Charlotte Metro
-Engineer and maintain CI/CD pipelines using GitHub Actions and Jenkins to support security integration for 100+ GitHub repositories. -Built Power Automate workflows leveraging generative AI (Copilot and AT&T generative AI platform) to automate manual compliance requests, reducing manual effort for server non-compliance remediation. -Developed a GitHub-based deployment intake system using issue forms to trigger automated vulnerability and dependency scanning prior to Jira ticket creation. -Integrated CycloneDX into GitHub Actions to automate SBOM (Software Bill of Materials) generation, ensuring continuous PCI audit compliance. -Serve as the Technical Application Owner for two business-critical, customer-facing applications, overseeing vulnerability management, metadata mapping, and user-access reviews to establish a technical "Source of Truth" for internal and external audits.
Contributed to building API endpoints for internal data encryption and participated in designing and implementing a policy-based authorization engine to strengthen IAM controls. Developed a GitLab CI/CD pipeline to validate file syntax in open merge requests. Worked with JWT authorization, including evaluating caching strategies for JSON Web Key Sets.
I worked with BoKs Linux Authentication system, developing Ruby scripts to automate tasks previously performed manually by the IAM Operations team, which improved system efficiency and reliability. I also designed a new Software Development Life Cycle (SDLC) process that improved version control in our SailPoint codebase and streamlined the promotion of code from development to production environments, significantly improving deployment consistency and traceability.
I worked with the cybersecurity tool Wiz to write Cloud Configuration Rules that would monitor TIAA cloud resources. These cloud configuration rules would ensure that cloud resources followed desired rules and regulations.
Technology intern working on the Cybersecurity Software Release Management team. I am responsible for reviewing and scheduling product changes to ensure the changes are compliant with Change Management policy and to reduce the risk that changes will have a negative impact on the production environment. I am responsible for end to end oversight of the change requests and utilized tools such as Archer and ServiceNow.
Technology intern working on the Cybersecurity Detection and Response team. I was responsible for identifying and resolving possible phishing attacks and detecting network attacks utilizing tools such as CrowdStrike, WireShark, Palo Alto, and FireEye.