Enterprise Security Blueprint

Overview

Designed and authored a multi-year enterprise security blueprint spanning identity, cloud, data, and applications. Created reference models, north-star diagrams, and migration playbooks to guide engineering, product, and infrastructure teams. Embedded architectural guardrails into cloud and DevSecOps practices to standardize secure design across all lines of business and acquired entities.

Role

Director of Product Security serving as primary author and executive sponsor. Blueprint development led by me. Implementation coordinated through DevSecOps and Product Engineering leaders.

Impact

Provided a single, authoritative security design vision that de-risked technology sprawl and guided IT investment. Enabled faster onboarding of acquisitions, standardized controls across hybrid and multi-cloud environments, and gave executives a strategic lens for sequencing security initiatives.

Technologies, Frameworks, and Artifacts

• OWASP SAMM
• NIST CSF and CIS Controls
• Cloud reference architectures (AWS, GCP, Azure)