Senior Federal Healthcare AppSec Engineering Manager

P U R V I P A T E L

• Active Public Trust • PSM I • Security+ SY0-601

847-***-**** • *****.******@*****.*** • LinkedIn • Chantilly, VA E X E CUTIVE SUMMARY

Results-driven Senior level Manager with 15+ years of progressive leadership in federal healthcare IT, driving secure software delivery across DoD and VA environments. Proven track record owning enterprise-wide Application Security programs spanning 50+ healthcare applications, scaling Agile/DevSecOps engineering organizations, and achieving rigorous regulatory compliance

(FedRAMP, RMF, DISA STIGs, Section 508/WCAG 2.x). Holds (T5) clearance with deep hands-on experience in C#/.NET, cloud infrastructure (AWS/Azure), and healthcare interoperability standards. Seeking a Senior level Manager role to drive mission-critical federal health IT modernization at scale. CORE COMPETENCIES

• Engineering Team Leadership (10-

15+ engineers)

• DevSecOps & CI/CD Pipeline

Ownership

• FedRAMP / RMF / DISA STIG

Compliance

• Application Security (AppSec)

Program Mgmt

• Section 508 / WCAG 2.0–2.2

Accessibility

• Healthcare Interoperability (HL7 /

FHIR)

• Agile / Scrum Scaled Delivery (PSM I)

• AWS / Azure Cloud & Infrastructure

Hardening

• Stakeholder & Executive

Communication

P ROFESSIONAL E X P E R I E NCE

Software Engineering Manager / Technical Lead

Kreative Technologies

Client: 3M Solventum Corporation DoW VA Fairfax, VA April 2019 – Present

Domain: Federal & Commercial Healthcare IT — DoD, VA, SLED Agencies Scope expanded 2022–present: Role evolved from hands-on delivery management to enterprise program ownership — directing AppSec, WCAG compliance, and FedRAMP/RMF governance across a 50+ application federal healthcare portfolio. Enterprise AppSec & Security Program Leadership

• Owned enterprise-wide AppSec program spanning 50+ healthcare applications across DoD, VA, and global agency clients; directed end-to-end vulnerability risk mitigation lifecycle—from static analysis triage (Fortify, Checkmarx) through POAM remediation—reducing critical/high vulnerability backlog by an estimated 60%+ across active delivery streams.

• Established DevSecOps culture by integrating automated static code analysis (SAST) and dynamic testing into CI/CD pipelines, enabling continuous compliance validation against DISA STIGs, Application Server SRGs (Tomcat/Apache), and Internet Explorer STIGs on AWS and Windows environments.

• Directed RMF and FedRAMP documentation for Authority to Operate (ATO) packages, partnering with ISSOs, security architects, and federal agency contracting officers to meet DoD and VA compliance gates for commercial healthcare software.

Engineering Organization & Team Leadership

• Led and scaled a multi-disciplinary engineering organization of 10-15 engineers across 2-3 concurrent delivery programs; established career growth pathways, mentorship frameworks, and performance management systems that reduced attrition and increased team velocity.

• Drove Agile/Scrum maturity across 2 engineering streams—facilitating Sprint Planning, Daily Standups, Retrospectives, and Backlog Grooming—improving sprint predictability and accelerating feature delivery cadence.

• Served as executive bridge between engineering teams and senior leadership/product stakeholders, translating complex compliance requirements and technical risk into actionable program roadmaps aligned to business objectives.

• Enabled federal market access for a portfolio of 50+ commercial healthcare applications by achieving and maintaining DoD and VA compliance gates (FedRAMP, RMF, DISA STIGs, Section 508) — directly qualifying products for COTS procurement across federal agencies and expanding the organization's footprint in the federal health IT market. Section 508 / WCAG Accessibility & COTS Federal Qualification

• Directed enterprise Section 508 accessibility lifecycle for a portfolio of legacy healthcare software products, aligning architectures with WCAG 2.0, 2.1, and 2.2 standards to successfully qualify commercial-off-the-shelf (COTS) products for procurement across Federal and SLED (State, Local & Education) agencies.

• Spearheaded accessibility testing and remediation programs leveraging JAWS, ArcToolKit, automated validation frameworks, and keyboard navigation testing—mitigating legal, contractual, and reputational compliance risk across the healthcare product portfolio.

• Evaluated and integrated AI-assisted code review tooling (GitHub Copilot) into engineering workflows, establishing governance guardrails for AI-generated code in regulated federal healthcare environments. Lead / Senior Software Engineer

Centene Corporation Bethesda, MD

October 2013 – April 2019

Domain: Healthcare Payer — Commercial & Medicaid Health Plans

• Led backend architecture and delivery of enterprise ETL pipelines and financial data infrastructure handling complex claims processing and member engagement logic for multi-million-member health plans; optimized system failover, data integrity, and pipeline resilience. (C#, SQL Stored Procedures, SSIS, SQL Server)

• Architected and delivered healthcare member portal APIs integrating third-party biometric/health data vendors with Angular-based frontend systems, enabling real-time health insights delivery to plan members. (C#, .NET, Entity Framework)

• Maintained and extended Web API layer receiving HL7-formatted data feeds from third-party vendors and orchestrating bidirectional member data synchronization across enterprise systems.

• Led and mentored a team of 3–5 engineers on automated file processing, Windows service implementations for import jobs, and database mirroring/failover configurations supporting high-availability member data platforms. Software Development Manager / Lead Engineer

Preferred Sands Philadelphia, PA

May 2011 – October 2013

• Managed full SDLC delivery across multiple software projects, enforcing vendor compliance standards for code management, data security, and production implementation across ERP and asset management platforms.

• Held budget and resource accountability across multiple engineering delivery programs, balancing tooling investments, staffing allocation, and vendor licensing to sustain delivery velocity within organizational cost constraints.

• First to implement Infor ION integration between Maximo Asset Management and Infor SyteLine ERP 8.2.11; led ERP customization across EDI, invoicing, shipping, and PO approval workflows.

• Chaired development and implementation of department programs, systems, and SOPs; developed functional and system design specifications for company applications.

Software Developer / Project Manager

Mill Creek Systems Inc. Arlington Heights, IL

February 2006 – June 2007

• Led full SDLC as Project Manager for Target Corporation retail CAD engineering tools project; delivered automated store fixture design system replacing manual processes, including intelligent BOM reporting and database-driven validation rules. Earlier Experience: Software Developer — Unique Industries Inc., Philadelphia, PA (Nov 2009–May 2011) • Programmer Analyst — INX International Ink Co., Chicago, IL (Jul 2007–Nov 2009) T E C HNICAL SKILLS

Languages C#, Java, Python, PowerShell, JavaScript, C, C++, VB.NET Web / Frameworks .NET / ASP.NET MVC, Angular, Web API, Entity Framework, HTML, CSS Cloud & DevOps AWS (EC2, S3, Lambda, IAM, CloudWatch), Microsoft Azure DevOps, CI/CD Pipelines, Infrastructure as Code

Security & Compliance Fortify (SAST), Checkmarx (SAST), DISA STIGs, SRGs, FedRAMP, RMF, CMMC, NIST SP 800-171, Zero-Trust Principles, HIPAA / HITECH, CUI Handling Healthcare IT HL7, FHIR (interoperability context), Section 508, WCAG 2.0–2.2, JAWS, ArcToolKit Databases SQL Server, MySQL, Oracle 9i, PostgreSQL, MongoDB Tools & Platforms JIRA, Git, GitHub, GitHub Copilot, SharePoint, Microsoft Visio, Lucidchart, Adobe Acrobat Methodologies Agile / Scrum (PSM I), SAFe concepts, DevSecOps, SDLC, ISO/CMMI alignment C E R T I F I CATIONS & T RAINING

• Professional Scrum Master I (PSM I) — Scrum.org, Oct 2021

• CompTIA Security+ SY0-601, Dec 2023

• AWS Cloud Practitioner Essentials (Training Completion)

• AWS Security Fundamentals (Training Completion)

E DUCATION

Bachelor of Science in Computer Science

Illinois Institute of Technology — Chicago, IL

December 2005

Contact this candidate