New York, United States
Highly accomplished IT leader with 10 years of experience directing technical operations and security strategy, the last part of which is within a Nuveen subsidiary. Expert in navigating the rigorous regulatory demands of the real estate and financial services sector, including CMMC, SOC2, and NIST 800-53. Proven track record of spearheading enterprise-wide digital transformations, such as transitioning legacy infrastructure to Unified Endpoint Management (UEM) and architecting Zero Trust frameworks. Adept at aligning subsidiary IT goals with parent-company standards to ensure seamless cross-tenant collaboration and robust risk mitigation. Expert in managing concurrent infrastructure modernizations, cloud migrations, and MSP transitions while maintaining rigorous compliance standards.
Enterprise Security Baseline & Zero-Trust Migration: Engineered a comprehensive transition from perimeter-based security to a Zero-Trust architecture, implementing Conditional Access, identity-driven authentication, and standardized security baselines across the entire corporate infrastructure. Cloud Infrastructure & Security: Advanced experience securing AWS EC2 and Amazon WorkSpaces environments, specifically tailored for specialized developer workflows (Guidewire). Modern Authentication: Expert in MFA Architecting, SAML engineering, and Microsoft Graph API integrations for complex B2B and cross-tenant environments. Endpoint Hardening: Specialist in Cloud LAPS implementation and Privileged Access Management (PAM) to eliminate lateral movement risks and local administrative vulnerabilities. Enterprise Policy Orchestration: Skilled in engineering global compliance frameworks using Intune Configuration Profiles and custom ADMX templates. Architected Secure Cloud Workspaces: Led the design and deployment of Multi-Factor Authentication (MFA) for AWS EC2 and Amazon WorkSpaces, ensuring the integrity of development environments for sensitive Guidewire workflows. Eliminated Identity Risk: Spearheaded a corporate-wide security hardening initiative by deploying Cloud LAPS via Intune, successfully removing local admin rights and mitigating credential theft vulnerabilities. Engineered Global Compliance: Orchestrated a comprehensive MDM framework utilizing custom ADMX templates to enforce automated security compliance and policy parity across the entire corporate fleet. Automated B2B Operations: Developed and integrated Microsoft Graph API solutions for Azure B2B, automating end-user data mapping and streamlining secure collaboration across disparate tenant environments. Identity Lifecycle Management: Managed the full lifecycle of SAML-based SSO integrations for enterprise applications, from initial engineering and testing to production deployment.
Honolulu Metropolitan Area