Matthew Merchant

WORK HISTORY

EDUCATION

ABOUT MATTHEW MERCHANT

Over Twenty Years in IT & Cybersecurity: Blending hands-on technical expertise with high-level strategy, I\'ve crafted and executed comprehensive cybersecurity frameworks, particularly in AWS cloud environments. My career spans intense operational duties in challenging settings, including conflict zones, and strategic roles in cybersecurity leadership. I am dedicated to safeguarding data integrity, confidentiality, and accessibility, and building resilient cybersecurity solutions. AWS & Kubernetes Expertise: As an 8x AWS Certified Professional, I excel in advanced cloud architecture design, migrations, and security, specializing in AWS GovCloud. I lead initiatives using AWS services like S3, EC2, and Lambda, and implement Infrastructure as Code (IaC) practices with Terraform and CloudFormation. My leadership has been pivotal in achieving Authority to Operate (ATOs) and compliance with standards such as NIST SP 800-53/RMF. My proficiency in Kubernetes ensures the orchestration and management of containerized applications and services at scale.🤖 Automation Leadership: I specialize in Python, PowerShell, and BASH, developing robust automation tools for security trend analysis, reporting, and control evidence. My focus is on proactive, automated solutions that adapt swiftly to the evolving cybersecurity landscape, enhancing organizational security protocols. Comprehensive Cybersecurity & Compliance Expertise: My experience encompasses project management, securing both on-premises and cloud-based systems, and ensuring compliance with RMF, NIST, and other frameworks. I advise on infrastructure, platform, and application layers, with a strong background in policy development, risk management, and cybersecurity strategy. Advanced Education & Certification: I hold a Masters in Business Administration, a Masters of Science in Information Systems (Information Assurance), and certifications such as C|CISO, CGEIT, CISSP-ISSEP, CISM, CCSP, CRISC, CISA, and PMP, with specializations in AWS and DevSecOps. This advanced education underpins my technical and strategic leadership in the rapidly evolving field of cybersecurity.