Dustin Endo

About Dustin Endo

I\'m a Principal Security Architect with over 17 years of leadership experience in building and securing complex identity and access management systems across Fortune 500 enterprises. At GEICO, T-Mobile, and Providence Health, I’ve architected scalable IAM, CIAM, PAM, and cloud security solutions that strengthened enterprise posture and reduced vulnerabilities at scale. I specialize in aligning technical strategy with business outcomes, building high-performing teams, and driving transformation in regulated environments like insurance, telecom, and healthcare. With deep expertise in Security Architecture, Identity Governance, and cross-functional stakeholder engagement, I bring both vision and execution to identity-led security programs. I thrive in dynamic environments where innovation, compliance, and security converge to protect what matters most.My top ten skills are as follows:1. Identity and Access Management (IAM / CIAM / RBAC / SoD)2. Cloud Security Architecture (Azure, AWS, Multi-Cloud Integrations)3. Privileged Access Management (PAM / PIM / Conditional Access)4. Security Strategy & Program Development5. Vulnerability & Risk Management6. Stakeholder Management & C-level Engagement7. Security Compliance & Frameworks (NIST, HIPAA, PCI-DSS, DIACAP, etc.)8. Enterprise Architecture & Technical Road Mapping9. Team Leadership & Mentorship10. Security Compliance Management, Policies & Audit Readiness

Experience

1. Principal Security Architect Ii

   GEICO

   Jan 2023 — Present

   Engineered and rolled out GEICO\'S current Enterprise Security IAM Solutions, PIM/PAM, Conditional Access Policy, RBAC, and SoD leading to a more fortified Holistic Security Infrastructure and a significant reduction in Security Vulnerabilities.• TEAM/PROGRAM BUILDING: Built world-class Engineering Teams by creating innovative Hiring and Onboarding processes and mentoring junior engineers, resulting in increased team efficiency and talent retention.• PROJECT DELIVERY: I enhanced project delivery and team productivity by providing strategic Leadership and fostering Collaboration with the 3 teams (roughly 5-10 people) I managed.• TRUTH TO POWER: I serve as a liaison between Engineering Teams and C-level Leadership by leveraging my SME, resulting in improved Communication and alignment on Strategic Security Initiatives.• Provide holistic Enterprise Cybersecurity Architecture coverage by researching and evaluating new Identity Security Solutions, Frameworks, Roadmaps, and techniques, resulting in comprehensive gap coverage and enhanced security capabilities.• COMPLIANCE GOVERNANCE: Ensure IT security Standards and Best Practices were met by collaborating effectively with all levels of Cross-Functional Teams Enterprise-Wide, resulting in a cohesive and secure organizational infrastructure.• STAKEHOLDER MANAGEMENT: Led Security Strategy Development and execution, resulting in cohesive and clear security context for all levels of Cross-Functional Teams Enterprise-Wide, and a more robust Security posture.• SOLUTIONS ARCHITECTURE: Developed solution requirements and maintained expert-level documentation by leveraging my understanding and experience of the Architecture and Engineering Lifecycle, resulting in precise and efficient project execution and delivery.• I swiftly identified Security Risks and provided solutions by utilizing my Problem-Solving and Analytical skills, resulting in enhanced Risk Management Organizational Security and reduced Vulnerabilities.

Education

• Purdue Global

  Bachelor of Science - BS, Legal Studies, General

  2018 — 2020

• University of Phoenix

  Associate of Science - AS, Psychology

  2010 — 2012

Skills

• Information Architecture
• Server Architecture
• Security
• Vulnerability Scanning
• Symantec Endpoint Protection
• Risk Assessment
• Mcp
• Windows Server
• Information Security
• Symantec Security
• Access Control Management
• Digital Forensics
• Enterprise Network Security
• Ditscap
• Endpoint Security
• Rsa Security
• Mcafee
• Computer Security
• Security Policy
• Risk Management
• Vulnerability Management
• Accreditation
• Vulnerability Assessment
• Host Intrusion Prevention
• Cissp
• Computer Forensics
• Encase
• Fireeye
• Intrusion Detection
• Information Retrieval
• Good Mobile Device Management
• Identity Management
• Mcts
• Network Security
• Information Security Management
• Information Systems
• Deep Packet Inspection
• Information Assurance
• Firewalls
• Palo Alto Networks