Experience
GRC Engineer
State of Michigan
August 2023 – Present
- Administered, configured, and maintained a SaaS GRC platform across dev, QA, and production for a highly regulated State government program — supporting RBAC, least-privilege access, and change-controlled releases via regression testing, configuration validation, rollback strategies, and RFC-based change management.
- Automated the State's security accreditation workflow, reducing manual effort by 60% by automating evidence collection, control review routing, and continuous monitoring aligned to NIST RMF and NIST 800-53 Rev. 5.
- Built and maintained control-mapping crosswalks from NIST 800-53 to CJIS v6.0, IRS 1075, PCI (SAQ A, SAQ A-EP), and ARC-AMPE, including transforming policy PDFs into structured, ingestible records for the GRC platform.
- Developed Python API modules and automation scripts to import/update controls, synchronize CMDB, vulnerability, and audit-evidence data, and provision granular per-record user access (RBAC / least-privilege) — integrated into Azure DevOps pipelines for versioned, auditable deployment.
- Generated application risk assessments categorizing systems as Low, Moderate, or High and determining applicable frameworks; authored SOPs, runbooks, and job aids for SSPs, POA&Ms, and data classification.
- Built a Python/Playwright automation and a Flask-based migration-validation app to verify tables, fields, workflows, and rules moved correctly across GRC instances — replacing manual stare-and-compare review.
Adjunct Faculty, Instructor
Lansing Community College, MI
June 2024 – Present
- Instructor for AWS Cloud Foundations, AWS Solutions Architect Associate, Python, and Linux Operating Systems.
Education
Master's, Electrical Engineering
Cal Poly Pomona · 2023
Bachelor's, Electrical Engineering
Texas A&M · 2020