Jonathan Schnittger

Hi!

I have over 18 years of experience in managing, designing, building and delivering complex software and information security solutions to the world’s largest organizations. During my career, I have led teams ranging in size from 2 or 3 developers to larger distributed teams across multiple time zones. I’m quality focused and pride myself on the work I have done, I am also able to effectively communicate to both management and technical sides of the business. This has been reflected not only in both colleague and customer feedback, but also in international recognition:

Multiple internal awards for quality, performance, and for going above and beyond
The 1E SLA Platform enabled the Veterans Association (VA) to go from an F rating to an A rating for Software Asset Management (as assessed by the US Congress)
iQSonar was the first product to be verified by Oracle LMS for licensing data and iQDataHub helped iQuate earn a Gartner "Cool Vendor" award.

I look forward to learning and bringing my knowledge and experience to solving the challenges and problems you and your organization might face.

Links of interest

If any of that sounds interesting, get in contact!

Experience

Principal Security Engineer, Product Security

Walmart (February 2018 - Present)
As a technical lead of the Walmart InfoSec Application Security team, I built out and delivered tools, applications, and InfoSec service offerings to enhance the security posture of one of the largest organizations in the world. These projects are rolled out to Walmart and their global brands, which involved collaboration with multiple different teams.

Achievements

Designed, and delivered the internal secrets detection infrastructure using a n-tier architecture (Microsoft .Net, running in Linux containers on Azure). This solution has scanned billions of lines of code and delivered findings directly into team backlogs. It has also shown material benefit to the organization, often finding issues before other systems or external bug bounty participants. Received the highest possible 'Top Performer' annual rating for my work in 2019 and was awarded the 'Make A Difference', 'Hackers Choice' and 'Associate of the Month' awards for my work.
Responsibilities

Working across team boundaries; Identifying, reporting, and triaging vulnerabilities; Development and deployment of tooling (requirements gathering, design, architecture and implementation); In addition, I also performed Subject Matter Expert and Champion roles for various projects:
- Design and development of an internal vulnerability management platform focusing on the request and execution of penetration tests and the life cycle of any findings.
- Identifying relevant standards such as OWASP ASVS for use in development, application testing and threat modelling (Shifting left).
- Reviewing and testing DAST/SAST/IAST solutions for integration into CI/CD pipelines.
- Worked with multiple teams and brands to help drive better practices and behaviors in relation to secure development and SDLC.
- Development of rules for detecting content and structures that indicate sensitive material.
- Assist in review of potential candidates and make recommendations regarding further progress.
- Integrate into existing services to pride cohesive, meaningful data to vulnerability owners and management.
- Identify and report both internal and external vulnerabilities and risks.
- Mentor and train both new hire and existing experienced associates.
- Review of projects prior to being open sourced.
- Presented to senior management regularly to show progress and wins.
Recommendations

Angelo Prado Senior Director, Product Security @ Oracle Cloud September 1, 2018, Angelo managed Jonathan directly at Walmart

Jonathan is among the best security development engineers I had the chance to work with, period.

He compliments top communication skills with an incredible wealth of experience in software development and innovative ideas. He is able to build and take ownership of existing code, design robust systems, and mentor other junior engineers through very complex problems.

Jonathan was instrumental in designing our secret management strategy at Jet, taking ownership of vulnerability management and contributing not only with solid software deliverables but also leading-edge security research.

I would recommend Jonathan to anyone looking for a genuinely passionate engineer with a talent for security.
Principal Engineer/Architect/Team Lead

1E (January 2014 - February 2018)

Tasked with helping to build out the Irish branch of 1E. I was responsible for the hiring of both development and quality assurance staff. In addition to this, I also researched possible new technologies and solutions and made recommendations based on proof of concept projects. Ultimately, I was tasked with the architecture and design of the next generation of 1E products with a specific focus on building web based, highly scalable and configurable systems.

Achievements

Patent Pending - Network Security Broker

Methods and systems to provide security for sending /receiving data over unsecured networks

AppClarity helps the US Department of Veteran Affairs (VA) take their FITARA Software Asset Management score from F to A

AppClarity is used to manage over $3 Billion in software licenses and has delivered savings of over $65 million

Responsibilities

Systems and security architecture, hiring, implementation, delivery and communication back to stakeholders.

Recommendations

Lisandro Pacheco Solutions Architect at Greenfinch Technology Ltd July 16, 2018, Lisandro reported directly to Jonathan

One of the strongest technical people that I've ever worked with is the best way to describe Jonny.

Over the 2 years that I've worked with Jonny while we both team leaders, we collaborated in different projects, being the highlight the delivery of a platform that allowed other teams to build products over it. Jonny was especially outstanding in understanding the business proposition and implementing the key features of the platform.

I do recommend Jonny, as he will be a great addition to any team.

Sumir Karayi Founder and CEO of 1E February 9, 2018, Sumir was senior to Jonathan but didn’t manage directly

Brilliant colleague and a friend to everyone in the team. Jonny was a star in every project as he is a committed and excellent developer. We wish him well for the future.

James Wilson VP Engineering @ iQuate and 1E December 1, 2011, James managed Jonathan at iQuate and 1E

Jonny shows great passion for his work. His formidable skills in technologies such as multi-threaded C#, jquery, web services, and T-SQL are only shadowed by his ability to stick through challenges that others twice his age fail at. You can always count on him to get it done right

Jason Keogh CEO @ iQuate, VP Product @ 1E March 3, 2010, Jason managed Jonathan at iQuate and 1E

Jonny is a skilled developer and a pleasure to work with. During his time in iQuate Jonny has been exposed to a multitude of different technologies at very low levels. Jonny takes great pride in his work and his opinion is always valued.
Principal Engineer/Architect/Team Lead

iQuate (July 2003 - August 2014)

Achievements

Patent Application - Enduring identification of a hardware or software

Method and system for unique enduring identification of a hardware or software entity within an it landscape

Responsibilities

Systems architecture, security architecture, hiring, implementation, delivery and communication back to stakeholders.

Recommendations

Owen Sullivan Software Development Manager - AWS CloudWatch January 29, 2014, Owen managed Jonathan indirectly at iQuate

Jonny is an insanely great full-stack Microsoft software developer, as skilled at front-end development as he is at back-end development. He has fantastic technical skills, intelligence and drive. His work as Senior Architect is quite simply world class. All his colleagues instinctively turn to him for help on the toughest technical problems. He has a passion for technology and building great products that causes him to constantly push himself and those around him to achieve more

Anthony Quigley Founder & Director at Digital Marketing Institute, Digital Marketing Evangelist and Entrepreneur, Advisor and Mentor March 2, 2010, Anthony managed Jonathan at eManageIT (iQuate)

Jonny was always focused and diligent and the task at hand. He is an effective team member and works well with a range of people. I would certainly recommend Johnny as a solid member in any development project team

Michael Surkan Building Social Communities for Software Engineers April 19, 2012, Michael was with another company when working with Jonathan at iQuate

Jonathan did an amazing job at clearly explaining the challanges and opportunities companies like his have in taking advantage of cloud computing on my podcast show (http://bit.ly/HWuew6). Jonathan is able to clearly explain complex technical issues in a way that listeners can understand. I would love to have Jonathan back on the show any time!

iQSonar

iQSonar is a client-less, multi-threaded solution that uses various protocols to remotely communicate with a wide variety of hardware/software configurations (switches, servers, databases, hosted applications, virtualization platforms). The information gathered is used to calculate various needs with regards to licensing, purchasing, configuration and growth. It can discover, identify and connect to almost any network enabled device to gather information. It specializes in differentiating virtual from physical hardware and it is designed to be as quick and accurate as possible. It has been used in a variety of network sizes (100,000 devices, 10,000 servers, 200+ domains) and topologies (LAN/WAN).

Achievements

iQSonar was the first product in the world to be officially verified by Oracle for License Reporting

Responsibilities

Service/threading architecture, database design, protocol identification and implementation. Research in to commands and best methods for retrieving configuration and hardware/software information for a variety of platforms including *nix and windows platforms and enterprise applications and databases.

iQDataHub

iQDataHub is a Data Warehouse designed to hold iQSonar data overtime in a cleansed and optimized way. It uses SSIS for ETL and moves data through several stages in to a final SQL Server 2012 warehouse schema. It takes iQSonar data and performs various cleansing methods to ensure that the data is presented in the best possible way. The data is stored over time so reports on change management and project progress can be generated and it is expected that it should handle several hundred datasets. The EDW is designed to allow dataset isolation and integrity, while allowing customers to merge data from external sources and link it to iQSonar data.

Achievements

iQDataHub is the database that powers iQAnalytics, which helped iQuate earn a Gartner "Cool Vendor" award

Responsibilities

Staging, Working set and EDW database design and optimization. Identification of ETL solutions and implementation.

iQAnalytics

QlikView based interface for reporting various licensing scenarios based on iQSonar and iQDataHub data.

Achievements

iQAnalytics helped iQuate earn a Gartner "Cool Vendor" award

Responsibilities

Report implementation and design

iQCMS

A custom database driven CMS. It uses custom Web Services, HTTP Handlers, AJAX (JavaScript). It is completely CSS theme-able. Pages are broken down in to components or controls and defined as rows in various tables. These components were then re-assembled in to HTML and JavaScript on request (Caching was also used). Pages could be stored on disk as Xml defined objects that were de-serialized into schema. This allowed the Pages to be re-assembled in different ways quickly; however the main goal was to implement multi-lingual pages in an easily maintainable way.

Responsibilities

Database design. Implementation of the CSS, JavaScript, jQuery. Design and creation of the custom handlers and web services.

iQNetScan (previously eNA)

A client-less inventory and asset management product. As a precursor to iQSonar it was not as fully featured and only scanned Windows servers. It did however store its results in either SQL Server, MySQL, Oracle or Xml data files.

Achievements

iQNetscan was the first multi-threaded architecture application in iQuate and started the company on its journey towards being internationally recognized

Responsibilities

Migration from Xml based storage to SQL server, Oracle and MySQL. Database, Plug-in, UI and report design.

iQStatus

A high availability, high volume transaction and performance and monitoring solution for datacenters. It allowed per minute monitoring of thousands of network devices across a wide variety of technologies and protocols.

Achievements

iQNetscan was the first multi-threaded architecture application in iQuate and started the company on its journey towards being internationally recognized

Responsibilities

Migration from Xml based storage to SQL server, Oracle and MySQL. Database, Plug-in, UI and report design.

Recommendations

Recommendations

Recommendations