketing material and participating in webinars- Collaborate with product training group to provide technical review of EJBCA training course- Mentor colleagues who want to grow their PKI expertise, automation, container, or troubleshooting skills Show less

  • Internationl PKI Man of Mystery

    Jun 2022 - now

  • Technical Sales Engineer

    Jul 2021 - Nov 2022