Experience

20+ years: developer → architect → security lead → AI DevSecOps

Enterprise roles at Fortune 500 scale, run in parallel with founding and leading my own SaaS company since 2012.

AIDevSecOps Engineer / Product Owner — Dexian · Client: JM Family Enterprises

Hybrid · Aug 2023 — Present

Part of the DevOps and development teams establishing enterprise AI, DevSecOps, and agentic development standards, designing and delivering the BA-QA Genie AI product under Mosswall Technologies, the innovation arm of JM Family — a $20+ billion diversified automotive leader and one of the largest privately held companies in the US.

  • Define agentic workflows: how AI agents collaborate, reason, validate outputs, and integrate into enterprise SDLC processes.
  • Engineer AI-driven, agent-assisted solutions in C# and React on Azure — task decomposition, tool-augmented reasoning, human-in-the-loop validation, secure autonomous execution.
  • Standardize infrastructure with Azure Bicep (IaC); establish agent governance, coding standards, and security guardrails.
  • Coach teams on effective, secure use of GitHub Copilot and AI coding agents.

Tech: C#, React, Azure, Azure Bicep, AI Agents, GitHub Copilot, GitHub Actions, CI/CD, DevSecOps

Founder & CTO — Simple Dealer Suite

Jan 2012 — Present

Founded and lead a cloud-based SaaS company serving automotive, marine, motorcycle, and RV dealerships across the US, Canada, Europe, and Australia.

  • Defined the product roadmap and drove expansion from a single tool to a 13-module platform — every prioritization and strategic decision.
  • Directly manage customer relationships; translate dealer business problems into technical solutions for a non-technical customer base.
  • Coordinate third-party integrations and vendor relationships; maintain platform reliability without a dedicated ops team.
  • Scaled a live, revenue-generating product internationally for 13+ years while holding senior Fortune 500 roles.

Full Stack DevSecOps Lead / Architect — Chalex US · Client: Encore Global

Remote · Jun 2021 — Aug 2023

Designed, built, and supported backend APIs for the Polaris platform used across the US and Canada for one of the world’s largest event-production companies.

  • Angular, .NET, and SQL feature work, UI performance, and database performance improvements.
  • Migrated CI/CD functionality from TeamCity to GitHub; added security checks to the pipeline for a seamless, secure build process.
  • Diagnosed and resolved data issues caused by missing business rules and unhandled exceptions.

Tech: ASP.NET, C#, Entity Framework, SQL Server, GitHub, TeamCity, Jira, Asana

Senior AppSec Architect — CitiBank

Fort Lauderdale, FL · Jul 2020 — Jun 2021

Risk and governance for the Institutional Clients Group, across a portfolio of ~3,000 applications.

  • Reviewed application security posture and triaged release requirements so changes did not introduce unmanaged risk.
  • Security architect for CitiDirect — a critical application moving trillions of dollars a year: documented sprint/release changes, built threat models, and partnered with vulnerability assessment teams.
  • Backdoor analysis: reviewed flagged files centrally to distinguish malicious backdoors from poor code or configuration.
  • Advised on high-visibility changes including a new global mobile token second factor and an external IdP integration, surfacing attack-surface implications to senior management.

AppSec Red Team — CitiBank

Fort Lauderdale, FL · May 2016 — Jul 2020

One of an 8-member internal team performing white-box application security assessments on the firm’s highest-risk applications — manual testing that finds what dynamic scanning cannot.

  • Threat matrices, attack-vector execution, and exploitable-findings reporting across Java, .NET, PHP, Python, mobile, DB2, Oracle, and MS SQL.
  • Notable finds included unauthenticated file-upload-to-code-execution and second-order SQL injection reachable from the internet.
  • Employee engagement ambassador for Cyber Security Services and regional champion for the Fort Lauderdale office.

DevOps Manager — SWI Group

Aventura, FL · Jun 2013 — May 2016

Technical lead for a luxury-goods group operating WorldOfWatches.com, eWatches.com, TheWatchery.com, and SmartBargains.com.

  • Led the IBM WebSphere Commerce migration and the 2015 WorldOfWatches relaunch; managed two vendor teams plus independent consultants.
  • Led the flagship site redesign (2013) and the 500Friends loyalty integration.
  • Built integrations between warehouse management, Great Plains accounting, and eCommerce; established source control (VSS → GitHub) and automated deployment.
  • Technical lead on the colo-to-private-cloud infrastructure migration.

Application Architect — 561 Media

Boca Raton, FL · Jun 2012 — Jun 2013

Custom web software for startups and SMBs, including Memory Rain (memorial sites), Daily Dimes (debit-card coupon service with inventory and order tracking), and GameLand (supervised online games for children).

Tech: ASP.NET, C#, VB.NET, LINQ, ADO.NET, SQL Server 2008/2012, TFS

Senior Programmer Analyst — Walmart

Bentonville, AR · Feb 2011 — Jun 2012

People Systems (HR) team supporting payroll for ~1.4M employees.

  • Tech Lead for PennTax — design, programming, and implementation of all .NET applications in the payroll tax calculation process after Pennsylvania changed its taxing method.
  • Tech lead for the MyWalmart.com test environment: servers, load balancers, name servers, and firewall rules for Lab, Cert, and Prod.
  • Led the Diversity Project team (6 offshore, 4 onshore resources) and its planning and deployment.

Earlier roles — 2003 to 2011

Florida & remote

  • Senior Programmer / Team Lead / Architect — Deal Source: inventory processing system, coupon engine, eBay-certified integration (Jun 2008), CMS, and data synchronization for automotive dealerships; led a team of 6.
  • Senior Developer — e-Builder (Aug 2006 – Aug 2007): construction project-management SaaS; ASP.NET migration, .NET Remoting file-transfer product competing with Autodesk Buzzsaw, DWG ActiveX controls.
  • Senior Developer — All-In Interactive (Jan – Aug 2006): DigiMix interactive media suite for cruise ships; “Play NOW” emergency/event override for onboard ITV.
  • Developer — FirstNLC (2004 – 2006): mortgage systems, Chase servicing integration, MERS eRamp integration, VB6-to-web modernization.
  • Developer — OxiDev Interactive (2003 – 2004) & Express Consolidation (2003): CMS/eCommerce engines and the “Power Clock” time-card system.

Technical skills

Languages & frameworks: C#JavaVB.NETASP.NETPHPPythonJavaScript / jQueryReactAngularPowerShellJSP / ColdFusion

Cloud & DevOps: AzureAWSAzure Bicep / IaCGitHub Actions / CI-CDTeamCityIIS / Tomcat / ApacheVMware vSphereLoad balancers & firewalls

Security: Threat modelingOWASP / SSDLCPenetration testingSecure code reviewDevSecOpsAI agent governanceGitHub Copilot

Data & platforms: MS SQL ServerMySQLOracleDB2RabbitMQ / JMSELKIBM WebSphere CommercenopCommerce

Scroll to Top