Whether it's Leading, Automating, Administration, Designing or Developing, my roles have brought new and exciting challenges at every organization I've been a part of.
PROFESSIONAL SUMMARY
Senior cybersecurity and identity engineering lead with 18+ years of experience designing, integrating, deploying, and operating enterprise-grade identity, access, cloud, and data protection solutions.
Deep expertise in Identity Governance and Administration (IGA), Privileged Access Management (PAM), directories, identity lifecycle automation, access governance, and regulated healthcare environments.
Proven ability to translate business and compliance requirements into target-state architectures; lead cross-functional engineering teams and client-facing workstreams; deliver production solutions using
Java, Python, PowerShell, REST/SOAP APIs, SQL, AWS, Azure, Git, and SailPoint; and communicate effectively with technical teams, executives, vendors, and customers. Recognized for mentoring engineers,
developing reusable automation, improving delivery quality, and resolving complex production issues.
CORE COMPETENCIES
- Distributed Systems Design
- Solution Architecture
- Identity & Access Governance
- REST APIs & Systems Integration
- System Reliability & Observability
- Client / Stakeholder Delivery
- Security Engineering & Access Control Models
- Cloud Engineering (AWS / Azure)
- Automation & Tooling (Java, Python, PowerShell, SQL)
- Engineering Leadership & Mentoring
TECHNICAL EXPERTISE
- Identity & Security: SailPoint IdentityIQ, CyberArk, Microsoft Entra ID, Active Directory, O365, Oracle Identity Management, NetIQ, SAML, LDAP, Kerberos, access certification, lifecycle management, provisioning, deprovisioning, vulnerability management
- Engineering: Java, BeanShell, Python, PowerShell, SQL, XML, C#, Go, Bash, JavaScript, AngularJS, Vue.js, HTML5, REST and SOAP APIs, microservice-oriented integrations
- Cloud & Platforms: AWS, Azure, EC2, S3, RDS, Elastic Beanstalk, CloudFront, Azure App Service, Windows Server, Linux, Tomcat, JBoss, IIS, SQL Server
- Delivery & Operations: Git, Agile delivery, change management, incident and root-cause analysis, disaster recovery, SOPs, technical demonstrations, proofs of concept, reporting, SSIS, SSRS, Splunk
- Development: Develop React / Vue.js / AlpineJs demo and lightweight applications using agentic coding platforms such as Copilot and Claude Code
- Analysis: Used Splunk to support identity analytics, relationship analysis, and access-risk investigations
PROFESSIONAL EXPERIENCE
Sutter Health – Sacramento, CA
Cybersecurity Engineer IV | Dec 2022 – Present
- Lead an identity engineering team of internal engineers and external consultants responsible for enterprise identity governance, access lifecycle automation, privileged access, platform reliability, and secure integrations supporting more than 100,000 employees.
- Translate business, security, compliance, and operational requirements into scalable target-state solutions spanning SailPoint IdentityIQ, Microsoft Entra ID, Active Directory, Microsoft 365, CyberArk, Workday, ServiceNow, CredentialStream, and VNDLY
- Design, build, test, deploy, and troubleshoot production-grade identity workflows and integrations using Java, BeanShell, PowerShell, XML, SQL, REST APIs, Git, AngularJS, and SailPoint platform services
- Led IAM transition planning and workflow automation for a hospital merger and acquisition, migrating 100% of onboarding and offboarding processes to the enterprise SailPoint platform
- Provide technical architecture leadership, capacity planning, solution reviews, effort prioritization, delivery guidance, and production support across concurrent identity initiatives
- Partner with Security Governance to update access policies and PAM standards aligned with organizational requirements and applicable NIST SP 800-53, HIPAA, and HITECH controls
- Operate and improve the IAM technology stack, including redundant SQL databases, Java/Tomcat task and web servers, proxy services, IIS, FTPS, SMB, and supporting Windows infrastructure
- Lead root-cause analysis, vulnerability remediation, change review, disaster recovery planning, documentation, and continuous improvement for identity applications and servers
- Mentor junior engineers, conduct platform training, provide engineering standards and reusable guidance, participate in hiring panels, and transfer knowledge to operations and external users
- Produce operational and compliance reporting using SQL, SSIS, SSRS, and Splunk to improve monitoring, auditability, and issue response
- Led an internal AI-enabled identity development using Microsoft GitHub CoPilot resulting in 60% reduced time from concept to production
- Implemented CI/CD pipeline for identity code delivery, reducing deployment time by 30%
Banner Health – Phoenix, AZ
Cybersecurity Engineer III | Nov 2021 – Dec 2022
- Engineered identity lifecycle, application access, and audit solutions for more than 60,000 employees, contractors, and vendors across a multi-state healthcare organization
- Built and maintained production integrations and automation using Java, BeanShell, PowerShell, AngularJS, REST APIs, Git, and Agile delivery practices
- Translated technical and business requirements into identity solutions and presented processes, risks, recommendations, and best practices to technical and non-technical stakeholders
- Integrated on-premises and cloud platforms with enterprise identity services and automated Microsoft Entra ID and Active Directory administration through PowerShell
- Upgraded, migrated, secured, and supported Windows servers and identity platform components; maintained SOPs and engineering documentation for process, code, and tooling changes
Tanium – Miami, FL
Technical Account Manager | Aug 2019 – Oct 2021
- Owned technical relationships and solution delivery for enterprise customers managing approximately 5,000 to 500,000 endpoints, partnering with stakeholders from engineering teams through the C-suite
- Led demonstrations, proofs of concept, technical workshops, deployment planning, upgrades, troubleshooting, and adoption activities across compliance, vulnerability management, endpoint detection and response, sensitive data discovery, patching, asset management, and cloud migration use cases
- Served as subject-matter expert for compliance, vulnerability scanning, and sensitive data discovery; translated customer requirements into configured solutions and custom automation
- Performed security posture and risk assessments to identify unmanaged devices, unpatched systems, end-of-life software, vulnerabilities, sensitive-data exposure, and compliance gaps
- Developed custom compliance scans and remediation scripts using Python, PowerShell, Bash, VBS, and product APIs.
- Guided customers through on-premises-to-cloud transitions, including strategy, authentication integration using SAML, implementation changes, and operational readiness
- Communicated solution value, risks, delivery status, and recommendations to technical leaders, business stakeholders, and executive audiences
Dignity Health – Phoenix, AZ
IT Cybersecurity Analyst III | Nov 2017 – Aug 2019
- Created, maintained, and audited identities and access for more than 90,000 employees across 17 states in a regulated healthcare environment
- Designed PowerShell automation using REST/SOAP APIs and LDAP to create, manage, and remove applications and identity resources, eliminating approximately 4,800 hours of manual effort
- Built data-integrity controls and self-contained HTML5/AngularJS reporting to reconcile identity data across enterprise systems and the identity vault
- Partnered with security engineering, IAM engineering, network engineering, and information security teams on incident investigation and root-cause analysis
- Maintained SOPs and technical documentation to support repeatable operations, audit readiness, and controlled process and code changes
Florida International University – Miami, FL
IT Associate Director | Jan 2016 – Dec 2017
- Led technology strategy, lifecycle planning, project delivery, staffing, budgeting, application development, infrastructure improvements, security controls, and cloud adoption for a university college
- Managed cross-functional initiatives involving customers, service desk, infrastructure, databases, security, vendors, and business-system owners; translated requirements into delivered applications and infrastructure solutions
- Oversaw the design and implementation of SharePoint and ServiceNow solutions, identity and access administration, data-management controls, and technology supporting HIPAA- and PII-regulated functions
- Led a multi-university transition initiative to bring a petabyte-scale hybrid AWS/Azure object-storage platform in-house
- Developed applications and automation using AngularJS, Python, C#, shell scripting, SharePoint APIs, AWS, and Azure; reduced project startup overhead by 25% through a reusable application template
- Introduced Agile project-management and Git-based version-control tooling to improve delivery visibility, engineering discipline, and collaboration
- Interviewed, hired, mentored, and trained staff while advising leadership on technology strategy and expenditures
University of Miami – Miami, FL
System Administrator | Nov 2013 – Jan 2016
- Architected and secured AWS/Azure-hosted web and medical systems; managed Oracle Identity Management; automated Linux/Windows administration; implemented SSSD, Kerberos, LDAP, SaltStack, monitoring, logging, disaster recovery, and HIPAA-aligned infrastructure
IBM – Poughkeepsie, NY
IT Specialist – Linux/AIX Administration | May 2012 – Oct 2013
- Provisioned and supported AIX and Red Hat systems, IBM Power/VIOS infrastructure, monitoring, automation, asset management, and interdepartmental web applications
Florida International University - Miami, FL
IT Coordinator Computer Applications | Sept 2006 – Apr 2012
- Managed Windows, Linux, macOS, VMware, SharePoint, Active Directory, software deployment, CMS platforms, computer labs, and custom application development
EDUCATION & CERTIFICATIONS
M.S. Management Information Systems - Florida International University
B.S. Information Technology - Florida International University (Minor: Business Administration)
Certifications
- AWS Security Specialty (2024) - Current
- AWS Solutions Architect (2018) – Previously Held
- AWS Developer (2017) – Previously Held
- AWS SysOps (2017) – Previously Held
- CIAM (Certified Identity and Access Manager)- Current
- CIGE (Certified Identity Governance Expert)- Current
- Network+ - Current | Security+ - Current
TECHNICAL SKILLS
Languages: Java, Python, PowerShell, SQL, Go
Concepts: Distributed systems, eventual consistency, system reliability, access control
Infrastructure: Linux, Windows, cloud platforms (AWS, Azure)
Tools: REST APIs, Git, monitoring/logging systems
Copyright © 2018 Your Company Name | Designed by Template Mo