Paul Sliwinski

Enterprise Azure Governance & Compliance

• Governed and enforced compliance across more than 750,000 Azure resources using custom Azure Policies, RBAC, and automated remediation workflows.
• Designed and deployed enterprise-wide Azure Policy initiatives to standardize resource configuration and enforce secure-by-default cloud practices.
• Collaborated with Cyber Policy Governance (CPG) to implement 50+ CIS Level 1 Benchmark controls, enhancing security compliance across Azure resources.
• Ensured adherence to CIS and NIST security guardrails across global Azure environments.
• Automated compliance reporting and remediation using PowerShell, Azure CLI, and KQL.

Global Infrastructure Reliability & Security

• Deployed Private DNS Resolvers across Asia-Pacific, South America, Europe, and the U.S., ensuring global reliability and secure access to internal services.
• Implemented Zero Trust segmentation using NSGs & ASGs, reducing attack surface and lateral movement risk.
• Deployed VNet Flow Logs across most Azure regions to enhance monitoring, threat detection, and network optimization.
• Supported resiliency initiatives under Chevron's SFA program, contributing to enhanced cloud reliability and security posture.

Cost Optimization & Resource Standardization

• Migrated 10,000+ Azure VMs from custom boot diagnostic storage to managed storage using PowerShell, delivering more than $100K in annual savings.
• Updated 13,000+ storage account lifecycle rules, reducing data access charges and improving lifecycle consistency.
• Implemented global storage governance policies enforcing TLS 1.2, HTTPS-only access, key rotation, and secure configuration.
• Established Azure Private Marketplace to restrict deployment to only approved, secure resources across the enterprise.

Automation & Engineering Excellence

• Built PowerShell automation for global policy cleanup, endpoint updates, role assignment backups, and storage configuration changes.
• Developed tooling to enforce diagnostic logging, resource configuration guardrails, and policy-driven remediation at scale.
• Supported multi-region deployments, resource standardization, and secure cloud architecture across Chevron's global footprint.

Key Accomplishments

• Delivered more than $100K in annual savings through VM diagnostic storage optimization.
• Reduced enterprise storage access costs through lifecycle rule automation.
• Strengthened cloud security posture through governance, segmentation, and CIS compliance.
• Ensured 100% service availability through global DNS resolver deployments.