Gary Russell

Background

About Gary Russell

Deliver and Maintain key security platforms within Kimberly-Clark and provide security review and support to the business. SUBJECT MATTER EXPERT (SME) EXAMPLES: OKTA - Identity as a Service (IDaaS) solution managing 1 x Enterprise instance with users, 1 x B2B instance with Org2Org connection supporting users plus 3 x non-production instances. totalling over 800 applications listed within the application using industry the standards SAML, WS-FED and OIDC (Open ID Connect) for authentication as well as API Access Management for authorisation to API services using oAuth. Certificate Management Life-cycle - Built and manage K-C's Internal PKI along with HSM to protect the keys along with implementation of Venafi to manage and automate certificate installation for both internal and commercial certificates currently supporting certificates but will easily grow to within the next two years. Data Classification and Protection - Leveraging tools like "Azure Information Protection"(soon chaining to Microsoft Information Protection) to classify documents with the ability to also encrypt. Work with developers on data encryption methods to help protect the data at rest and also during transit and ensuring that they understand and keep to company polices PROGRAMMING SKILLS: Have written in a wide variety of languages (i.e. VB, VBScript, Java, C, C++, Lua, Python, PHP, Fortran) however currently focus on PowerShell as I can develop simple yet powerful tools very quickly using this service for example: 1. Collection and re-formatting of information from Active Directory, Cloud Apps (Using API calls to say OKTA) or looking at raw logs and then consolidating the information to provide reports or take actions 2. Perform complex queries on large amounts of data by leveraging pipes (so you don't need to read all the data into memory) and/or processing data fast by indexing data into ram (where it takes a lot of memory but extremely quick) 3. Automate emails out to end users which are user focused and html formatted providing good a precise information that is relevant to the individual instead of a generic email notice 4. Writing code on the fly to pinpoint specific data during an incident often beating the data scientists or other forensic analyst tools in analysing the same type of data occasionally also finding information that they missed.