Brian Watts

Background

About Brian Watts

Advancing technology securely is my passion. I thrive on bringing ideas to life, ensuring they transition smoothly from concept to secure implementation. My strength lies in exceptional collaboration and communication, making teamwork and clarity essential to my approach. I am highly regarded for delivering reliable and manageable security solutions at scale, incorporating the needs of users, app developers, Identity and Access Managers, Public Cloud Operators (Zero Trust), Data Managers (Integrity, Privacy/Cryptography, Governance), Cybersecurity teams (Risk Identification & Management), IT Governance Boards (NIST based policies & standards), Compliance Groups (controls, controls testing, evidence, reporting). New Product Implementation Oversight: Enabled new product platform through Public Cloud Adoption leading to re-platforming of 360+ existing clients and expansion of an additional 12 – Established a new Azure Landing Zone Control Plane: Defined Security Principles of Operation, Instituted detailed Security Service Standards for Entra ID, RBAC model, Security Policies, Sentinel, and Key Vault Enterprise Architecture: Managed Enterprise Architecture Review Board. Developed Architecture Review Policy and IT Standards. Ensured 250+ applications/year align with IT Strategies, Direction and cost models IT Strategy: Led data plane strategies for security controls for “lift and shift” application re-platforming, cloud native security practices, secure Snowflake and Databricks integration. Refactored product Identity and Access Management Model with phased migration of identities from LDAP/Open Token to Entra ID/OIDC/SailPoint Organized Enterprise Architecture Review Board and conducted application architecture reviews Incorporated Static Application Security Testing, Dynamic Application Security Testing into SDLC/DEVOPS for 700+ applications Effected Single Sign-On using SAML 2.0 for employees and key customer scenarios, up to customer identities Created an identity service for web tier applications by aggregating employees’ accounts from 10 Active Directory Domains Normalized web tier authentication including Multi-Factor for employees and customers Introduced Internet Connectivity including geographically disparate, fire walled access and egress points with Intrusion Detection/Prevention and Security Information and Event Management platform Skills Enterprise Architecture Security Architecture IAM - Active Dir, Entra ID, AWS IAM, LDAP, Multi-Factor AuthN, AuthZ & SSO - On Prem, Cloud, API, SAML 2.0, OAuth, OIDC