Rama Shunn

Experience

1. Principal Security Architect and Strategist

   Microsoft

   May 2015 — Present · Redmond, WA, US

   In my current role I own the strategy and architecture for the Microsoft Universal Store group. In this role, I am responsible for the security and technical compliance of hundreds of services comprised of tens of thousands of servers. The services which make up this organization are some of the most critical in the corporation and also some of the most regulated. • Reviewed existing environment(s), processes, and assets to identify critical and high value systems • Designed architecture to isolate critical systems from existing corporate domains and planned defense measures (preventative, impact limiting, and detective controls) • Focused defense measures on Advanced Persistent Threats (APTs) and likely APT targets • Performed application security reviews and threat models for a space consisting of over systems and applications/services • Defined and drove implementation of strategic security goals which reduced impact of audits on the organization and increased overall security stance of the environment • Proposed and planned the implementation of centralized security systems (resulted in reduced downtime and increased standardization of security implementations) • Primary technical resource for all internal and external audits (PCI, Card Brand specific audits, internal audits, SOX, ISO27001, AML/KYC, etc…) • Identified gaps, developed solutions, evangelized solution value and achieved solution implementation for multiple key preventative and response controls for all of the Universal Store Group