Steve Oates

About Steve Oates

1 of the few 1,400 (USA) ISC2-Certified Information Security Architecture Professionals (CISSP-ISSAP). INFORMATION SECURITY ARCHITECT & ENGINEER | CYBER SECURITY | IT & IS COMPLIANCE | IT & IS AUDITING OPTIMIZE DATA SECURITY BEST PRACTICES BY SAFE GUARDING CRITICAL ASSETS, DEPLOYING AUTOMATED SOLUTIONS & MITIGATING RISKS. Solution-focused IS specialist, Info-Sec learner and adopter, and data security advocate, delivering advisory and technical services to projects in various stages of technology enterprise development. Specializing in review and research, investigation, implementation, resolution, and consultation of business technology and associated IS needs toward ISO/IEC 27001, HIPAA, COBIT, PCI-DSS, SOC II, and NIST. Critical thinker and innovator, leveraging technical expertise to advise and collaborate with IS business partners in hardening perimeter and internal IS practices. Engaging leader and communicator, effectively partnering with all organizational levels, both internally and externally to identify gaps in IS procedures, coordinating ongoing security improvements and updating security standards EXPERTISE: BIG 4 (Deloitte), Healthcare (Duke University Health), Consulting (Navigant), ISO/IEC 27001 Implementations | NGFW Enterprise Firewall Configuration & Monitoring (Fortinet)| Info-Sec Internal & External Audits | IT Reorganization & Process Re-engineering | Cloud Setup & Planning | Data Center Administration | IT Contract Negotiations | Aligning IT Governance to Internal Business Objectives |Federal, Industry or International Compliance Review | Strong presentation skills | Strong relationship and leadership skills

Experience

1. Senior Information Security Architect & Engineer - Iso

   Duke Health Technology Solutions

   Dec 2018 — Present · Raleigh-Durham-Chapel Hill, NC, US

   Project-based role focused on security architecture. Including broader Duke Health initiatives and specific hands-on product/service implementation to improve the security posture for Duke University Health. Projects focused on Azure and AWS, dev-ops advisory security reviews, secure web gateway planning, and implementation across Duke Health. Currently developing automation of security findings, including analysis and response.Lead SME / Architect for Zscaler Secure Web gateway, including GRE tunnels; client-based protection; policy configuration and enforcement; location designations and corresponding firewall configurations; ZPA-SIPA – 230 external applications served.Currently Lead Information Security Architect Consultation for Duke Health Information Security Office that included: Salesforce, EPIC EMR, Mulesoft API gateway, Nutanix, QGenda, SAS Data Integrations, EMS room Scheduling, TAVR Imaging systems, Experian Passport, GenomOncology, Pharmtrac Software and many more. Additional proprietary Duke applications, including RADx-UP application development and deployment hosting National Institute Health Covid-19 Data.

Education

• Penn State College of Information Sciences and Technology

  Graduate Certificate, Information Systems Cyber Security

  2013 — 2015

• Dakota State University

  (In Progress) Doctor of Philosophy - PhD, Cyber Defense (Technical)

  2025 — 2028

• Penn State College of Information Sciences and Technology

  Master's Degree: Information Sciences, Cyber Security and Information Assurance

  2013 — 2016

• Bryan College

  Bachelor's Degree

Skills

• Business Process Improvement
• Data Center
• Software as a Service (Saas)
• Computer Forensics
• Fraud
• Leadership
• Network Administration
• Project Management
• Consulting
• Strategy
• Program Management
• Business Analysis
• Customer Relationship Management (Crm)
• Cross-Functional Team Leadership
• Process Improvement
• IT Strategy
• Information Security
• Information Technology
• Information Security Management System (Isms)
• Itil
• Business Intelligence
• Change Management
• Security
• Enterprise Software
• Enterprise Architecture
• Iso 27001
• Fraud Investigations
• Litigation Support
• Management