Christian Reguerin

• ■ Security Mentor and Instructor
• ■ Infrastructure automation using Microservices and Serverless technologies in support of Machine Learning (ML)-based software/infrastructure services on multi-cloud/hybrid environments.
• ■ Hybrid and Multi-Cloud Security Architecture/Engineering and Security Control Implementation automation following NIST 800-53 and blending ConMon practices delivered through Agile and DevSecOps methodologies.
• ■ Small Business and Start-up growth and product development using Agile methodologies.

Johns Hopkins University

Johns Hopkins University

Montgomery College

Founder/Chief Engineer

Founder and Chief Engineer of a cybersecurity engineering, training, and C-level program consulting firm dedicated to helping Federal agency executives digitally transform their enterprises — focusing on Quantum Networking, Multi-Cloud and Platform Engineering systems delivery in support of AI-Native cybersecurity and AI Governance & Assurance (NIST AI RMF), IT Security Automation, Zero Trust strategy and implementation, and Application Security Testing.

Services are available as a C2C or 1099.

Adjunct Professor

Designed and implemented hands-on, project-based Cloud and Cybersecurity curricula covering technologies that position students to succeed in real-world industry and Government contracts using cloud-native solutions. Prepared students to pass cloud and cybersecurity certification exams (AWS, Azure, ISC2, CompTIA, etc.).

Chief Security Engineer / Cloud Security SME

⇒ Lead a team of Cybersecurity Engineering Subject Matter Experts (SMEs) supporting DoD and IC missions, setting operating principles that maximize alignment across the company, team, and clients while delivering on client sites. Key areas of responsibility:

• ■ Executive Leadership: Provide executive leadership, guidance, and vision for the Cloud Security Engineering capability, ensuring hands-on systems delivery to DoD/IC client sites with unique DevSecOps/Cloud Engineering, API Management, and Microservices requirements. Apply security engineering rigor to disruptive technologies, fostering cohesion between development and operations teams to advance customer mission goals.
• ■ Business Development: Crafts technical and cost volumes in response to RFI/RFP/RFQ requests.
• ■ Reporting structures: Directly manage a large team of ~40 systems/software/security engineers, software testers, and data scientists dedicated to the Invictus Cyber Security Engineering on-site delivery practice.
• ■ Zero Trust Architecture: Lead a team of Security Engineers shaping the adoption of Zero Trust Architecture and security policy for DoD/IC cloud environments (IaaS, PaaS, SaaS) across U, S, and TS domains. Provide expertise in Identity and Access Management using a cloud-first approach with Azure AD/Entra ID, Okta, and leveraging existing legacy technologies such as RadiantLogic and Sailpoint.
• ■ New Cloud Service Adoption: Led a team of Cloud Security Engineers shaping Cyber Security Engineering and security policy for DoD/IC cloud environments across multiple classification domains. Provide expertise in cloud security engineering and support of RMF A&A activities for new cloud services, providers, and applications. Train staff on cloud engineering and security best practices to enhance DoD/IC client security posture.
• ■ Cloud Service Provider (CSP) Hardening: Lead engineering efforts using DevSecOps and Continuous Monitoring (ConMon) practices to implement and enforce NIST 800-53 security controls across DoD/IC multi-cloud environments. Developed reference architectures and implementation guides using policy-as-code (OPA, Terraform Sentinel), GitOps practices, and automated compliance scanning (Wiz, Prisma Cloud, AWS Security Hub) for faster Risk Management determination and Authorization to Operate (ATO) following the Risk Management Framework (RMF).
• ■ Enabled Penetration Testing Environments: Lead the Cross Domain-enabling capability for transferring pen-testing tools (Kali, Metasploit, Burp Suite) from low to high environments. Manage IAM Roles/Users to ensure proper access to tooling repositories and environments.
• ■ Data Science and AI/ML Environments: Led a team of Security Engineers implementing secure reference architectures for DoD/IC missions leveraging Data Science, Machine Learning, and Generative AI technologies including AWS Bedrock, SageMaker, and Azure OpenAI.
• ■ Software Defined-Networking: Lead engineering team responsible for Software Defined-Networking in Hybrid and Multi-Cloud environments using AWS Transit Gateway, Azure Virtual WAN, and service mesh technologies (Istio, Linkerd).
• ■ Cloud-Native Cross Domain Solutions: Leading systems delivery of a unique Cloud-Native CDS using AWS services (Lambda, Step Functions, ECS, S3) to scale content filtering and sanitization with automated security scanning.

Director of Research & Development (R&D)

⇒ Spearheaded two strategic growth areas as R&D Director. First, provided executive leadership and vision for R&D product development in software and security engineering hosted across multiple cloud providers targeting commercial markets, owning all programs end to end — definition, requirements, budgeting, scheduling, and delivery. Second, provided SME hands-on systems delivery leadership at DoD/IC client sites with unique DevOps/CDS engineering and cloud technology requirements. Delivered Machine Learning-based products enabling cybersecurity operations teams to detect and mitigate adversary activity quickly. Specific areas of responsibility:

• ■ Hybrid cloud environment administration: Maintained Corporate IT services (Recruiting, HR, Business Development, Finance, etc.) using VMware 6.5, AWS, and GCP.
• ■ Business Development: Crafted technical and cost volumes in response to RFI/RFP/SBIRs/STTR requests.
• ■ Process Engineering: Drove the creation of process-related initiatives to enhance business performance outcomes.
• ■ Mentoring and Coaching: Lead and inspire by example while reinforcing individual team operating principles to maximize alignment within the company, team, and with others while delivering on client sites.
• ■ Reporting Structures: Directly managed mid-sized teams of ~15 systems/software/security engineers/software testers and data scientists dedicated to the Steel Point-developed platform/product engineering. Also managed ~10 Sr. Delivery System Engineers and Site Reliability Engineers on client sites supporting various sub-contracts and reported directly to the company CEO.
• ■ Cloud Providers: Managed several cloud service providers used for hosting company IT infrastructure and product development and used AWS core services such as EC2, S3, VPC, Route 53, IAM., CloudTrail, CloudWatch, and CloudFormation to host production, product integration, and bug bounty environments. Managed a smaller node cluster for testing in Google Cloud Platform leveraging Cloud Shell, Cloud Launcher, Compute Engine, App Engine, SQL, VPC Network, Network Services (Cloud DNS and Load Balancing), StackDriver (Monitoring, Logging and Debugging). Also used and managed company IT infrastructure using VMware 6.5, focusing on VMware Software-defined Data Center products: vSphere 6.5 vCenter and vSphere Hypervisor (ESXi) and built a volatile offline demo, dev and test environments with Vagrant/salt-cloud and coupling VirtualBox. Took advantage of Terraform to create a cloud-agnostic and cloud-based CI/CD environment to integrate with Bitbucket and Slack.
• ■ Windows Server Hardening: Engineered an automated deployment and hardening methodology using Windows Server 2016 nodes hosted on VMware, AWS, GCP, and Azure using PowerShell DSC and Ansible.
• ■ Health Status & Monitoring: Used various tools to gain efficiencies when monitoring hundreds of nodes and applications. PRTG: Used and developed PRTG sensors for monitoring application health status. Splunk: Engineered Splunk forwarders, search heads, and indexers across hundreds of Linux nodes. Created dashboards to have better situational awareness. Elastic: Engineered and implemented an ELK-based solution as an alternative to Splunk; also used Elastic Beats to collect and aggregate logs from thousands of web-based applications supporting Modern Honeypot Network sensors. Google StackDriver: Used and implemented StackDriver to monitor the development server stack. AWS CloudWatch: Engineered solution to relay on-premises server and application logs to CloudWatch for increased fidelity and reliability of log collection, metrics, and Executive Level consumption.
• ■ Computer Network Defense (CND) Engineering and Administration: Engineered a distributed Honey Pot using Open-Source tools such as Modern Honeypot Network (MHN) and Elastic. Used research tools such as censys.io, Virus Total, zmap.io for large-scale analyses. Worked with the product development team to produce meaningful indicators of compromise reports using open standards such as STIX, TAXII, and CybOX. Applied threat intelligence tooling such as Mnemonic.
• ■ Malware Analysis: Analyzed malware behavior and mutex attributes using Inetsim, GFI Sandbox, ThreatExpert API, RegShot, and FakeNet; developed YARA signatures and used IDA disassembler for debugging and tracing malware in sandboxes. Applied managed-attribution techniques and open-source research tools to conduct security research on targets while masking identity, partnering with malware analysts to refine auto-pivoting strategies.
• ■ Firewall Management: Designed, built from scratch, and managed firewall rules using Vyatta Firewall CLI and Juniper vSRX
• ■ Network Management: Managed a small Juniper QRX. Cluster for L2/L3 routing and switching among several private VLANs
• ■ Bug bounty: Organized bug bounty projects and collaborated with security researchers using HackerOne, BugCrowd, and SynAck

Sr. Lead Technologist in DevSecOps/CDS. Engineering.

⇒ Provided DevSecOps/CDS engineering and cloud technologies SME leadership, guidance, and vision across DoD/IC clients, applying deep cybersecurity expertise to projects with a start-up drive and fast-changing requirements. Focus areas:

• ■ ECDS SME: Led secure design, architecture, engineering, and automation of a large-scale Cloud/SOA-based Enterprise Cross Domain Solution. Pioneered the engineering and implementation to stand up a CDS software security and infrastructure testing lab on cloud IaaS/PaaS platforms, a distributed and heterogeneous (*NIX and Windows) networking environment in support of several Cross Domain guard technologies such as HSG., Datagate, TDX., Radiant Mercury, OWL., DSG., etc. I also directed the continuous evolution of the architecture, development, and integration of Deep Content Inspection (PDI) tools such as Purifile, Apache TIKA, DCF, OPSWAT MetaScan, FireEye detonation chamber as well as other mission-specific filtering capabilities such as clean and dirty-word checks, MIME Type and File Type checks in support of many CDS guard vendors.
• ■ DevSecOps SME.: Pioneered the implementation of a Software Supply Chain (SCRM) of application builds, deployment, and release management using VMware, vagrant, SonaType Nexus, Bamboo, and Saltstack with custom bash and python scripts in support of a Continuous Integration (CI) and pre-production ready Continuous Deployment environment (CD). Also engineered a tailored event-driven infrastructure solution using autonomic principles of self-healing. Used Saltstack reactor system and beacons.
• ■ Agile team coach and collaboration tools engineer: Introduced, architected, installed, configured, and maintained Atlassian tool suite (JIRA, Confluence, Stash, Source Tree, Bamboo, HipChat, Crowd) in support of my DevOps team. Tools were used daily during stand-up meetings, bi-weekly planning, and retrospective meetings.
• ■ Health Status & Monitoring: Developed, configured, installed, and maintained an event-based monitoring solution used by Site Reliability Engineers using syslog-ng, rsyslog, Nagios/Icinga2 with tailored traps for SNMP and a customized Splunk dashboard. Also architected, engineered, and deployed a log-based telemetry platform to extract operational insights around Insider Threat Detection and Advanced Persistent Threats.
• ■ System Automation: Automated Operating Systems (RHEL/CentOS 5/6/7, Windows XP/7/2008) hardening, patching, and remediation using Saltstack, openscap following STIG and security best practices. Also, automated machine image creation using vagrant packer in conjunction with custom-developed kickstart scripts (bash and Python) for building Just Enough OS (JeOS) platforms and provisioned images to VM. or bare-metal using customized bootstrapping scripts – all driven and orchestrated with Saltstack. Automated the creation of custom PKG and RPMs using FPM. Led the requirements and architecture of an automated test harness using Selenium.
• ■ PKI and PKI/E: Deep understanding of Identity Management using PKI/E, LDAP, Windows Active Directory integration, PAM, sudoers, and role separation. PKI-enabled Jboss EAP. using DoD PKI and NSS PKI Trust Anchors. Piloted the automation builds of PKI RootCa and PKI SubCA using Windows Server 2008 and RHEL 5 with Thales and SafeNet Hardware Security Modules.
• ■ Business Development: Authored technical and cost volumes in response to RPF/RFIs.
• ■ Management: Managed small/large geographically distributed teams. Standardized collaboration tools such as Atlassian, Google Hangouts, and Slack. Career Manager and mentor to interns and new employees. Also, timesheet approver for several staff members.

SOA and Security Solutions Architect.

⇒ Provided entrepreneurial leadership in transforming the company into a premier Enterprise Architecture boutique consulting firm. Aggressively identified Enterprise Architecture and Information Security business opportunities, structuring and participating in strategic proposal development and tactical presentations to DHS Customs and Border Protection (CBP) contract prime, other subcontractors, and CBP clients.

• ■ Provided SOA and Security Solutions Architecture SME support to the DHS CBP Chief Enterprise Architect, advancing information security adoption across CBP and the Office of Information Technology (OIT). Led four major CBP initiatives:
• ■ EA Security Architecture project: Designed, developed, and implemented the first CBP Enterprise Security Architecture and its integration with the CBP EA. Created a modular Enterprise Security Architecture Framework (ESAF) in MEGA, the CBP EA modeling and analysis tool.
• ■ CBP EA Release Management project: Architected and implemented an EA Release, Change, and Version Management process using Dimensions 10 and MEGA.
• ■ CBP EA SOA project: Developed a methodology for identifying SOA Shared Service Candidates, which consisted of a Service-Oriented process that explains what and how SOA Shared Services need to be identified.
• ■ DHS OneNet and CBP LAN project: Used MEGA modeling and analysis to capture the diagrams, models and system design documents of the DHS OneNet, Trusted Internet Connection (TIC), High Assurance Gateway (HAG.), Reverse Proxy, Policy Enforcement Points, CBP LAN system and mapping them to the Performance Architecture, Business Architecture, Service Architecture layers of the Enterprise Architecture for a complete Line of Sight and future gap analysis.

Sr. Security Tech Lead/ .NET Software Engineer.

⇒ Provided SME in two significant projects:

• ■ Security technical lead serving on the AITS and RCAS program. Provided software/security engineering leadership, guidance, and vision across the program. Directed technical aspects of the program as part of several product families implementing an SOA and leveraging Web Services, Common Access Card (CAC), and AKO Single Sign-On (SSO).
• ■ Sr. .NET Software Engineer leading technical efforts for the Software Architecture and EA teams following DoDAF and Microsoft Solutions Framework (MSF) methodologies. Designed class, component, and sequence diagrams using UML notation for several SOAs. Web-based applications using C# and .NET technologies and CMM Level 3 initiatives.

Senior Software Developer

• ■ Managed SDLC application development and product demos for US ARMY G-3 and HQDA initiatives. Developed several web applications using ASP, ASP.NET, and VML.

Programmer/Data Analyst

• ■ Led software development activities in the billing department—extensive use of Oracle 8i, TOAD, Crystal Reports 8, and VB 6.0.

Programmer/Data Analyst.

• ■ Led the e-commerce client technical support department and contributed to the architecture and design of the web portal.