Ernesto R.

About Ernesto R.

I build secure, compliant cloud infrastructure that lets healthcare companies move fast without breaking regulations.Over the past 12 years, I\'ve helped healthcare and genomics startups go from development environments to production-ready, HIPAA-compliant systems—often in months, not years. At ForeSee Medical, I took a product living only in dev with test data and built the CI/CD pipeline and secure SDLC to onboard our first paying customers within 90 days. Three months later, I was appointed CISO and led the company to HITRUST certification.What I do:→ Architect AWS multi-account environments following CIS benchmarks→ Implement SecDevOps pipelines for continuous compliance→ Lead security programs from policy creation to HITRUST/HIPAA certification→ Migrate on-prem workloads to cloud without disrupting operations→ Optimize cloud costs (wrote the book on it—literally)Currently, I\'m VP of Infrastructure and Data Security at Xevant, where I architected our cloud infrastructure using Terraform, implemented SSO/MFA across critical systems, and established network segmentation for our healthcare analytics platform.Previously: CISO at ForeSee Medical | Director of TechOps at Human Longevity | DevOps Manager at Cypher Genomics (acquired by HLI)Certifications: 5x AWS Certified (Solutions Architect Pro, DevOps Engineer Pro)| FinOps Certified Practitioner & Engineer | MongoDB | Puppet ProfessionalAuthor:\"Cloud Cost Optimization Handbook for AWS\"Let\'s connect if you\'re building in healthcare, genomics, or any regulated industry.

Experience

1. VP Infrastructure and Data Security

   Xevant

   Jan 2023 — Present · San Diego, CA, US

   Leading infrastructure and security for Xevant, a healthcare technology company whose AI-powered platform helps PBMs, health plans, and TPAs optimize pharmacy benefits and reduce drug costs.Brought in to architect a secure, scalable cloud foundation and modernize the company\'s infrastructure from on-premises to AWS.Key accomplishments:→ Architected AWS multi-account cloud infrastructure following CIS AWS Foundations benchmarks→ Led migration of workloads from on-premises data center to AWS→ Implemented infrastructure as code using Terraform for consistent, auditable deployments→ Performed AWS Well-Architected Review and remediated findings→ Built SecDevOps CI/CD pipelines integrating security into the development lifecycle→ Integrated SSO with MFA across critical information systems→ Established secure VPN with MFA and implemented network segmentation→ Own data security strategy for a platform processing sensitive healthcare and pharmacy dataThis role combines my infrastructure architecture experience with security leadership—building systems that are both scalable and compliant from day one.

Education

• New Mexico Military Institute

  Electrical Engineering

  2001 — 2002

• Tecnológico de Monterrey

  Bachelor's degree, Electrical, Electronics and Communications Engineering

  2002 — 2007