Nathan Basanese

Product Manager for VaultAIDE

Developed and open-sourced an alternative to Terraform for managing Vault as Code using only Python standard libs & Requests, still in use at multiple HashiCorp Vault Enterprise customers

Produced multiple risk management recommendation reports for IT platform security for Fortune 100 financial services companies, addressing billions of dollars worth of risk

Designed, presented, and deployed holistic, company-wide secrets management services, using end-to-end encryption mechanisms, integrated via ReST APIs

Wrote other code (Python/GoLang/Terraform) as needed to improve architecture flexibility, software development speed, and reliability.

Introduced and instituted direct, code-based collaboration mechanisms for enterprise security policy automation

Secured automation pipelines by coding and integrating new Secure Authentication Mechanisms for Cloud, Hybrid, and legacy infrastructure, Secure Authorization Mechanisms, and Secure Dynamic Resources.

Developed and deployed self service & "platform onboarding" work flows for security platform adoption that moved from a 100% manual process to a touchless process that occurs by a deployment pipeline triggering security platform automation.

Prepared comprehensive vision for movement to Self Service & SRE model for Secrets Management & some Encryption platforms

Established generalized work flow for 'onboarding by default' where adding an app to a platform includes security platform featureset, using Vault ACL Policy Path Templating to scale adoption

Drafted vision for 'Platform Onboarding' model of which the above would become a part

Automated setup of OIDC Authentication method for Vault in Azure Active Directory, and scripted the addition of new Security Groups to Vault Enterprise as Identity Groups

Scripted onboarding of databases into Vault Enterprise

Developed a simple tool for parsing Vault Data for connections among objects for Vault Data filtering.

Currently pursuing the final and highest level of Vault Enterprise certification, which has not yet even been issued to anyone yet, by studying HashiCorp Sentinel

Developed and open-sourced an alternative to Terraform for managing Vault as Code, still in use at multiple HashiCorp Vault Enterprise customers

Product Manager for VaultAIDE (https://github.com/DigitalOnUs/VaultAIDE)

Advisor/mentor for the winning DigitalOnUs Hackathon project

Designed, presented, and deployed holistic, company-wide secrets management services, using end-to-end encryption mechanisms, integrated via ReST APIs.

Design, present, and deploy holistic, company-wide data protection services, using ReST integration and encryption mechanisms, for GDPR compliance, 90% PCI scope reduction, and beyond.

Rapidly establish deployment pipelines for Vault as Code via Terraform or Python in a matter of weeks for various customers.

Designed, presented, and deployed holistic, company-wide secrets management services, using end-to-end encryption mechanisms, integrated via ReST APIs.

Design, present, and deploy holistic, company-wide data protection services, using ReST integration and encryption mechanisms, for GDPR compliance, 90% PCI scope reduction, and beyond.

Introduce and institute direct, code-based collaboration mechanisms for enterprise security policy automation.

Evaluate and compare new Adaptive Security systems.

Create and deploy new Infrastructure as Code.

Secured automation pipelines by coding and integrating new Secure Authentication Mechanisms for Cloud, Hybrid, and legacy infrastructure, Secure Authorization Mechanisms, and Secure Dynamic Resources.

Wrote code to improve architecture flexibility, software development speed, and reliability.

Automated operational discipline and standardization where necessary, e.g. local and remote development environments _as code_ via Vagrant or Docker (https://www.vagrantup.com/intro/vs/docker.html).

Wrote a custom orchestration service in Python 3 for ReDiS Clusters

Wrote server-side code for maintaining ReDiS as the core "MicroService" for production Jabber session data handled by Cisco and WebEx.

Coded "launch on trigger" system for starting unattended deployment whenever a central repo gets updated.

Develop deployment code for HashiCorp Consul micro-services system for custom VIPs on demand, within the confines of a legacy network infrastructure.

Contributed to multiple open source repositories, including PuppetLabs and Consul.

Automate deployment & Consul monitoring for clustered HashiCorp Vault as another step toward managing secrets & infrastructure data as a REST-Based "MicroService"for all Cisco Jabber & WebEx Push Notifications.

Develop operational regimen for Vault, including master key management, along with a plan to move to the mantl.io stack.

'Puppetize' Vault into our infrastructure as code repositories.

Start and help to design & develop our product's first CI/CD pipeline with fully automated deployments triggered by every code commit.

Deploy our first RedisLabs Enterprise Cluster (RLEC).

Developed our first host-centric network security profile code.

Developed, tested the code, documented and configured 6 modules, more than all else in our group combined.

Scripted a compatibility checker for Symantec certificate replacements, coded an automatic CSR generator, and an automatic certificate installer.

Successfully encourage all members of our group using github.com and our internal github.

Deploy first CEntOS 7 machines for our Production Environment.

Write and present the first set of infrastructure testing (as opposed to application testing) guidelines & justification for our product, including automated 'chaos monkey' style testing.

Write 1000+ question & answer page to complement more than 100 step-by-step how-to guides and design discussions, including video documentation.

Set up PKI based access for our beta systems.

Orchestrate and and automate deployment for clustered ReDiS as the core "MicroService" for all production Jabber session data handled by Cisco and WebEx.

Implement Python 3 control systems for same to support stateless architecture.

Start the tech. refreshes for Python 3, Git, Vagrant, Docker, etc.

Proactively provided Cost Reduction and Security recommendations.

Refactor and port automated load testing in Python 3 for scalability, (tested at 1000%+ speed improvement for features replaced).

Prepare and give 6+ informal Python 3 and Git development training sessions for Operations, on my own initiative.

Develop a simple, stateless protein fold-completion verification algorithm capable of later extension by machine-learning and variable grammar.

Set up working relationships with contractors and possible enterprise customers.

Set up Bitcoin-funded infrastructure.

Co-developed a cryptocurrency arbitrage platform, 10+ exchanges integrated

Responsible for communicating all project related process changes to the rest of the team.

Just like at my last job, I was the resident Git expert, and I have some tricks I can show you. One person actually told me, 'I am amazed.' It was a good day for me!

Demonstrated proficiency in Agile methodologies to support delivery.

Designed, developed, documented and tested Python 3 tool to automatically download, update via repository subscription, and manage local virtualized development environments using Vagrant, Virtualbox, Nexus, Git, and Sphinx.

Established drive encryption for me and a fellow team member (Ali Gowher

Source-control configuration management for Nexus server via SaltStack and Pillar for staging, test, build, and local deployment environments.

Created Vagrant system with Saltstack provisioning for one of our test environments.

Implemented portable, virtualized development environment using Vagrant with automatic Puppet provisioning.

Set up version control for two codebases using the Git version control system.

Debugged Python build-scripts.

Set up asynchronous pre-receive validation Git hooks, asynchronous post-receive validation git hooks, and fabric scripts for our production codebase.

Automated branching strategy with shell script, later with LibGit2 bindings.

Set up merge-revert procedure that would allow a transparent un-merge and re-opening of a pull-request without removing or hiding results of a Git differential, and without needing intervention from the client software like Stash or Github.

Specified and scripted Copy-on-Write artifact replication, and server requirements for same.

Set up shell-provisioned vagrant build system.

Set up, on a short schedule, a really frustrating AML/KYC API for automatic customer approval on signup.

Refactored security and dependency management incrementally.

Assisted with continuous integration system, packaged Android app release, and supported templating scheme for localization.

Furthered ease of multisignature implementation by helping to draft and present article on the Married Wallets "meta-standard".

Onboarded other programmers, and reviewed code.

Learned some bangin' Bollywood dance moves.

Saved the company several thousand dollars in my first two weeks of work.

Handled contracts and other paperwork.

Found contractors for our renovations.

Set up multiple websites.

Enforced company security.

Set up the usual data management systems.

Added online sales channels.

Set up inventory control and testing regimen.

Changed business model by increasing volume of national and materials only sales to >50%, cutting our time/sale by 80% and increasing profits by 30%.

Developed, scripted, and trained for our Customer Relationship Management system, resulting in hundreds of new 'warm' leads.

Set up online sales channels and expanded existing sales channels.

Showed our upper management how to use our data to identify new avenues for the rest of our team to pursue.

Centralized fileserver, hosting, and backup services for multiple operating systems, which twice prevented catastrophic data loss to our acoustic side, and once prevented the loss of an entire division of the company.

Began document control program.

Technical lead for rebranding and rapid setup of a new website.

In the interest of speed, they wanted someone who could be relied upon to fuss with some of the more time-consuming technological i's to be dotted and t's to be crossed.

I just helped make sure that things which needed to get ordered got ordered, and kept track of what happened when the Construction Coordinator wasn't available.

I played supporting lead characters for two years in musical theater productions.

I prevented soccer games from reverting to their war-like origins, grew a thick skin, and arrived on time, every time.