Education Columbia of Missouri, Missouri

• 1998 - Bachelor of Science: Computer Information Systems. GPA 3.7

College of Lake County, Illinois

• Cisco Networking I, II, III, IV
• Project Management

Certifications

• A+ Certified Technician
• Network + Certified Technician
• Certified Identity and Access Manager (CIAM)

Antares Capital 08/2022-08/2023 Vice President Information Security / Identity Access Management

• Managed multi-tiered team of IAM professionals, 10+ member Managed Service Provider team to support IAM initiates. Maintain and track Service Level Agreements (SLA) Reports to leadership.
• Technical Expertise and Leadership: Provide technical expertise and leadership in the design, implementation, and maintenance of IAM controls and solutions
• Mature IAM program by improving controls and leveraging automation. Develop one- and three-year IAM strategy and roadmaps.
• Oversee and contribute in the development of documentation and dashboards. Review and approve all IAM process documentation including playbooks and catalog current Access Management processes across the organization.
• Develop, support, and publish standard operating procedures (SOPs) around IAM tools and processes, ensuring that they are followed consistently across the organization.
• Documentation and Reporting: Maintain accurate documentation of IAM systems, processes, and configurations. Generate reports on IAM activities, metrics, and compliance status as required supporting NIST 1.1 Controls.
• Collaborate with business and IT teams to understand their IAM requirements, provide guidance on IAM-related matters, and deliver solutions that meet stakeholder needs.
• Periodically review incident handling by IAM to ensure accuracy and quality, Identify, manage and prioritize process improvement in MS DevOps.
• Collaborated with application owners to implement security controls to prevent unauthorized access to critical systems and data with focus on Identity management, Role Based Access Control (RBAC), and Access Controls.
• Implementing and maintaining API-based application connectors, attribute synchronization, transformation rules and automating workflows for IAM tools and platforms.
• Oversee Life-Cycle Management biannual certification campaigns. Maintain and audit security principals in Antares’ primary directories (Active Directory and Azure AD).
• Competency in SailPoint IdentityNow, Azure Runbook Powershell script implementation.
• Build out the Identity and Access Management division, identify and implement new technology partnerships and development offerings.
• Document current and future state business processes/workflows using standard process modeling tools and process improvement methodologies.

Wintrust Financial 01/2019-08/2022 Manager Information Security / Identity Access Management

• Lead the Identity and Access Management program to include: maintaining a multi-year strategic roadmap, obtaining key stakeholder sponsorship, establishing governance, and driving the repeatable delivery of outcomes.
• 4+ years of hands-on experience in the Identity and Access Management field. Guiding overall architecture, engineering and implementation of Identity & Access Management (IAM) solutions enterprise wide. Accountable for internal/external audits of the IAM program.
• 5+ years of hands-on experience in the Identity and Access Management field. Guiding overall architecture, engineering and implementation of Identity & Access Management (IAM) solutions enterprise wide.
• Experience with Identity & Access Management technologies (SailPoint IIQ/One Identity Analytics, SailPoint File Access Manger, Ping, SSO, SAML, OpenID Connect and Kerberos, PAM and password vaulting.).
• Priviliged Access Thycotic Secret Server Requirements gathering, Implementation and maintenance.
• Expert SME Resource for Identity and Access Management and handles complex issues for Implementing IAM solutions for regulated business environments.
• Engages key business stakeholders and customers as it relates to all supported systems and applications to verify, validate and audit system access.
• Analyze Project Scopes through interviewing, requirements gathering, and providing KPI Metrics back to Executive Team to ensure teams were properly resourced.
• Design solutions for foundational IAM principals including: least privilege access, password management, audit logging, certificate management, privileged access and user behavior analytics.
• ServiceNow Workflow enhancements, requirements gathering and implementation of catalog offerings with automation where possible to enhance Identity Management access requesting.
• Create departmental Dashboards & Roadmaps to ensure goals, deadlines and budgets are aligned while progress and recomendations communicated to Executive Stakeholders, leading to on-time and successful delivery of projects.
• Established Audit Response processes, worked closely with Audit Entites and provided audit evidence while accountable for tracking and internal/external audits of the IAM Department.
• Protects data and systems from unauthorized access, while providing access required to support innovation and information sharing throughout the organization.
• RPA Bot Workflow automation experience and project implementations to create automation where no other option available offering reduction in manual efforts while increasing productivity.
• Responsible for IGA risk detection, SOX Audit findings, remediation and development of programs related to IAM Governance and on-going coordination of Continuous Improvement or projects.
• Established Audit Response processes, worked closely with Audit Entities and provided audit evidence while accountable for tracking and internal/external audits of the IAM Department.
• Follows all Bank policies and procedures, compliance regulations, and completes all required annual or job-specific training.
• Experience internal audit concepts and regulatory requirements (e.g. SOX, GLBA, etc.).
• Lead evolution and maturation of identity management initiatives including a focus on automation of provisioning and user-friendly access reviews.
• Develop monitoring and report on the health, effectiveness and efficiency of IAM services and Department.
• Leads team that administers, monitors, evaluates, and analyzes system access controls and security features, as well as business processes and procedures.
• Provide leadership, training, and mentoring to the Identity and Access Management Team.
• Sets objectives, organizes, and directs the staff to ensure that services are delivered to meet client business needs and expectations.
• Entitlement management; Enterprise directory architecture and design; Role Based Access Control; Single sign on; Identity federation; and/or privileged access management.
• Utilize and perform Splunk Identity investigations using scripting integration.
• RPA Bot Workflow automation experience and project implementations to create automation where no other option available offering reduction in manual efforts while increasing productivity.

Wintrust Financial 10/2018 - 01/2019 Senior Identity Management Engineer

• Migration from One Identity TPAM to Thycotic Secret Server. Conduct departmental interviews to determine pain point resolutions, requirements, develop score card for business as related to RFP. Collaborated with internal customers to migrate TPAM to Thycotic Secret Server and confirm Privileged Access Management and Least Privilege Security requirements and finalize production architecture.
• SailPoint SIQ File Access Manager (FAM) Permissions, Queries, Campaigns, Reports, Reviews. Data Steward. Perform Compliance Officer Functions, Auditor Functions and Administrator Functions. Implementation and administration to perform identity governance reviews of unstructured data resources and Enhance security by proactively monitoring for inappropriate or malicious file access. Perform Security File Audits and quickly identify which files contain sensitive data and lets you control who can access them and minimize risk to data leakage or breaches by identifying and monitoring access to sensitive data shares and files.
• Support for Enterprise Active Directory Infrastructure for over 15,000 users. Involved in all Active Directory, IAM Governance items related Charter Purchases and Divestiture work.
• Provide implementation services, while utilizing security and vendor solution best practices.
• Utilize understanding of IAM, security and regulatory practices based on the client’s industry for inclusion on all deliverables.
• Responsible for strategic direction of Security categories and vendor relationships including security analysis, best fit recommendations, presentations, and deliverables.
• Knowledge of security risk assessment, auditing methodology and security management.
• Core competency and experience with delivery of automated provisioning and/or identity governance solutions.
• Provide Proof of Concept plan, feasibility testing schedules, Architecture diagrams and customized VMWare testing environments to emulate possible production issues and provide use cases
• Performed project management and liaison between internal teams, customers and provided CyberArk Professional Services and assistance during production implementation.
• Built, maintained and documented PAM environment to prevent attack scenarios and mitigating technologies.
• Collaborate and educate clients in order to facilitate confidence in our core services, as well as our partnered vendor solutions.
• Strategize and perform in-depth requirements gathering including identification of critical use cases, security concerns and business requirements. Establish a security and risk appropriate authentication scheme for PAM solutions.
• Experience configuring granularity of PAM solution operational permissions that align with best practice (e.g. system administrator permissions vs. auditor vs. provisionary.)
• Help prioritize business critical requirements gathering by identifying high-value high-risk items to develop an effective tactical roadmap for projects.
• Review existing PAM architecture, conduct use case walkthrough and provide valuable feedback to improve the security posture of IT environments.
• Ensuring end user efficiency, ease of usability to avoid user experience issues, such as blue screen, session lockout, etc. While still maintaining a balance with robust security controls.
• Knowledge of financial services regulatory requirements related to privileged access management programs and tool implementations. Ensure proper controls and evidence gathering techniques are established supporting a wide range of compliance activities.
• Ensure PAM tool compatibility with existing environments systems and applications from an integration standpoint to enable the user of core PAM capabilities.
• Review current security processes to ensure adherence to industry best practices and security guidelines such as least privilege, on-demand privilege elevation, segregation of duties, etc.
• Direct integration of PAM solution with SailPoint IdentityIQ (IIQ) for account provisioning and access certification purposes. Direct integration of PAM solutions with Ping for single sign-on and multi-factor authentication.
• Leveraging a PAM solution that has integration with current identity governance and administration (IGA) system and associated with normal identity supporting effective governance of PAM access enabling integrated compliance and audit activities not possible in existing siloed and/or segmented existing TPAM product.
• Implementation of third party SIEM integration with PAM solution to be alerted/triggered based on specific actions or conditions.
• Implement repeatable and measurable processes to manage privileged access ensuring regulatory requirements, organizational policies, and business needs.

Alight Solutions 09/2017 - 10/2018 Senior Active Directory Engineer/Architect

• Support for Enterprise Active Directory Infrastructure which included 400 domain controllers globally. Involved in all Active Directory related TSA Divestiture work.
• Design/Deploy/Maintain NETIQ DRA Tools for organization’s AD self-serve via IDM Systems. Troubleshoot and provide end user support for DRA related tasks.
• NetIQ Change Guardian Policy Editor, configuration of user permissions, group configurations, domain and Change Guardian Environment Configurations.
• Provide implementation services, while utilizing security and vendor solution best practices.
• Use of Riverbed appliances to perform traffic analysis to identify TSA related Directory Services dependent apps for separation activities.
• Active Directory design, implementation and administration. Implementation of Windows security/system hardening for Windows operating system and management and support of certificate authorities.
• Manage Organization’s RADIUS Servers configurations and responsible for deploying environment changes in timely manner.
• PowerShell Scripting to assist in providing necessary information needed for Departmental Divesture Related Tasks, perform cross platform audits of Active Directory (AD) objects and permissions.
• Manage large enterprise and data center experience (2000+ servers/virtual machines).
• AWS Domain Controller Management, AWS DNS Management.
• Design/Configure/Implement Advanced Company-Wide Group Policies via AGMP tool utilizing established Version Checking Process.
• O365 Azure Migration Activities, Azure Administration and IDM Implementation.
• Establish and maintain relationships with Priority Vendor Partners and provide service contracts for related budgeted I.T. Projects.

Impact Networking 09/2017 - 10/2018 Network Engineer/Architect

• Design, Budget, Configure, and Responsible for entire multimillion dollar internal I.T. infrastructure.
• Manage and train Internal I.T. Helpdesk team. Involved in configuration and troubleshooting of all Firewall, Router, Data & VoIP Switches, Printer, VPN, Computer related problems.
• Implemented/Maintain Hybrid On-Premise Exchange Azure AD O365 Migration. Responsible for deploying new tenant, leading project to onboard existing I.T. Employees in O365 Environment.
• Monitor daily helpdesk activities and ensure I.T. budgeted projects are completed within scope of time.
• Design vSphere VM Farm Configuration, ESXI Server Deployment, and Implementation of individual hosts/clusters at remote sites. ESXI/VSPHERE/VCSA.
• Design and deploy Crestron technologies Cloud-based Whiteboarding Video Environment on dedicated VLAN Network.
• Design, Configure, Implement, Maintain VoIP ShoreTel Phone system. Implementation Troubleshoot VoIP related issues with call queues and manage VOIP related user call flows.
• Dell SonicWALL/Cisco Meraki Firewall Management, SSO Configuration, Load Balancing, Content Filtering, Site to Site VPN Tunnels, T1 Voice Failover Configurations.
• Meraki Firewall Installation and Management, Group Policy Security Content Filtering, Site to Site VPN, Failover, VLAN interfaces and IP Routing.
• CMAK Design and implementation of VPN Networks over TCP/IP networks.
• Perform Site Veeam installations, configurations, upgrades, backups and replication of entire virtualized network and creation of offsite replicas using Veeam Backup Software.
• Centrally manage and deploy multimillion dollar wireless infrastructure using Ruckus Controller. Configure and Deploy Ruckus AP Devices, Deploy WAN Groups, Ruckus Network Firmware Upgrades, Ruckus Controller Failovers. Creation of GPO Guest deployed wireless networks.
• Centrally manage Asset Management for all LAN/WAN Devices utilizing Solarwinds NCentral Solution. Upgrade NCentral Database and software clients. Configure Agents and Probes to detect devices. Create reporting for monitoring.
• Deployment of AV Defender AV Software and manage AV for detection and prevention of LAN/WAN Virus/Security based attacks. Monitor AV Reports to determine risks and remediation strategies.
• Responsible for Architecture, Engineering & Operations of the Hewlett Packard Enterprise corporate Voice & Data network including Network Security, WAN, LAN, Data Center, Contact Center Services, Wireless.
• Establish and maintain relationships with I.T. related Vendor Partners and provide pricing and quotes for repairs and purchases for budgeted I.T. Projects.

Abbott Laboratories 10/2014 - 12/2015 Network Security Technician / Active Directory Administrator / Analyst

• Expert experience with Active Directory, including advanced features such as certificate services, federation services, Active Directory domain and forest restructuring, consolidation and migrations.
• Support for Enterprise Active Directory Infrastructure which included 350 domain controllers in over 200 countries.
• Level 3 support for Global Active Directory related issues and primary interface with helpdesk and client support, presenting support for multiple methods of object and application authentication / integration solutions.
• Maintain and Manage 200+ DNS / DHCP controllers utilizing Men & Mice / Microsoft RSAT Tools.
• Active Directory design, implementation and administration. Implementation of Windows security/system hardening for Windows operating system and management and support of certificate authorities.
• Managed Split DNS Domain and responsible for DNS Migrations from Abbott to Abbvie.
• Design, Configure, Implement, Maintain VoIP ShoreTel Phone system. Implementation Troubleshoot VoIP related issues with call queues and manage VOIP related user call flows.
• Support for Identity Management Services which provides global Identity Management Services for the enterprise.
• Manage large enterprise and data center experience (1500+ servers/virtual machines).
• PowerShell Scripting to perform cross platform audits of Active Directory (AD) objects and user permissions.
• Administer and maintain end user accounts, permissions, and access rights. Configure all workstation profiles and software settings for all suites via GPO Policies.
• Monitoring, performance tuning, security updates and disaster recovery for areas of responsibility.
• Developed organizational units in Active Directory (AD) and managed user security with group policies.
• Perform daily maintenance of Microsoft Windows 2003/2008/2012 Enterprise Servers, including and not limited to Active Directory Design/Implementation & Group Policy management.
• Involved in ensuring Abbot/Abbvie Active Directory domain split/migration process compliance standards were adhered.
• These include identity data synchronization, automated provisioning and de-provisioning of Network (AD), and application accounts, a central store/warehouse of identity information, and a foundation for other Identity Management initiatives.
• Global coverage and support for security activities 24 x 7 x 365 through on call rotations.
• Provide Support for IAS/NPS which provides RADIUS services for Active Directory security principles to integrate network devices such as wireless access points.
• Documentation of system configuration and standard operating procedures and distributed software packages using Microsoft Systems Management Server.

Interior Investments, LLC 10/2007 - 10/2014 Senior Network Engineer / Exchange Administrator / Support Analyst

• Perform daily maintenance of Microsoft Windows 2003/2008 Enterprise Servers, including Active Directory Design/Implementation & Group Policy management.
• Administer and maintain end user accounts, permissions, and access rights. Configure all workstation profiles and software settings for all suites.
• Install, configure, maintain, and troubleshoot Exchange 2010 including DAG (Database Availability Groups), Shell Scripting. Understand various access methods including POP. IMAP, OWA, MAPI, SMTP.
• Install, configure, and maintain Watchguard based Firewall Systems, VLAN Based HP Procurve Switches, Configure / Maintain Webservers, SharePoint Servers, Accounting Database Servers, Configure Domain Controllers, DNS/DHCP/File Servers, Mail Servers, and Workstations in LAN/WAN environment.
• VM Cluster, Experience deploying and configuring VMWare ESXI Servers, VMWare Virtualized VCenter Server network integration and configuration, ESXI, VMSphere Client, System Center Virtual Machine, System Center Data Protection.
• Oversee budgeting and procurement of network equipment, assist in design infrastructure.
• Track Inventory, Perform Patch Management using Spiceworks, and Corporate AV Suites. Create/Update workstation deployment using Symantec Ghost, Acronis, and Paragon Suites.
• Install, configure, maintain Corporate Antivirus Suites, Symantec, Kaspersky, McAfee, Panda, Trend-Micro Suites. Utilize Virtualization & Sandbox Technology. Configure all AV Policies and Firewall Rules. Maintain most current antivirus database files on all client machines.
• Design, Configure, Implement, Maintain VOIP ShoreTel Phone system. Utilize ShoreTel Director for all SIP, Host, and Client Configurations. Setup ShoreTel Communicator for all Client/Server Communication on host machines.
• Designed CSS Style and Layout for New Websites and assisted with updating content and complete migration. Maintain WordPress based HTML Sites.
• Purchased and Configured Multi-Cert CA for multiyear use for hosted domains.
• System State backups of primary servers. Data backup using shadow copies and other restore policies put in place to manage archived data and allow restoration of deleted/moved data by users.
• Utilize file synchronization to NAS devices for all locations and Replication of data to external sites using de-duplication techniques. Daily Exchange Database Backup and compression & Address Book Backup.
• Upgrade/replace computers when at EOL, computer loss, damage, theft, hardware/software related disasters. Maintain warranty replacements and parts replacements and HP liaisons for all computers still within warranty period.
• Supports, in cooperation with the Digital Communications team the deployment of web-based initiatives including: website design, SEO, email marketing, Internet and Intranet sites, social media platform implementation and other e-business solutions.
• Installed and configured KMS Version 3 Licensing Server for all 2010 Office, Server 2008, Windows Clients to automatically activate and track licenses.
• Data Sanitation for old hard drives using DoD 5220.22-M methods, ensuring corporate data protection. Secured a green based free resource for scrapping all old equipment.
• Documentation of system configuration and standard operating procedures and distributed software packages using Microsoft Systems Management Server.
• Assist in configuring, troubleshooting, tweaking Apple and Droid based smart phones.
• Microsoft Identity Manager implementation, design and administration.

19th Judicial Circuit Court 10/2007 - 10/2014 Network Engineer / LAN/WAN Manager / Technical Analyst

• • Perform key roles in providing Technology related engineering support to increase productivity and reduce operating costs.
• • Resolved multiple technical workflow issues to network systems to increase business functionality.
• • Implement TCP/IP core networking services and perform advanced troubleshooting to support the IT needs for over one hundred users at the Lake County Juvenile Detention Justice Center, while assisting users in day-to-day technology related problems.
• • Analyze and design new servers, san storage systems and optimize LAN using performance reports and monitoring applications in 24x7 environments.
• • Oversee budgeting and procurement of network equipment to support remote users using RAS direct connection and secure dial up. Maintain Exchange 5.5 Server.
• • Support satellite locations using centralized remote management tools to manage Windows NT/2000/XP/2003 Servers and Workstations. Design, implement, and administer Windows 2003 Advanced Server Active Directory Environments while implementing Group Policy to centrally define computing environment settings for users and computers.
• • Monitor 5000+ network devices and perform network maintenance, server repairs and other administrative duties on Windows NT Network Environments.
• • Perform routing data protection/recovery of over ½ terabyte of data utilizing back-up software.
• • Perform Hardware/Software Inventory, Patch Management, create pc images using Symantec Ghost to repair and distribute new and existing workstations. Installation and implementation of RIS Server and creation of additional RIS images.
• • Identify, research, and conduct analysis of new technology hardware/software systems for internal company use and establish timely solutions to technology related problems with provided resources. Developed E-Version 2004-2007 Annual Report for the 19th Judicial Circuit Court.
• • Instituted new network infrastructure that improved systems efficiency and dependability, while initiating and maintain multiple technical projects that consistently improve performance and business functionality.
• Designed CSS Style and Layout for New Websites and assisted with updating content and complete migration. Maintain WordPress based HTML Sites.
• • Assist in implementation of custom software applications to perform surveys and gather statistical data to enhance existing processes.
• • Implemented conversion of case management database software. Designed, created, and implemented customized departmental reports using r-list type database system.
• Utilize file synchronization to NAS devices for all locations and Replication of data to external sites using de-duplication techniques. Daily Exchange Database Backup and compression & Address Book Backup.
• • Assist in developing and updating 19th Judicial Circuit Website. Updates include integrating Flash images, XML and Java scripts.

19th Judicial Circuit Court 11/1998 - 10/2001 Network Engineer / LAN/WAN Manager / Technical Analyst

• • Installed and Configure Servers for TCP/IP Networks and performed troubleshooting on network related issues and physical installation of networking hardware including hubs – routers – switches physical configuration.
• • Installed and terminated network cabling while maintaining network standards.
• • Performed hardware upgrades of systems and software upgrades using imaging software.
• • Assisted with troubleshooting PC problems and responsible for loading software applications and Assisted co-workers in all areas of PC hardware and software problems.
• • Upgraded workstations and printers to 100Mbps, which significantly improved desktop connectivity.
• • Provided training and implementation of PC turnkey software applications as well as internal custom software applications.
• • Developed and established written procedures and work flow processes for multiple departments using screen capture methods and CASE tools.
• • Designed, developed, tested and implemented company website using HTML. Gather company requirements and materials to update company site on a regular basis.
• • Designed and developed custom CD-ROM documentation application for distribution to customers, which includes updated facility diagrams and detailed test results for all company data cable installations.

Computer Power Systems, Inc. 10/1998 - 11/2001 Project Management / Purchasing Manager / Inventory Control Manager / Telecom Sales / Customer Service

• • Installed and Configure Servers for TCP/IP Networks and performed troubleshooting on network related issues and physical installation of networking hardware including hubs – routers – switches physical configuration.
• • Installed and terminated network cabling while maintaining network standards.
• • Performed hardware upgrades of systems and software upgrades using imaging software.
• • Assisted with troubleshooting PC problems and responsible for loading software applications and Assisted co-workers in all areas of PC hardware and software problems.
• • Upgraded workstations and printers to 1000Mbps, which significantly improved desktop connectivity.
• • Provided training and implementation of PC turnkey software applications as well as internal custom software applications.
• • Developed and established written procedures and work flow processes for multiple departments using screen capture methods and CASE tools.
• • Developed and maintained computerized procurement records for items purchased.
• • Designed, developed, tested and implemented company website using HTML. Gather company requirements and materials to update company site on a regular basis.
• •• Designed and developed custom CD-ROM documentation application for distribution to customers, which includes updated facility diagrams and detailed test results for all company data cable installations.

Computer Power Systems, Inc. 10/1995 - 11/1998 Project Management / Purchasing Manager / Inventory Control Manager / Telecom Sales / Customer Service

• • Assisted in customer site surveys, customer LAN designs, cabling structures and telecom sales for customers while supporting sales project efforts.
• • Maintained multi-million-dollar inventory budget, coordinated and provided consulting for the purchasing of OEM telecom products.
• • Responsible to meet sales quotas for telecom products for all local and national accounts.
• • Designed and provided recommendations of telecom products and materials for installations.
• • Involved in problem solving and goal setting management meetings for sales staff. Order taking and follow up of all customer orders.
• • Negotiated pricing and purchases for telecom and computer related products.
• • Instituted corporate standard operating procedures for all areas of Inventory Control ensuring quality and accuracy.
• • Developed and maintained computerized procurement records for items purchased.
• • Responsible for 10,000 stock items with a value of $3 million in material annually.
• • Developed, implemented and supported inventory control database using turnkey applications.
• • Track, measure and maintained current inventory through reporting and distribution analysis and provide projection reports to Management.