My career in technology began over 20 years ago as a developer, building high-volume, production-based systems using open source technologies like Linux, Apache, MySQL, and early web frameworks. I loved the challenge of creating scalable, highly available systems that could handle real-world demands.
As I gained experience, I naturally progressed into technical management, leading development teams and overseeing complex projects. This role taught me the importance of balancing technical excellence with business objectives, managing resources effectively, and communicating complex concepts to diverse stakeholders.
The evolution into security consulting happened organically. As payment processing became increasingly central to the systems I was building and managing, PCI DSS compliance became a critical requirement. What started as a necessity quickly became a passion. I pursued my CISSP certification and dedicated myself to mastering the intricacies of payment security and compliance frameworks.
Over the past two decades, I've specialized in PCI DSS across all major versions (V2.0 through V4.0), as well as PA-DSS and PCI PIN standards. I've coordinated countless audits, conducted comprehensive security assessments, and helped organizations of all sizes build and maintain effective compliance programs.
Today, I bring this unique combination of development expertise, management experience, and security specialization to every engagement. I understand that security isn't just about technology—it's about people, processes, and creating sustainable solutions that work in the real world.