01 Professional profile
Security architect and leader with 10+ years designing, building, and validating security for classified, critical infrastructure, and regulated environments. Hands-on with Zero Trust segmentation, tiered administration, PKI, SIEM, and Microsoft 365 / GCC security, and builds adversarial AI testing environments for prompt injection and data leakage assessment. Led the security design and delivery of a 325-person organization's cloud tenant migration, coordinating the MSP and third-party integrations. Previously governed security for 13,000+ users across 17 countries in nuclear energy, and served as senior technical authority on security validation for classified naval combat systems.
Core competencies
- Zero Trust & Network Segmentation
- Cloud Security (Microsoft 365 / GCC)
- AI / LLM Security Testing
- Identity & Tiered Administration (AD, PKI)
- SIEM & Detection (Wazuh)
- Security Automation (PowerShell, Hyper-V)
- Data Protection (Purview, DLP)
- NIST 800-171 / 800-53 / CSF 2.0
- Incident Response & DFIR
- Third-Party & Supply Chain Risk
- Disaster Recovery & Continuity
- Executive & Board Communication
02 Technical projects
Zero Trust Compliance Enclave & GRC Lab
Built and scripted (PowerShell, Hyper-V) a segmented 11-VM environment aligned to NIST SP 800-171 / CMMC L2: default-deny OPNsense boundary, dual domain controllers with tiered admin model, offline-root and issuing PKI, Wazuh SIEM, and encrypted, audited file shares. CISO Assistant GRC platform tracks assets, evidence, risk, and POA&M.
source on GitHub →
AI Governance & Security Testing Lab
Adversarial AI testing environment for model risk validation, prompt injection testing, data leakage assessment, and governance policy development aligned to NIST AI RMF.
Cloud Resume Challenge on Azure
This site. Static hosting on Azure Storage behind a Cloudflare Worker with HSTS and a strict CSP, a serverless Python visitor-counter API on Azure Functions and Cosmos DB, Bicep infrastructure as code, and GitHub Actions CI/CD with passwordless OIDC, an SBOM, dual vulnerability scanning, CodeQL, and enforced signed commits.
frontend → backend →
03 Professional experience
-
2026 – present
Chief Information Security Officer (CISO)
T-Solutions, Inc.
- Led the security design and delivery of a 325-person organization's enterprise tenant migration to Microsoft Government Community Cloud (GCC), Microsoft's government cloud, coordinating the managed service provider (MSP) and third-party integrations to meet contractual security requirements.
- Fully implemented the NIST SP 800-171 control environment, positioning the organization for CMMC Level 2.
- Deployed and administer Microsoft 365 security and compliance controls: Purview data governance, DLP, information protection, insider risk management, and audit/eDiscovery.
- Set enterprise security direction and advise executives on risk posture and investment.
-
2021 – 2026
Supervisor, IT Governance, Risk Management & Security
Westinghouse Electric Company
- Directed enterprise cybersecurity governance for 13,000+ users across 17 countries in nuclear energy critical infrastructure.
- Led compliance alignment across NIST CSF 2.0, NIST 800-53, ISO 27001, SOC 2, NIS2, CRA, GDPR, and NERC; guided the organization through three independent NIST assessments and earned external recognition from PwC for program maturity.
- Built and led a global team executing 300+ risk assessments and 100+ policy exceptions annually; spearheaded enterprise GRC platform implementation.
- Integrated cybersecurity into third-party risk governance across 300+ vendor relationships; designed an enterprise phishing resilience program.
-
2018 – 2020
Information Systems Security Officer / Intelligence Analyst
T-Solutions, Inc.
- Administered a 2,000+ user enterprise environment with 100% availability across 200+ accounts, and led business continuity through multiple parallel disaster recovery scenarios.
-
2016 – 2021
Earlier career: Electronic Warfare, Program Management, and Doctrine
Warrant Technologies, Stratascorp, Prevailance
- Senior technical authority on security validation for classified naval combat systems; directed delivery of technical intelligence libraries and expanded production capacity 10x; developed doctrine across 12+ programs.
-
1996 – 2016
Chief Cryptologic Technician / Technical Leader
United States Navy
- 20-year career as an award-winning information security and operations leader across global deployments; managed cross-functional teams and multi-million-dollar system installations, including a $15M emerging technology integration.
04 Credentials
Active credentials, verified on Credly. Select a badge to see its verification page.
Security & risk
Cloud & infrastructure
Application & supply-chain security
AI & data
IT fundamentals
In progress
- Microsoft AZ-104 Azure Administrator
- Certified DevSecOps Professional (CDP), Practical DevSecOps
05 Education
Bachelor of Arts, Biblical & Theological Studies · Regent University