Joel Ayala

Led security engineering for a large enterprise environment, guiding security initiatives across compliance, risk, security operations, and enterprise architecture teams. Architected and implemented cloud-native security capabilities including event-driven integrations, SIEM monitoring workflows, mutual-TLS API authorization patterns, and AWS security automation. Supported SaaS and cloud security posture management programs, CIS benchmark scanning, vulnerability/compliance reporting automation, and Azure security posture tooling. Managed IAM/PKI-related migration work, VPN remote access security, and created automation and training to improve organization-wide API and certificate security practices.

Converted AWS network design to a transit VPC approach to enable segmentation and centralized security policy enforcement with inspection. Built SIEM detection content in Splunk to detect anomalous activity using cloud and network logs, and created baseline security configuration standards and assessment/reporting processes. Defined security architecture guidelines for Kubernetes and Docker-based deployments and supported container runtime security and scanning as part of CI/CD pipelines.

Supported infrastructure for a SaaS platform with high availability requirements, managing performance and security for network and edge components. Implemented security controls including VPN access, TLS proxying, and site-to-site connectivity, and supported enterprise networking equipment and services. Automated operational tasks with scripting, managed Docker-based environments, integrated centralized logging into Splunk, and contributed to CI-adjacent tooling workflows using Jenkins, Bitbucket, Jira, and Confluence.

Planned and implemented network equipment upgrades at headquarters and remote sites while minimizing downtime. Designed and configured VLAN/subnet schemes, core switching, and WAN topology changes to improve network reliability and routing. Deployed and managed wireless networking for many users, supported virtualized infrastructure networking configuration, and handled endpoint antivirus and two-factor authentication operations.