Edward Young

Experience

• Nlets
• I.S. Auditor
• August 2022 - December 2023
• Responsibilities
• Engage with strategic partners to complete CJIS compliance audits utilizing control systems based on NIST 800-53.
• Engage partners to complete historical transaction audits where I would review photos, citations, and historical transactions to validate proper usage.
• Create documentation and workflows for ensuring all audit controls are completed.
• Accomplishments
• Created multiple scripts to assist in gathering all required evidence for audits of Windows and Linux systems (Ubuntu and RHEL primarily).
• Created high level runbook to build towards audit automation and modernizing to GRCaC (Governance Risk and Compliance as Code)
• Wrote and documented CJIS specific SQL query library to audit AWS and Azure cloud environments utilizing steampipe.io

• Sigfig Wealth Mgmt
• Site Operations Engineer
• November 2020 - August 2022
• Responsibilities
• Provide incident response and coordination with partners and internal teams to mitigate and resolve incidents.
• Primary JIRA administrator (Create, maintain, and update workflows)
• Actively assist DevOps in Puppet management and VMware systems management, as well as, integrate new runbooks and documentation for triaging incidents.
• Accomplishments
• Created script automations to reduce manual burdens with low level incident management and response.
• Built and migrated JIRA instance from on-premise to cloud within 6 months. Built numerous workflow modifications to allow smooth transition.
• Wrote multiple puppet modules utilizing heiradata and r10k structure that integrated script automations to mitigate multiple low priority alerts.

• Ygomi/RoadDB
• Linux Systems Engineer
• November 2017 - November 2020
• Responsibilities
• Manage and maintain roughly 300 Linux systems via Puppet, Openstack Director, and Satellite.
• Monitor and patch servers utilizing WhatsUp Gold, Satellite, Puppet Bolt, and Icinga/Nagios.
• Manage and maintain roughly 20 Windows servers, including Exchange and Active Directory.
• Accomplishments
• Created Puppet configuration management system and built multiple modules to ensure PCI-DSS compliance on 60+ call center and remote desktops.
• Wrote initialization script to use when building new or replacement call center agent machines.
• Assisted on buildout and management of RHEL-based Openstack private cloud.