Security Architecture
Enterprise security architecture, Zero Trust, cloud security, application security, threat modeling, architecture reviews, control design, standards, and guardrails.
SECURITY ARCHITECTURE · TECHNOLOGY LEADERSHIP
Building security
that enables business.
Douglas Leidgen Principal Security Architect
Cybersecurity architect and technology professional with 30 years of experience designing, securing, and modernizing complex enterprise environments.
30+Years in technology
70%Security ticket volume reduction
$2.2MAnnual cost reductions
Selected outcomes from enterprise security initiatives.
ENTERPRISE SECURITY / CLOUD / AI & AGENTSSCROLL TO EXPLORE ↓
01 / ABOUTSecurity with
Security with
purpose.
I translate business, risk, and compliance requirements into practical enterprise security solutions.
My experience spans security architecture and engineering, AI and agent security, cloud and application security, threat modeling, Zero Trust principles, regulatory compliance, and enterprise risk. I advise leadership and technology teams on architecture strategies, technical controls, and emerging technologies.
With a foundation in infrastructure, software engineering, virtualization, security operations, and regulated financial environments, I connect technical execution to business outcomes.
ArchitectureRisk reductionBusiness enablement
02 / EXPERTISE
Areas of focus.
Architecture, engineering, and leadership capabilities developed across enterprise environments.
AI & Agent Security
AI security architecture, Model Context Protocol (MCP), MCP server security, agent identity and access, tool-execution security, AI governance, secure integration, and risk management.
Security Platforms
CSPM, SSPM, CNAPP, WAF, ASPM, IAM, MFA, security automation, SaaS security, and security technology evaluation and integration.
Cloud & Infrastructure
AWS, Windows Server, Cisco networking, VMware vSphere, virtualization, enterprise data centers, and distributed environments.
Application & Engineering
Python, Java, JavaScript, REST APIs, API integration, software development lifecycle, application security, security automation, and code security reviews.
Risk, Compliance & Leadership
NIST CSF and SP 800 series, PCI DSS, SOX, GLBA, STRIDE, risk management, executive advisory, technical mentoring, vendor evaluation, and cross-functional collaboration.
03 / EXPERIENCE
Career experience.
Security and technology leadership across global enterprises and regulated environments.
Sr. Principal Technology Specialist
McDermott International
Architect enterprise cloud, application, and AI security programs; advise stakeholders on risk, compliance, security controls, and enterprise technology strategy.
- Evaluate AI platforms and MCP implementations, including server Python code, integrations, security configurations, authentication, authorization, and least-privilege access.
- Developed a STRIDE-based threat modeling and risk assessment methodology for service delivery and software development processes.
- Serve as technical owner for CSPM, SSPM, CNAPP, WAF, ASPM, and security automation platforms; evaluate vendors and architectural integration.
- Architected an AI-enabled Security Operations automation platform that reduced security ticket volume by 70% and mean time to respond by 95%.
- Develop Python automation and API integrations for platform metrics collection and support-ticket remediation.
- Developed a security control analysis methodology identifying gaps, redundancies, and overlapping services, contributing to $2.2 million in annual cost reductions.
Information Security Manager
Vroom
Designed and managed risk-based technical and administrative security controls aligned with CCPA, SOX, PCI DSS, and NIST CSF.
- Led internal Security Engineering and two managed security service provider teams totaling 27 security professionals.
- Led enterprise deployment of Okta IAM and MFA for employees and strategic partners, completing the initiative 15% ahead of schedule and within budget.
- Redesigned employee onboarding and offboarding controls with IT and HR leadership, achieving a 92% reduction in audit deficiencies.
- Collaborated with business, compliance, technology, and service-provider teams to implement and manage enterprise security controls.
Sr. Systems Administrator
Willbros Holdings
Architected and managed AWS cloud infrastructure and enterprise applications, with technical leadership and mentorship for nine IT professionals.
- Supported security, server, storage, virtualization, database, and hosted application environments while maintaining availability, integrity, and confidentiality.
- Architected a redesign of the J.D. Edwards ERP platform, reducing financial-report generation time by 94%.
- Worked with business stakeholders and vendors to deliver scalable infrastructure and application solutions.
Sr. Microsoft Engineer
American Express
Engineered enterprise server, network, virtualization, and data center infrastructure in a regulated financial-services environment.
- Architected and implemented VMware vSphere hosting and standardized virtual machine architectures for consistent deployment.
- Established data center standards and procedures aligned with ITIL and PCI DSS requirements.
- Supported SOX, GLBA, and PCI DSS audits, Change Advisory Board reviews, and production launches for financial and travel services.
04 / CREDENTIALS
Credentials & education.
Professional certifications
- CISSPISC2 Certified Information Systems Security Professional
- Security+ CECompTIA
- AWS Cloud PractitionerAmazon Web Services
- Project+CompTIA
- ITIL Foundation v3ITIL
Additional certifications
Microsoft MCSE, MCSA, MCP · Cisco CCNA · WGU Certificate: Front-End Developer
Education
BACHELOR OF SCIENCEComputer Software Engineering
Western Governors University
Austin, TX
05 / CONTACTLet's connect on
Let's connect on
what's next.
For conversations about enterprise security architecture, emerging technology, and security leadership.