Cloud Native Security Consultant
2020 - PRESENTFantail Consulting- Developed end-to-end IoT solutions from designing circuit boards to embedded Python, device operating system management, cloud connectivity, and Azure IoT Hub management. Utilized Raspberry Pi, balenaCloud, and 4G IoT networks.
- Helped small businesses move legacy software into containers, streamlining deployment, update processes, and database management through automation.
- Migrated on-premise infrastructure to the cloud, from moving apps to containers in the cloud/serverless to migrating email servers to G Suite/Microsoft 365/ProtonMail.
- Developed custom dashboards to integrate multiple systems, providing a bespoke integration point, utilizing Python, AWS Lambda, and DynamoDB/Amazon RDS.
- Consulted with small organizations on raising their security posture with minimal effort. This included analysis of risks and workshops with staff on basics (e.g., MFA, etc.) to secure development practices and infrastructure security.
Technologies: AWS, Azure, Azure IoT Hub, Auth0, Web Security, balenaCloud, PyCharm, Content Delivery Networks (CDN), Cloud Security, Web Development, GitHub, Python 3, Python 2, AWS CloudFormation, Web App Security, Django, Bash, AWS S3, DevOps, Continuous Delivery (CD), Network Security, AWS Lambda, AWS CloudWatch, Kubernetes, Linux, System Administration, Cybersecurity, Amazon EKSSenior Cloud Security Engineer
2021 - 2022Permiso Security- Improved CI/CD processes for deploying code and infrastructure, including importing resources into Terraform, automating manual deployment steps and checks, improving pipeline security and speed, and reducing errors.
- Improved AWS environment security, cost, and toil by improving management automation, making IAM resources and networking more granular and locking them down. Implemented VPC endpoints, significantly reducing NAT gateway cost.
- Improved incident response and post-mortem processes, introducing more structure to the process and making it more user-friendly for the team to engage with the process.
- Improved logging, monitoring, and alerting by implementing Grafana Cloud dashboards and alerting and Loki log collection. Unified logging output formats to allow easier searching and aggregation of logs.
- Advised the product development team on how their software might be used in a Security Operations environment, what workflows for different security roles look like, and how they can streamline their application for these workflows.
Technologies: AWS, AWS Lambda, AWS API Gateway, API Gateways, Terraform, Web Security, Cloud Security, DevOps, GitHub, Terraform Cloud, Security, Amazon Web Services (AWS), AWS IAM, AWS S3, Continuous Delivery (CD), Network Security, Jira, AWS CloudWatch, JavaScript, PostgreSQL, AWS DynamoDB, Elasticsearch, Amazon Virtual Private Cloud (VPC), Continuous Integration (CI), DevSecOps, Grafana, CI/CD Pipelines, Web Development, Content Delivery Networks (CDN), AWS CloudFormation, Web App Security, Bash, Linux, System Administration, CybersecuritySecurity Consultant
2020 - 2021Environmental Science and Research Ltd- Deployed and supported Azure-managed Kubernetes cluster using Azure DevOps, Terraform, and Helm for infrastructure as code deployed by automated pipeline.
- Managed and improved Azure environment architecture and security, implementing various Azure security features and reducing waste and cost.
- Supported development teams in building out CI/CD pipelines to deploy apps with automation, including implementing auto-scaling agent pools and per-pipeline service principle-based authentication and improving secrets management.
- Sole technical advisor on a multi-agency board to appoint vCISO; supported the process from the board's inception to the selection and onboarding of vCISO.
- Assessed organizational security maturity against NIST and PSR. Implemented a program of work to uplift organizational security maturity.
- Managed the external security resource, including scoping and scheduling security assessments for systems, overseeing the resulting work items, and working with development teams to understand and address underlying systemic issues.
Technologies: Azure, Azure Kubernetes Service (AKS), Kubernetes, Palo Alto Networks, Docker, ShinyProxy, Helm, Azure DevOps, Auth0, CI/CD Pipelines, Security, Python 3, DevOps, IT Security, Network Security, PostgreSQL 10.1, Cloud Security, Terraform, PostgreSQL, Web Security, Web Application Firewall (WAF), Web Development, GitHub, Web App Security, SecOps, Bash, Continuous Delivery (CD), Linux, System Administration, CybersecurityPlatform Engineer (Contract)
2020 - 2020Westpac New Zealand, Limited- Migrated Java applications from legacy infrastructure to a Kubernetes environment.
- Implemented visibility and monitoring via metrics to Prometheus and Grafana and logs to the Elasticsearch cluster.
- Improved the developer experience by prebuilding containers for local development and maintenance for legacy Java apps.
Technologies: Elasticsearch, Grafana, Prometheus, Jenkins, Kubernetes, Security, DevOps, IT Security, CI/CD Pipelines, ELK (Elastic Stack), Helm, DevSecOps, Continuous Integration (CI), Cloud Security, Web Development, Web Security, Bash, Continuous Delivery (CD), LinuxSecurity Engineer
2015 - 2020Xero- Contributed to Netflix's open-source tool—Security Monkey (now unfortunately discontinued) by implementing RBAC across the front end and back end.
- Built a fully automated CI/CD pipeline that deployed applications into AWS ECS via AWS CodePipeline and CodeBuild.
- Implemented auditing and compliance automation across a fleet of around 100 AWS accounts with Lambda, cross-account IAM roles.
- Consulted with product teams on secure, best practices and cost savings in the AWS architecture.
- Validated platform and application-level security issues—command injection, cache poisoning, token misuse, server-side request forgery (SSRF), domain hijacking, and more.
- Led the development of DevSecOps practice at Xero, implementing various automated tools into the development pipeline to give security and developers greater confidence in the security of their applications before deploying.
Technologies: Amazon Web Services (AWS), Jenkins, Python, Docker, AWS, AWS Cloud Architecture, Security, Python 3, DevOps, AWS DynamoDB, IT Security, CI/CD Pipelines, Xero API, DevSecOps, PagerDuty, Slack, Continuous Integration (CI), Jenkins Pipeline, Amazon Virtual Private Cloud (VPC), AWS ECS, Xero, Network Security, PostgreSQL 10.1, Cloud Security, PostgreSQL, JavaScript, Web Security, Web Application Firewall (WAF), Content Delivery Networks (CDN), Web Development, API Gateways, AWS API Gateway, GitHub, Python 2, AWS CloudFormation, Web App Security, SecOps, Django, Bash, AWS S3, Continuous Delivery (CD), Jira, AWS Lambda, AWS CloudWatch, Linux, System Administration, Cybersecurity