Accomplished IT and Security Engineering Leader with a proven history of driving transformative changes in IT infrastructure and aligning technology and security strategies with critical business goals. Deep expertise in cloud technologies, SaaS, and emerging tech, with a strong emphasis on strategic planning and governance.
Calvin has a strong track record of leading technology and cyber risk discussions with divisional leadership, providing strategic direction for security and compliance, and spearheading improvements in key security domains, including Identity and Access Management (IAM), configuration management, and cloud security controls.
Calvin has successfully led the architecture design and implementation of programs aimed at strengthening security standards and practices, effectively managing technology risks, and ensuring robust cloud security compliance. Calvin also has a demonstrated ability to optimize operations and deliver significant cost savings.
Worked with PMG to conduct SOC 2 audit readiness and engaged with a third-party auditor to conduct a SOC 2 Type II audit for PMG against its SaaS and operating environment.
Worked with Momentum's Operations and IT team to conduct SOC 2 audit readiness and engaged with a third-party auditor to conduct a SOC 2 Type I for Further (formerly Search Discovery) against its SaaS and operating environment.
Working at a digital commerce holdings business, our team has been tasked on consolidating a Google Workspace environment from a subsidiary into the overall Google Workspace master tenant. This enables capabilities for greater collaboration between the brand companies, a consolidated user and administrative experience, and enhanced administrative/engineering capabilities. I was specifically tasked with leading the migration that dealt with staging, executing, and reconfiguring the environment to mirror the old environment for the subsidiary company.
Manage technology risks for the Software division and liased with Enterprise Information Security Office to effectively reduce risks within Software.
Oversee cloud security compliance in the Software division and advises the organization on key activities and results that maintain and improve cloud security posture.
May 2024 — Nov 2024
Momentum
Lead, Cybersecurity Architecture
Momentum (2.5K - 5K employees) is a collection of companies built to power digital commerce, driven by innovation and data insights.
Develop and drive cybersecurity strategies and plans for Momentum and its portfolio companies, aligning security initiatives with organizational goals and business objectives.
Lead Momentum's SOC, Deploying and managing security technologies like CrowdStrike, Tenable, and Sumo Logic for real-time threat detection and response for Momentum and its subsidiaries.
Lead vulnerability management practices with Tenable and AWS services, focusing on risk remediation and adopting best practices across cloud and on-prem environments.
Implement security controls and policies for multi-cloud (predominantly AWS and Azure) and endpoint environments, ensuring compliance with NIST and CIS standards.
Work to centralize GRC and Privacy functions using OneTrust, managing compliance for GDPR, SOC 1, SOC 2 Type I & II, and PCI across all brand companies.
Feb 2022 — Sep 2022
SLAC National Accelerator Laboratory
Security Analyst II
SLAC National Accelerator Laboratory (2-3K employees), a U.S. Department of Energy science lab, focuses on advanced research in particle physics, photon science, astrophysics, and cosmology.
Conducted NIST assessments across multiple system enclaves for a U.S. Department of Energy science lab.
Collaborated with the internal SOC team to execute U.S. Department of Energy and White House data calls.
Enhanced SLAC’s security operations center by improving incident detection and response capabilities.
May 2020 — Mar 2022
Patriot Software, LLC
Security Engineer II
Patriot Software (100-250 employees) offers online accounting and payroll software to US business owners and their accountants, focusing on simplicity, affordability, and fun.
Led the design and implementation of baseline cybersecurity programs modeled after the NIST Cybersecurity Framework.
Guided Patriot through SOC 2 Type I audit readiness, successfully supporting their first external security audit.
Dec 2019 — Aug 2020
Drips
Information Security Engineer II
Drips (50-100 employees) utilizes an AI-powered, conversational outreach platform to heighten consumer engagement through advanced texting, calling, and voicemail technologies.
Co-managed IT Operations for Drips, spearheading transformation efforts during the pandemic.
Led security initiatives during Drips' ISO-27001 certification process, managing the audit with BSI.
Aug 2018 — Dec 2019
Metisentry
Cloud Engineer II
Metisentry (10-50 employees) is a Full-Service Marketing, Design, Development, & Hosting Agency focused on helping businesses achieve their goals.
Supported a range of level 2 Linux and Windows Server web services requests for a web hosting company, including core services like Apache/nginx, DNS, email hosting, networking, and security.
Handled data center operations for Metisentry’s dedicated servers and managed hosting clients, performing tasks such as system imaging, database backups/restores, and virtualization.
Served as the cloud operations expert, advising and executing cloud transformation projects (AWS) for Metisentry’s clients.
Learn what a forward deployed engineer does, how the role differs from traditional software engineering, and why hire one to support enterprise customers.
Discover top engineering recruitment agencies to hire skilled and vetted engineers for your business. Also, explore flexible, fractional hiring solutions.
