Stefan Maerz

Sr. Security Site Reliability Engineer

I currently work for Fastly, a globally distributed edge cloud network. In that role I support security operations by building and deploying security services across Fastly’s CDN.

• Deployment of endpoint security telemetry system (osquery and FleetDM) across 10k hosts
• Redesigned Kubernetes threat detection tooling with Falco across the Fastly control plane: 12 EKS and GKE clusters, 660 nodes, and 250 production workloads.
• Drove migration to new observability tooling for system monitoring, alerting, visualization, and response using Splunk, Prometheus, Alert Manager, OpenTelemetry, and Grafana. Redefined response processes resulting in observable behaviors and actionable alerts.
• Wrote custom Flask API to integrate desparate vulnerability management systems. Instrumented logging and prometheus metrics using the RED method to make service observable
• Security and operational incident response
• Redesigned patch management processes for security tooling

Sr. Cybersecurity Architect

I worked for Consolidated Nuclear Security (CNS), a contractor to the Department of Energy's National Nuclear Security Administration (NNSA). CNS manages The Y12 National Security Complex and Pantex Plant which manufacture nuclear weapon components.

• Security architect redesigning enterprise IAM/PAM/SSO strategy
• Develop strategic enterprise gap analysis of existing security capabilities
• Develop architecture for cloud services
• Develop Enterprise Zero Trust strategy
• Design HPC clusters

HPC Cybersecurity Engineer

I worked at Oak Ridge National Laboratory's National Center for Computational Sciences (NCCS)/Oak Ridge Leadership Computing Facility (OLCF). I was a cyber security engineer supporting Summit, Frontier, and Titan, three of the world’s fastest supercomputers.

https://en.wikipedia.org/wiki/Titan_(supercomputer)
https://en.wikipedia.org/wiki/Summit_(supercomputer)
https://en.wikipedia.org/wiki/Frontier_(supercomputer)

• Led incident response efforts for 1 APT sponsored campaign and 1 BEC campaign
• Led federated identity management initiative: including policy, architecture, systems engineering, and software development
• Build and maintain security services: Splunk, Bro/Zeek, Nessus, osquery
• Design and deploy 100 Gbps Bro network monitoring cluster
• Deployed endpoint detection and response tool osquery
• Development of security policy and architecture/design throughout the entire systems development life cycle of supercomputers
• Software development of a secure password vault based on smart card public key cryptography
• Management of services via Puppet and Kubernetes of security services
• Security architecture and security engineering design

Computer Information Security Specialist

I worked at Los Alamos National Laboratory (LANL), a contractor to The Department of Energy's National Nuclear Security Administration (NNSA). I worked in the Office of the CIO and provided support to LANL's Information Security Program, which provides information security governance to the Lab.

• Manage System Change Process: work with information security officers to analyze proposed changes, assess risk/vulnerabilities, and develop/recommend alternative architectures
• Develop and update Security Plans
• Security testing and evaluation
• Serve as LANL’s technical evaluator for the NNSA’s deployment of a common Archer deployment. Collaborated with DoE sites including Lawrence Livermore National Laboratory, Sandia National Laboratory, National Security Campus, NNSA HQ, and NNSA's Information Assurance Response Center (IARC)
• Serve the cyber security technical advisor on the advisory committee for LANL’s nuclear and hazardous waste tracking system

Georgia Institute of Technology

Information security track offered by the School of Computer Science in conjunction with the School of Cybersecurity and Privacy.
Completed 12 credit hours