James Hale

James Hale

Security Engineering Manager at Salesforce

Location:

Cloud security engineer with over fourteen years of experience, specializing in architecting and deploying secure and scalable systems with high availability, using cloud-based and on-premises infrastructure resources, including hybrid solutions. DevOps and security-focused. Experienced in Agile methodologies, including Scrum and Kanban. Specialties include: AWS, VMware, networking, automation and security.

Work

Salesforce

Senior Manager

Aug 2021 - Present

- Manage a team of 9 engineers. Drive career development discussions, talent reviews, and interview panels. Ensure members of the team are on the right track with engineering deliverables. - Coordinate engineering resources with partner teams. - Participate in security architecture discussions and provide input to key decision making. Taking the output of these discussions and delivering it to my team and other stakeholders as engineering deliverables. - Provide technical leadership and guidance, mentor junior engineers, and participate in code reviews.

Salesforce

Lead Systems Security Engineer

Aug 2019 - Sep 2021

- Technical lead for a team of three engineers. Drove Agile development, acting in Product Owner and Scrum Master roles. - Co-authored a project to implement Terraform static code analysis as part of the CI/CD pipeline, using Checkov, eventually scaling up to company-wide use. - Responsible for design and implementation of security solutions using AWS native services in GovCloud.

Salesforce

Senior Systems Security Engineer

Apr 2018 - Aug 2019

- Maintained AAA (Authentication, Authorization and Accounting) infrastructure for Salesforce's core product used by public sector customers. - Led effort to deploy Terraform across the Government Cloud infrastructure. Focused on AWS GovCloud Identity and Access Management. - Designed federated authentication and centralized logging mechanisms in AWS GovCloud. - Used Puppet and other configuration management frameworks to implement security controls for FedRAMP Moderate and High, and DISA IL4 compliance.

Blackboard

Senior DevOps Engineer

Nov 2016 - Mar 2018

- Research, design, develop, document and implement solutions for fault tolerance, performance, capacity, and configuration management for various data center operations. - Design, develop and implement documentation and tools to facilitate Technical Support team responsibilities. - Identify and drive opportunities to improve automation for deployment, management, and tooling, using Python, Ruby and Groovy, among other languages. - Support and improve a highly available and fault tolerant SaaS offering. - Identify platform security vulnerabilities and help design and engineer solutions.

The Washington Post

Senior Infrastructure Engineer

Jan 2015 - Nov 2016

- Implement ephemeral, long-lived and immutable infrastructure as code, using AWS CloudFormation and internally-built solutions. - Maintain infrastructure resources in an auditable and repeatable fashion using configuration management platforms, such as Puppet, Chef, Salt and Ansible and version control systems, such as git. - Responsible for designing and implementing sound and secure network and security architectures on AWS. - Help to maintain a strong information security posture for data in transit and data at rest. - Expert with AWS foundational services, such as EC2 (incl. EBS, ASG, ELB), VPC/Direct Connect, Route53, S3, IAM/KMS, RDS, SNS, SQS, SES and CloudWatch. - Experience with Docker, LXC and other containerization methodologies. - Contribute regularly to internal software projects, centered around the orchestration of infrastructure resources and the continuous deployment of containerized applications to test and production environments. - Familiar with NoSQL database platforms, such as MongoDB, DynamoDB and Redis and RDS database platforms, such as MySQL, PostgreSQL and AWS Aurora. - Proficient in Bash/shell, Python and Go languages as well as JSON and YAML data formats. Familiar with Ruby, Java and PHP. - AWS Certified Cloud Solutions Architect — Associate. (Oct. 2015)

The Washington Post

Systems Engineer

Dec 2011 - Jan 2015

- Managed physical and cloud-based infrastructure for the print, mobile, and web properties of Washington Post Media. - Supported content management systems & applications utilizing Apache, Nginx, Tomcat and dynamic Java applications deployed on Glassfish or WebLogic application servers. - Maintained Unix production, stage and test environments, utilizing RedHat 5/6/7, CentOS 5/6/7, Solaris 9 & 10, AIX 5.3, HP-UX and Mac OS X Server. - Performed occasional code deployments for development teams. - Performed system maintenance and upgrades as needed, including backups and restores. - Participated in 24x7 on-call rotation and performed occasional off-hours maintenance and implementation tasks. - Datacenter/NOC operations experience. - Completed a major datacenter relocation in 2014.

University of Massachusetts Amherst

Technical Assistant

Apr 2007 - Jul 2009

System and network administration/security IT Support Duties included: - Systems administration - Account management - Hardware & Software installation/troubleshooting - Phone support

The Massachusetts Daily Collegian

Web Editor

Sep 2006 - May 2008

Manager of web development, IT and support staff. Duties included: - Website design - Feature development, implementation and maintenance - Account administration and management - IT support

Volunteer

Fragforce

Apr 2018 - Present

Fragforce is a charity gaming team that raises money for Extra Life, Child's Play, and Children's Miracle Network hospitals

Education

University of Massachusetts Amherst

Bachelor in Computer Science

Sep 2004 - Dec 2009

Skills

Identity Federation

SAML OpenID Connect (OIDC) Okta Keycloak AWS IAM

Security Policy Tools

Checkov Open Policy Agent (OPA)

Coding

Python Golang Ruby Groovy PHP Perl YAML JSON

Configuration Management

Terraform Puppet Chef Ansible SaltStack

IaaS Platforms

Amazon Web Services (AWS) Google Compute Engine (GCE) OpenStack VMWare

Container Technologies

Docker Kubernetes (k8s) Mesos AWS ECS AWS EKS

Languages

English

Native Speaker

Interests

Motorsports

Photography

Cycling