Custom role alignment

Chicago White Sox Resume

Vice President, IT & Enterprise Architecture - Chicago White Sox

Principal-level enterprise architecture, cybersecurity, cloud, identity, and IT operations leader with 22 years of experience across Microsoft, banking, healthcare, public-sector, managed-service, entertainment-production-adjacent, sports-adjacent, and AI-enabled software environments. Microsoft alumnus with a record of owning hybrid-cloud transformation, day-to-day service delivery, platform reliability, security governance, IT financial management, RFPs, and executive investment decisions. Known for translating functional, security, and economic constraints into durable architecture roadmaps, operating models, training programs, and measurable delivery outcomes in dynamic environments where timing, continuity, and trust matter.

Email resume@askjake.pro Download PDF Resume Download Word Resume Download Markdown Resume

Why this version fits

Enterprise architecture ownership across hybrid cloud, identity, cybersecurity, infrastructure, service delivery, edge/network reliability, and cost-aware platform operations.
Microsoft alumni scale: 37 dedicated accounts, Fortune 500, government, high-tech, Microsoft internal, and complex critical-situation response.
Hands-on executive-facing leadership in RFPs, budget tradeoffs, IT financial management, operating-model changes, managed-service delivery, training programs, and multi-year transformation roadmaps.
Adjacent live-environment and sports experience through Fumaro Sports predictive intelligence, entertainment production venue discipline, Olympic-broadcaster support, and banking, public-sector, healthcare, and crisis-response environments where reliability and timing mattered.

Professional Experience

Scoria Software Solutions · March 2025 - Present

Founder & Principal Software Architect

Founder-level platform architecture across deterministic AI systems, model-agnostic orchestration, multi-surface software delivery, infrastructure automation, document generation, and cost-aware operating models.

Role evidence

Designed explicit guardrails, approval paths, and immutable attribution across AI-enabled tooling, producing clearer audit trails, incident response measured in seconds or milliseconds, and a 1-2 order-of-magnitude reduction in safety-control bypass attempts.
Reduced false positives by more than 50% and cut human-intervention escalations from 20-30 per month to roughly one per quarter at one client, freeing security specialists to resume long-shelved SASE work.
Built model- and platform-agnostic orchestration used across consumer apps, enterprise platforms, Azure AI Foundry, Ollama, and local models; one customer cut Azure spend 65% while reducing application latency from 3-5 seconds to 10-150 ms.
Created a DevOps orchestration engine with AI-development guardrails that reduced technical debt 65-95% and compressed feature and patch delivery from weeks or months to days or hours.
Developed canonical JSON-schema front-end patterns for cohesive deployment across web, native mobile, desktop, APIs, CLIs, and MCP toolkits, reducing each interface codebase 25-30% through shared components.
Added Fumaro Sports as a sports-first predictive intelligence and live decision-support platform spanning multiple user surfaces, while keeping the broader Scoria emphasis on enterprise-grade platform engineering and guardrails.

Bedrock Information Systems LLC · January 2019 - Present

Principal Architect

Full business and technical leadership for a small technology firm serving municipal, regulated, managed-service, and family-office-adjacent environments.

Role evidence

Owned day-to-day IT operations, service delivery, architecture standards, client escalation, budget preparation, accounting, and P&L decisions while growing Bedrock from family-office technology support into a managed-service and modernization provider.
Established NIST CSF 2.0 Tier 3 (Repeatable) as the new onboarded-system baseline, replacing Tier 1 awareness-level practices and reducing typical municipal IT audit effort from 40-120 staff hours to under 30 minutes through automated reporting.
Led a Microsoft Teams implementation that expanded into a five-year city-wide AI and modernization roadmap across 26 major priorities, projecting initial ROI within 6-8 months, full ROI by year three, and seven-figure annual savings from year four onward.
Delivered measurable CJIS compliance advances while reducing administrative burden on sworn officers by 1-2 hours per day, aligning security outcomes with operational public-safety value.
Built a microfilm digitization tool that converted more than a century of public records into OCR/ICR-optimized PDF/A assets with metadata in a single 21-hour run, collapsing an estimated 10-year full-time effort and shortening records-request turnaround from weeks or months to days or hours.
Designed Azure DevOps and GitHub CI/CD standards for multi-environment application fleets, embedding security, compliance, functional, and budgetary requirements into routine release operations.

Los Angeles County Employees Retirement Association (LACERA) · August 2023 - June 2024

Principal Cybersecurity Architect

Senior-most technical security authority under the CISO, leading cybersecurity engineering, operational remediation, governance integration, RFPs, and investment-shaping decisions for a public pension environment.

Role evidence

Led a five-person cybersecurity engineering team from reactive user-report and alert handling into daily operating workflows focused on fundamentals and holistic remediation, reducing business disruptions from dozens per day to a handful per week.
Led RFP, demonstration, and proof-of-concept processes for SIEM, SOAR, and SASE platforms, balancing functional, security, and cost requirements to inform investment decisions under the CISO.
Implemented Entra Privileged Identity Management with Just-in-Time access, eliminating 45 standing privileged accounts and all persistent admin access except a monitored break-glass account.
Stopped a successful phishing compromise of a high-value, high-privilege executive account with zero data extraction, zero lateral movement, and no business-system impact.
Deployed Pentera as a continuous red-team capability, closing Critical and High issues within the first month change cycles and reducing the residual backlog to an average of 10-12 active findings.
Drove ServiceNow GRC and change-management integration, increasing legitimate change tickets from a handful per month to dozens per week while reducing change delivery cycles from weeks to days or hours.

Wells Fargo Bank · July 2022 - July 2023

Senior Cybersecurity Architect

Enterprise architecture and cybersecurity role supporting secure public-cloud adoption, Azure and GCP third-party-risk analysis, pattern standardization, cryptographic control design, and executive decision support in a highly regulated bank.

Role evidence

Led the Service Enablement Task Force that validated and approved secure architecture and infrastructure blueprints across 128 cloud resource provider types, creating a pattern library that allowed thousands of downstream applications to adopt standardized designs.
Accelerated security and infrastructure reviews from 3-12 application approvals per month to 40-50 completed reviews per week, unblocking the bank first successful large-scale public-cloud migration after multiple prior failed attempts.
Performed an in-depth Azure and Google Cloud Platform third-party-risk and security comparison that shaped enterprise cloud-provider selection and clarified how functional, security, and economic constraints should govern multi-cloud decisions.
Designed and implemented multi-layered Hold-Your-Own-Key cryptography with external key providers, eliminating third-party cryptographic dependencies and delivering 100% bank-controlled operations with zero exceptions.
Developed SDLC policy-enforcement roadmaps that shifted the organization from exception-driven approvals to standardized architecture selection, reducing application teams effort from dozens of hours to roughly one to two hours of asynchronous work.
Balanced functional, security, and economic requirements while influencing groups of 12 to 100+ engineers, GRC specialists, product teams, and cryptography experts through a major enterprise cloud decision.

Microsoft Corporation · March 2021 - November 2021

Senior Customer Engineer, Global Tech Team

Elite Microsoft escalation, advisory, and architecture role serving 37 dedicated customer accounts, including 12 persistent accounts, across Fortune 500, government, high-technology, Microsoft internal, and complex enterprise environments.

Role evidence

Served as a Global Tech Team Senior Customer Engineer across 37 dedicated accounts, including 12 persistent full-tenure accounts, while acting as final technical authority for Microsoft IT and product-group escalations with no remaining internal path.
Helped large organizations evaluate multiple viable solutions against functional, security, and economic constraints, driving nearly nine figures in multi-year Azure commitments, including one customer above eight figures, Azure Reserve Instance purchases, and Unified Support renewals.
Supported a major broadcaster involved in the 2021 Olympic Games as a senior architecture design and operational escalation resource for high-visibility, time-bound media technology operations.
Led the post-ransomware identity overhaul after DART containment for a Fortune 500 transportation company, spanning Active Directory forests, Microsoft 365 tenants, Azure and Azure Stack deployments, and private-cloud regions across tens of thousands of endpoints and users.
Averaged one to two critical-situation escalations per week and diagnosed a Windows Server 2016 Storage Spaces Direct defect whose global patch resolved long-standing issues for six dedicated customers and all high-availability Windows Server workloads on S2D worldwide.
Participated in remediation for a major hyperscale technology outage, helping identify an infrastructure-as-code workflow trigger, guide rollback, and shape geo-resiliency and disaster-recovery standards for Premier and Unified Support customers.
Mentored approximately a dozen engineers and contributed to more than six internal training programs and more than twenty standardized customer delivery programs.
Authored reusable PowerShell and ARM-template assets for Microsoft public GitHub repositories and learn.microsoft.com, reducing repeat request volume and freeing capacity for higher-value escalation and architecture work.

Los Angeles County Employees Retirement Association (LACERA) · December 2020 - March 2021

Senior Cybersecurity Architect

First dedicated cybersecurity engineer and roadmap architect for a public pension organization entering a funded multi-year modernization and security maturity program.

Role evidence

Authored a three-year technology and security maturity roadmap across eight domains, formally adopted by the CISO, IT leadership, and Board, and secured a funded program that immediately opened three new security engineering roles.
Discovered and remediated hidden super-privileged Active Directory backdoor accounts with built-in administrator, domain, enterprise, schema, and synchronized Microsoft 365 Global Administrator rights within two weeks.
Designed and deployed Entra and Netskope foundations across approximately 550-600 users and endpoints, moving the organization from zero remote-endpoint visibility to full visibility, full-tunnel VPN, firewall, web filtering, and endpoint security controls.
Stabilized remote access during COVID, eliminating frequent unexpected downtime and restoring pre-crisis customer-service metrics for the populations the organization served.

City National Bank · March 2020 - July 2020

Vice President, Azure Infrastructure

Banking infrastructure leadership during the first COVID remote-work surge, with adjacent relevance to entertainment and professional-sports-connected business communities served by the institution.

Role evidence

Led a core infrastructure team of approximately six engineers, expanded to roughly eighteen during crisis response, while serving as the bank only pre-existing remote-access capability and first group transitioned to full remote work.
Replaced the original Azure migration scope with urgent remote-work enablement, applying functional, security, cost, and operational guidance to VPN, Microsoft 365 collaboration, VDI, MFA, and Azure availability-monitoring investments.
Moved all IT staff remote within one week and enabled 100% workforce remote transition within 30 days during COVID lockdowns, with only minor adjustments required for branch-based colleagues.
Designed and scaled corporate VPN, Teams, Microsoft 365, and VDI infrastructure for the national workforce while modernizing MFA with Ping Federate, Azure AD, Microsoft Authenticator, continuous RADIUS, and Azure availability monitoring.

Molina Healthcare · February 2019 - February 2020

Senior Solutions Architect (Consultant, Infosys)

Healthcare hybrid-cloud migration and landing-zone architecture for a highly regulated environment with 16,000 production servers, more than 630 applications, and a data footprint above 2 PB.

Role evidence

Architected and led the Azure Landing Zone and hybrid-cloud migration program, completing migration of roughly one-quarter of a 16,000-production-server footprint within one year.
Selected and migrated the most business-critical SQL Always On workload, protecting 450 TB of data with 2.7 TB of daily transactions, creating a repeatable pattern that reduced subsequent migrations from months to days or weeks.
Embedded HIPAA controls, audit trails, SIEM/SOAR integration points, network security, and CISO-approved requirements into the landing-zone design from the outset.

Skills

Hybrid Cloud & Enterprise Architecture

Azure Landing Zones, Azure Policy, Landing Zone Accelerator patterns, Azure Arc, Virtual WAN, Azure Stack, hybrid cloud, multi-cloud operations across Azure, AWS, and Google Cloud Platform (GCP), Azure / GCP third-party-risk comparison, Azure Private Link / Private Endpoints, Application Gateway, Front Door, Azure Firewall Premium, Web Application Firewall, NSG / ASG patterns, private cloud, bare metal, OpenStack, geo-resiliency, high-availability design, architecture review boards, standards libraries, decision records, vendor-agnostic architecture schemas

IT Operations, Service Delivery & Financial Management

Day-to-day IT operations, service delivery, SLA and operational performance systems, MSP and ITIL operating models, operational dashboards, Azure Monitor, Log Analytics, KQL, observability patterns, edge-to-transaction telemetry, Azure Cost Management, FinOps, IT financial management, budget preparation, accounting, P&L ownership, executive stakeholder engagement, non-technical staff training and awareness programs, RFP leadership, project and program governance

Cybersecurity, Identity & Access

Microsoft Entra ID, Entra ID Governance, access reviews, entitlement management, PIM, Just-in-Time access, Continuous Access Evaluation, Conditional Access, passwordless programs, FIDO / MFA, managed identities, service principals, RBAC, JEA, Key Vault and secrets patterns, certificate-based authentication, PKI and certificate lifecycle management, BYOK / HYOK cryptography, Active Directory, Okta Workflows, Okta Lifecycle Management, Ping, Entra ID B2C, Auth0 / CIAM patterns, SCIM provisioning, Defender, Purview, Defender for Cloud Apps, Sentinel analytics and hunting, KQL, Pentera, SIEM / SOAR, SASE, XDR, ASR, WDAC, AppLocker, Secure Score programs, threat modeling

Security Engineering, Edge Protection & Secure AI Adoption

Anti-bot, anti-fraud, account-abuse, and bot-management controls, DDoS mitigation, WAF operational ownership, HAProxy Enterprise WAF patterns, application security controls as code, rate-limit and routing policy as code, REST and GraphQL API security, SSDLC and OWASP SAMM / BSIMM-aligned maturity programs, AI adoption roadmaps, deterministic guardrails, immutable attribution, RAG, embeddings, vector databases, prompt-injection evaluation, secure LLM deployment patterns, model-agnostic orchestration, Azure AI Foundry, MCP toolkits, AI-assisted development governance, live decision-support systems

Network, Edge & Live-Event Reliability

Data-center and enterprise network architecture, BGP, OSPF, VXLAN / EVPN, network fabric, multicast, QoS, network reliability engineering (NRE), chaos and self-healing network practices, CDN and edge networking, Fastly / Akamai / Cloudflare patterns, HAProxy at edge, streaming and media-transport support patterns, on-call and high-demand event support, game-day / ticket-launch style operating patterns, high-scale consumer platform patterns, venue / stadium / live-event technology support from entertainment production background

DevOps, Supply Chain & Platform Engineering

Terraform, ARM / Bicep, PowerShell, GitHub, Azure DevOps, GitHub Advanced Security, CodeQL, Dependabot, CI/CD pipelines, Policy as Code, drift detection, configuration management patterns, AKS / Kubernetes, SBOM, supply-chain security, repository governance, full lifecycle automation

Governance, Compliance & Control Assurance

NIST CSF 2.0, CJIS, HIPAA, CMMC, FedRAMP / StateRAMP, securities-regulation environments, continuous control monitoring, audit automation, enterprise architecture review boards, GRC / ServiceNow integration, SDLC policy enforcement, secure architecture review, database security controls, control evidence and reporting

Core Platforms, Data & Workplace

Microsoft 365, Teams, Exchange Online, SharePoint / OneDrive, Bookings, SQL Server Always On, PostgreSQL, MySQL, Cosmos DB / MongoDB, Oracle, petabyte-class data environments, Always Encrypted, Dynamic Data Masking, Row-Level Security, SD-WAN, virtual networking, Storage Spaces Direct, DFS, failover clustering, VDI, VPN scale-out

Older Roles

Senior Solutions Architect - Coretek Services - August 2018 - January 2019
Principal Consultant - Obsidian Availability Solutions - September 2016 - December 2018
Senior Solutions Engineer, Engineering Team Lead - Orion Technology Services - June 2015 - August 2016
Senior Systems Administrator - Detroit IT / Core 3 Solutions - June 2014 - February 2015
Senior Systems Analyst, Helpdesk Lead - Detroit Country Day School - June 2013 - June 2014
Systems Analyst - University of Michigan, Information & Technology Services - June 2011 - September 2012
Information Technology Specialist - Battery Giant / Energy Products - January 2007 - December 2010
Systems Analyst - Detroit Country Day School - June 2005 - August 2006

Education

The University of Michigan, Ann Arbor - LSA: Biochemistry, Economics, and Data Science; SMTD: Design & Production, Stage Management, Lighting Design & Electrics, Sound Engineering, and Music Production
Detroit Country Day School, Beverly Hills, MI - High School Diploma, College Preparatory Curriculum