Experience
20+ years: developer → architect → security lead → AI DevSecOps
Enterprise roles at Fortune 500 scale, run in parallel with founding and leading my own SaaS company since 2012.
AIDevSecOps Engineer / Product Owner — Dexian · Client: JM Family Enterprises
Part of the DevOps and development teams establishing enterprise AI, DevSecOps, and agentic development standards, designing and delivering the BA-QA Genie AI product under Mosswall Technologies, the innovation arm of JM Family — a $20+ billion diversified automotive leader and one of the largest privately held companies in the US.
- Define agentic workflows: how AI agents collaborate, reason, validate outputs, and integrate into enterprise SDLC processes.
- Engineer AI-driven, agent-assisted solutions in C# and React on Azure — task decomposition, tool-augmented reasoning, human-in-the-loop validation, secure autonomous execution.
- Standardize infrastructure with Azure Bicep (IaC); establish agent governance, coding standards, and security guardrails.
- Coach teams on effective, secure use of GitHub Copilot and AI coding agents.
Tech: C#, React, Azure, Azure Bicep, AI Agents, GitHub Copilot, GitHub Actions, CI/CD, DevSecOps
Founder & CTO — Simple Dealer Suite
Founded and lead a cloud-based SaaS company serving automotive, marine, motorcycle, and RV dealerships across the US, Canada, Europe, and Australia.
- Defined the product roadmap and drove expansion from a single tool to a 13-module platform — every prioritization and strategic decision.
- Directly manage customer relationships; translate dealer business problems into technical solutions for a non-technical customer base.
- Coordinate third-party integrations and vendor relationships; maintain platform reliability without a dedicated ops team.
- Scaled a live, revenue-generating product internationally for 13+ years while holding senior Fortune 500 roles.
Full Stack DevSecOps Lead / Architect — Chalex US · Client: Encore Global
Designed, built, and supported backend APIs for the Polaris platform used across the US and Canada for one of the world’s largest event-production companies.
- Angular, .NET, and SQL feature work, UI performance, and database performance improvements.
- Migrated CI/CD functionality from TeamCity to GitHub; added security checks to the pipeline for a seamless, secure build process.
- Diagnosed and resolved data issues caused by missing business rules and unhandled exceptions.
Tech: ASP.NET, C#, Entity Framework, SQL Server, GitHub, TeamCity, Jira, Asana
Senior AppSec Architect — CitiBank
Risk and governance for the Institutional Clients Group, across a portfolio of ~3,000 applications.
- Reviewed application security posture and triaged release requirements so changes did not introduce unmanaged risk.
- Security architect for CitiDirect — a critical application moving trillions of dollars a year: documented sprint/release changes, built threat models, and partnered with vulnerability assessment teams.
- Backdoor analysis: reviewed flagged files centrally to distinguish malicious backdoors from poor code or configuration.
- Advised on high-visibility changes including a new global mobile token second factor and an external IdP integration, surfacing attack-surface implications to senior management.
AppSec Red Team — CitiBank
One of an 8-member internal team performing white-box application security assessments on the firm’s highest-risk applications — manual testing that finds what dynamic scanning cannot.
- Threat matrices, attack-vector execution, and exploitable-findings reporting across Java, .NET, PHP, Python, mobile, DB2, Oracle, and MS SQL.
- Notable finds included unauthenticated file-upload-to-code-execution and second-order SQL injection reachable from the internet.
- Employee engagement ambassador for Cyber Security Services and regional champion for the Fort Lauderdale office.
DevOps Manager — SWI Group
Technical lead for a luxury-goods group operating WorldOfWatches.com, eWatches.com, TheWatchery.com, and SmartBargains.com.
- Led the IBM WebSphere Commerce migration and the 2015 WorldOfWatches relaunch; managed two vendor teams plus independent consultants.
- Led the flagship site redesign (2013) and the 500Friends loyalty integration.
- Built integrations between warehouse management, Great Plains accounting, and eCommerce; established source control (VSS → GitHub) and automated deployment.
- Technical lead on the colo-to-private-cloud infrastructure migration.
Application Architect — 561 Media
Custom web software for startups and SMBs, including Memory Rain (memorial sites), Daily Dimes (debit-card coupon service with inventory and order tracking), and GameLand (supervised online games for children).
Tech: ASP.NET, C#, VB.NET, LINQ, ADO.NET, SQL Server 2008/2012, TFS
Senior Programmer Analyst — Walmart
People Systems (HR) team supporting payroll for ~1.4M employees.
- Tech Lead for PennTax — design, programming, and implementation of all .NET applications in the payroll tax calculation process after Pennsylvania changed its taxing method.
- Tech lead for the MyWalmart.com test environment: servers, load balancers, name servers, and firewall rules for Lab, Cert, and Prod.
- Led the Diversity Project team (6 offshore, 4 onshore resources) and its planning and deployment.
Earlier roles — 2003 to 2011
- Senior Programmer / Team Lead / Architect — Deal Source: inventory processing system, coupon engine, eBay-certified integration (Jun 2008), CMS, and data synchronization for automotive dealerships; led a team of 6.
- Senior Developer — e-Builder (Aug 2006 – Aug 2007): construction project-management SaaS; ASP.NET migration, .NET Remoting file-transfer product competing with Autodesk Buzzsaw, DWG ActiveX controls.
- Senior Developer — All-In Interactive (Jan – Aug 2006): DigiMix interactive media suite for cruise ships; “Play NOW” emergency/event override for onboard ITV.
- Developer — FirstNLC (2004 – 2006): mortgage systems, Chase servicing integration, MERS eRamp integration, VB6-to-web modernization.
- Developer — OxiDev Interactive (2003 – 2004) & Express Consolidation (2003): CMS/eCommerce engines and the “Power Clock” time-card system.
Technical skills
Languages & frameworks: C#JavaVB.NETASP.NETPHPPythonJavaScript / jQueryReactAngularPowerShellJSP / ColdFusion
Cloud & DevOps: AzureAWSAzure Bicep / IaCGitHub Actions / CI-CDTeamCityIIS / Tomcat / ApacheVMware vSphereLoad balancers & firewalls
Security: Threat modelingOWASP / SSDLCPenetration testingSecure code reviewDevSecOpsAI agent governanceGitHub Copilot
Data & platforms: MS SQL ServerMySQLOracleDB2RabbitMQ / JMSELKIBM WebSphere CommercenopCommerce
