Connor Maddox

Remote

• Own security architecture for an enterprise on-prem→cloud migration across AWS and Azure, embedding security-by-design as IT engineering re-platforms 280+ applications.
• Packaged the migration’s guardrails — trust boundaries, Zero Trust access, hardened baselines — as reusable reference patterns, so teams provision compliant workloads without per-app security review.
• Codified FFIEC / NIST CSF expectations into concrete platform standards (logging, monitoring, identity, access, config baselines), reducing per-workload security rework.
• Embedded control validation and audit-evidence capture into design reviews and CI/CD pipelines, cutting audit findings ~20% across migration waves.

Remote

• Architected and validated the bank’s cloud and on-prem control set against NIST CSF, CSA CCM, and FFIEC — the baseline later inherited by migrated workloads.
• Operationalized cloud security posture management (CSPM/CNAPP via Wiz), surfacing and driving down misconfigurations across AWS and Azure.
• Automated control validation and audit-evidence collection in Python, cutting manual audit prep ~40% and improving consistency.
• Led architecture reviews for cloud adoption, digital banking, and payments — hands-on guidance on WAF, firewall, identity integration, logging, and encryption.

Remote

• Designed and reviewed security architectures across business lines to NIST SP 800-53.
• Led security architecture for migrating credit-card payment processing to a cloud platform — application security, network segmentation, data protection, and PCI DSS scope.
• Delivered risk-based guidance balancing regulatory requirements against delivery timelines.

Charlotte, NC

• Owned enterprise security-architecture standards and review practices across 800+ applications, leading a team of nine architects.
• Drove a new endpoint security strategy end-to-end (evaluation → selection → deployment), improving detection coverage while reducing cost ~30%.
• Automated distribution of security guidance and reference patterns so a nine-person team could advise the entire $550B bank without becoming the bottleneck.

New York, NY

• Designed and deployed a global SOAR platform, automating triage and response and cutting SOC analyst workload ~90%.
• Ran market evaluation and integration of SIEM, endpoint, and gateway tooling aligned to NIST and ISO.

Remote

• Designed global SD-WAN and Zero Trust network architecture for a worldwide consumer brand, bringing its global payment estate into PCI DSS scope.
• Led security solution design across 14 major global enterprise accounts, aligning architecture and controls to each client’s business and compliance objectives.

New York, NY

• Redesigned enterprise vulnerability management, expanding coverage while cutting effort ~30%.
• Realigned security products and processes to NIST CSF, establishing a stronger architecture baseline for program maturity.

New York, NY

• Designed enterprise PKI migration ensuring trust continuity, minimal downtime, and clean certificate-lifecycle management.
• Led Tier 3 engineering and hands-on vulnerability assessment and remediation in client environments.
• Shifted client engagements to security-first delivery, catching issues pre-deployment and cutting remediation cost ~80%.

Overhauled the network core (switches, firewalls), deployed a fiber-channel three-tier SAN, and implemented defense-in-depth (~$145K/year saved); rolled out a 1:1 student iPad program and built an automated Minecraft-for-Education cluster with a custom teacher-facing web UI.

Held a second-level management role (manager of managers, multiple teams) as a Staff Sergeant (E-5/NCO); directed secure network operations and built mission-critical software; >$1M combined annual savings; former TS/SCI clearance (expired).