Steven F. Dominie
EY
Clearwater,FL
1
Certification
21
years of professional experience
Enterprise Security Executive experienced in developing global security architecture and risk management strategies. Achieved alignment across C-suite and cross-functional stakeholders through effective translation of technical risks into strategic initiatives. Focused on implementing secure architectures and enhancing cybersecurity measures while supporting cloud migration and digital transformation.
Work History
Security Architect – Assistant Director
3 Years 11 Months- Orchestrated the enterprise-wide Secure System Development Life Cycle (SDLC) reference architecture for the Enclave, streamlining engineering workflows and accelerating secure software time-to-market by 75%.
- Formulated global security blueprints leveraging TOGAF and SABSA frameworks to align technical infrastructure with overarching business growth strategies, protecting over 5M in corporate digital assets.
- Exercised governance over technical risk and architectural compliance by leading peer reviews and steering Enclave’s Architecture Review Board and Standards Committee.
- Embedded security requirements into client contract evaluations, transforming compliance into a competitive differentiator that secured 10M in new bookings.
- Enforced corporate risk posture across cloud ecosystems by defining and deploying Minimum Security Baselines (MSBs) aligned with FISMA, NIST 800-53, and NIST 800-171, mitigating regulatory liability by 50%.
- Managed and mentored a high-performing team of 3 junior and mid-level architecture professionals, enhancing talent development and resource allocation.
- Devised architecture artifact templates to standardize design methodologies, significantly reducing engineering redundancies across interdepartmental business units.
- Multinational professional services network and "Big Four" accounting firm.
Sr. Principal Security Architect - Security Services Advisor
5 Years- Part of a global team of solution architects, optimizing resource utilization, identifying critical skills gaps, and enforcing strict adherence to enterprise architecture controls.
- Spearheaded Verizon’s multi-year migration to AWS, GCP, and Azure by architecting secure cloud reference models, accelerating on-premises exit timelines by 50% while maintaining 100% compliance.
- Championed the enterprise adoption of Zero Trust architecture principles, significantly reducing the internal corporate attack surface and eliminating 75% of legacy network vulnerabilities.
- Mitigated third-party supply chain risk by directing security architecture assessments for all SaaS and external vendors, protecting Verizon infrastructure from downstream vendor breaches.
- Translated high-level business objectives into enforceable security strategies based on NIST 800-53 and Cybersecurity Framework (CSF), ensuring security integration aligned with business goals across multiple units.
- Engineered and integrated a standardized Secure Systems Development Life Cycle (SSDLC) into the Enterprise Architecture framework, reducing post-production code security defects.
- Formulated cyber intelligence advisories for customer CISOs and CIOs, translating threat feeds (US-CERT, internal libraries) into actionable corporate defense improvements.
- Advised strategic corporate clients on architectural threat modeling, integrating emerging security technologies to defend against modern infrastructure attacks.
- Designed and launched an automated release management dashboard utilizing Oracle BI, eliminating [X] hours of manual reporting and delivering real-time metrics to senior management.
- Global telecommunications giant and Fortune 50 industry leader.
Security Architect
11 Years- Consulted with state agency executives to analyze security postures, incident response plans, and risk strategies, systematically improving statewide cyber maturity.
- Spearheaded design, architecture, and deployment of state-level cyber range, coordinating cross-agency cybersecurity tabletop exercises to strengthen preparedness and collaboration.
- Engineered an Enterprise Security Assessment Service utilizing advanced asset discovery and vulnerability assessment frameworks to manage state infrastructure threats.
- Formulated a comprehensive statewide Risk Management Framework aligned with FISMA, directly contributing to the State Strategic Cybersecurity Plan mandated for the Governor.
- Established enterprise digital forensics investigation program, authored end-to-end standard operating procedures, procured tools, and trained technical analysts to enhance incident response capabilities.
- Served as authoritative cloud subject matter expert, reviewed hybrid architectures and transitioned legacy engineering designs to modern IT operations, ensuring compliance and security.
- Oversaw management of central IT infrastructure for state government agency.
- Designed and implemented security frameworks to protect critical infrastructure and sensitive data.
- Conducted risk assessments and vulnerability analyses to identify potential threats and weaknesses.
Education
Bachelor of Science - Computer Engineering
Bachelor of Science - Electronic Engineering
Skills
Leadership governance
Secure SDLC (SSDLC)
Risk alignment
Vulnerability assessment
Enterprise Security Architecture
Security protocols
Compliance management
Secure SDLC
Cloud transformation
Business Risk Assessment
Executive Risk Management
Contract Risk Evaluation
Contract & Revenue Safeguard
Policy Formulation
Resource Allocation
Event management
Functional Leadership
Multi-Cloud Transformation
Policy development
Cybersecurity strategy
Endpoint security
Security information and event management
Certification
- 2008 ISC2 CISSP #100833
- 2017 ITIL Foundations
- 2018 Qualys Vulnerability Management Certificate
- 2022 - SABSA Chartered Security Architect - Foundation Certificate (SCF)
Patents
AT&T - System and method for monitoring DSL service provisioning
Government Clearances
Available upon request.
TECHNICAL ECOSYSTEM & FRAMEWORKS
• Architecture Frameworks: TOGAF, SABSA, Zachman, Enterprise Architecture Lifecycle
• Security Regulations: NIST 800-53, NIST 800-171, FISMA, CSF, FIPS, SOX, PCI-DSS
• Cloud Ecosystems: AWS Security, Google Cloud Platform (GCP), Microsoft Azure
• Methodologies: Zero Trust Architecture, SDLC / SSDLC, Risk Register Management, ITIL
• Infrastructure Systems: Cisco Routing/Switching, Checkpoint Provider-1, Oracle BI
Timeline
Security Architect – Assistant Director
EY
08.2022 - CurrentRead More
Sr. Principal Security Architect - Security Services Advisor
Verizon Corporate Information Security
01.2017 - 01.2022Read More
Security Architect
Georgia Technology Authority
01.2006 - 01.2017Read More
University of Central Florida
Bachelor of Science from Computer Engineering
Read More
University of Central Florida
Bachelor of Science from Electronic Engineering
Read More