David Nelson
Thornton,CO
Summary
Experienced Enterprise Systems Specialist with a strong focus on Google Workspace Administration and Identity Access Management. Proven ability to engineer secure environments and mitigate threats, enhancing organizational security posture.
Overview
22
22
years of professional experience
1
1
Certification
Work History
Enterprise Systems Specialist
Boulder Valley School District
Boulder, CO
08.2018 - Current
- Assisted InfoSec as an interim analyst to utilize Google Vault for eDiscovery, legal holds, and CORA requests maintaining data integrity and chain of custody for internal investigations for about a year.
- Engineered and maintained a secure Google Workspace environment for 30,000+ of users, implementing Least Privilege access models to reduce the organizational attack surface.
- Utilized the Security Investigation Tool to identify, triage, and remediate sophisticated phishing campaigns and spoofing attempts targeting staff and students.
- Collaborated with the networking team to validate SPF, and DMARC records, significantly reducing domain impersonation and improving email deliverability security.
IT Sales Associate
Countertrade Products
Arvada, CO
04.2017 - 08.2018
- Ensured 100% compliance with the Trade Agreements Act (TAA) for all federal hardware acquisitions, mitigating supply chain risks and ensuring adherence to FAR/DFARS regulations.
- Facilitated a $1M high-security mobile deployment for the Defense Information Systems Agency (DISA), providing specialized, locked-down Samsung Galaxy tablets with a modified version of Knox.
- Advised clients on the selection of hardware with integrated security features, such as TPM chips and hardware-level encryption, to meet evolving cybersecurity mandates.
- Managed the end-to-end delivery of hardened hardware solutions, focusing on restricted BIOS configurations and disabled peripheral vulnerabilities to prevent data leakage.
IT Service Desk Analyst
SAIC
Broomfield, CO
02.2016 - 04.2017
- Enforced strict Identity, Credential, and Access Management (ICAM) protocols within a federal environment, utilizing PIV (Personal Identity Verification) cards and RSA SecurID tokens for multi-factor authentication (MFA).
- Managed user lifecycle operations (onboarding/offboarding) for sensitive pension benefit systems, ensuring immediate revocation of access to prevent orphaned accounts and unauthorized entry.
- Maintained a Public Trust Clearance, adhering to federal security standards for handling sensitive financial and Personal Identifiable Information (PII) for millions of pension participants.
- Identified and escalated suspicious security events, including potential account compromises and unauthorized hardware attachments, acting as the first line of defense for the SOC.
Data Feed Programmer
Your Store Wizards
Laguna Hills, CA
08.2010 - 04.2017
- Engineered and optimized automated data pipelines (feeds) for major e-commerce platforms including Amazon, Google, and Bing, ensuring 100% data accuracy and structural integrity.
- Developed custom scripts to sanitize and validate outbound data, preventing injection attacks or the accidental exposure of sensitive internal metadata.
- Conducted regular audits of datafeed logic to ensure strict adherence to platform-specific security and privacy policies (e.g., Google Merchant Center and Amazon MWS API requirements).
Programmer
Your Store Wizards
Laguna Hills, CA
08.2004 - 08.2010
- Developed and customized high-volume e-commerce storefronts on the Yahoo Store platform, implementing secure coding practices to mitigate common vulnerabilities such as Cross-Site Scripting (XSS) and SQL injection.
- Oversaw the integration of secure checkout workflows, ensuring the protection of sensitive financial data and maintaining compliance with e-commerce security standards.
- Managed merchant-level permissions and API access keys, enforcing the principle of least privilege to ensure only authorized developers and staff had access to sensitive store back-ends.
Education
Bachelor of Science - Liberal Studies
California State University, Fullerton
Fullerton, CA06-2009
Skills
- Cloud & Admin: Google Workspace Admin Console, Google Cloud Platform (GCP), & Chrome Browser Cloud Management
- Security Tools: RSA SecurID, PIV/CAC Smart Cards, Google Security Center, Google Vault, & OAuth 20 Controls
- Programming: JavaScript, Python (Datafeeds), HTML/CSS, Regex, & API Integration (REST/JSON)
- Networking/Email: SPF, DKIM, DMARC, HTTPS/TLS, & SFTP
- Threat Detection & Mitigation: Skilled in log analysis, automated alerting, and investigating phishing/spoofing via Google Security Investigation Tool
- Identity & Access Management (IAM): Expert-level administration of Google Cloud Identity, MFA enforcement, and PIV/RSA credentialing
Certification
- CompTIA Security+: I am currently in the process of studying for this exam.
Timeline
Enterprise Systems Specialist
Boulder Valley School District
08.2018 - Current
IT Sales Associate
Countertrade Products
04.2017 - 08.2018
IT Service Desk Analyst
SAIC
02.2016 - 04.2017
Data Feed Programmer
Your Store Wizards
08.2010 - 04.2017
Programmer
Your Store Wizards
08.2004 - 08.2010
Bachelor of Science - Liberal Studies
California State University, Fullerton