Projects
Advanced Service Mesh
Originally I was faced with fragmented development teams, lack-of or blatently missing security standards such as TLS, and the risk of high-value data. First, I designed a network security architecture integrating traditional firewalls and a complex service mesh for Kubernetes. The resulting solution utilized Istio, k8s network policy, cert-manager, metal-lb, and GitLab pipelines to povide a zero-trust based service mesh as a packaged solution. This solution and its supporting pipelines allowed dev teams to integrate their apps and services late in the development cycle and immediatly benefit from features such as mTLS, easy certi mgmt., and enhanced observability. All of these features provided without having to re-engineer exisitng application code. The result of this was met with client praise for supporting the timely deployment of critical capabilities and an award from corporate for a recognition of contriobutions to the customer.
Automated Security Ops Testing Environment
I was tasked with creating an environment for security operations users to test potentially or kown malicious links, files, and other artifacts. I facillitated this by designing a small system in Azure leveraging a DevTest Labs account, an Azure Bastion Host, a Logic App, and ARM Templates. This environment allowed security users to perform their analysis quickly and have VMs re-launched automatically after bein compromised. A contained network, use of Azure features such as Bastion, Network Security groups, and basic netwoking concepts provide an environment completly seperated from our client's infrastructure. The environment is relitively low cost and can be launched via ARM template on the fly.
Automated Retroactive Malacious Email Deletion
As part of a client's Security Orchestration & Automated Response iniative, I identified automation use cases with the most beneficial impact to the organization. The result was a workflow utilizing a 3rd party ATP tool's API, Azure's automation capabilities, and the O365 suite which saved the SOC an estimated 30% of time spent on email related incidents.
Mason Dining Help Desk Infrastructure
During my later time working at Sodexo USA (Mason Dining) I took over management of all of our technology operations. I took this opportunity to implement several industry standard practices including a help desk ticketing system to better manage user requests and problems. This among other improvements greatly increased user/customer satisfaction. This system I put in place was easily transferable to new employees as well.