Senior IT Security & Infrastructure Leader

25+ years building security programs that hold up under scrutiny.

Entrepreneurial, results-driven IT Security & Infrastructure Leader with a track record of building security programs, engineering resilient networks, and leading cross-functional IT teams at mid-market and enterprise organizations — managing enterprise PCI DSS compliance, deploying endpoint protection at scale, and translating complex security risk into business-aligned strategy.

Get in touch View experience
25+
Years in IT security & infrastructure
90K+
Secrets managed in production PAM
5,600
Endpoints secured enterprise-wide
Zero
PCI audit failures on record
01

Professional Summary

Entrepreneurial, results-driven IT Security & Infrastructure Leader with 25+ years of progressive experience building security programs, engineering resilient networks, and leading cross-functional IT teams at mid-market and enterprise organizations.

Proven track record managing enterprise compliance programs (PCI DSS), deploying endpoint protection at scale, and translating complex security risk into business-aligned strategy.

At a Glance
  • LocationJacksonville, FL
  • EmailBrian@BrianHolden.com
  • Phone904-404-2500
  • LinkedIn/in/briankellyholden
02

Areas of Expertise

Security Operations

PCI DSS Compliance

Cloud Architecture

Endpoint Detection & Response

Privileged Access Management

Vulnerability Management

Business Continuity Planning

IT Budget Management

03

Professional Experience

July 2022 — Present

Information Security Senior Operations Engineer

Wawa, Inc.
  • Engineered and maintained a large-scale on-premises Privileged Access Management environment supporting 90,000+ secrets across a distributed, high-availability Delinea Secret Server infrastructure.
  • Partnered with cross-functional teams to ensure the PAM platform met evolving security requirements, supporting patching cycles and contributing to architecture decisions for a high-availability, enterprise-critical credential store.
  • Maintained detailed operational runbooks and documentation for the Secret Server environment, supporting knowledge transfer and reducing single-point-of-failure risk on a business-critical platform.
November 2020 — July 2022

Network Security Manager

TDS | Transcor Data Services, LLC
  • Owned and maintained PCI DSS compliance posture across the organization, coordinating with QSA and internal stakeholders to ensure continuous audit readiness.
  • Led cloud architecture and design initiatives, translating business requirements into secure, scalable cloud infrastructure solutions.
  • Managed and coordinated code deployment pipelines, enforcing security standards and change control processes across development and production environments.
2015 — 2020

Security Engineer

Stein Mart, Inc.
  • Spearheaded the design and implementation of endpoint security across 5,600 devices enterprise-wide using Cylance Protect & Optics, reducing endpoint exposure across all retail locations.
  • Built and owned the company's Vulnerability Management Program, implementing and maintaining Rapid7 Nexpose, AppSpider, and Metasploit Pro as core toolchain components.
  • Sustained continuous PCI DSS compliance, with zero failures across all external audit cycles, by owning the quarterly ASV scan program, coordinating annual penetration testing, and driving timely vulnerability remediation across in-scope systems.
  • Implemented Thycotic Secret Server for enterprise-wide privileged account management, providing centralized credential governance.
  • Established support for RSA Data Protection Manager, delivering enterprise encryption key management across the organization.
2014 — 2015

Network Engineer

Advanced Disposal, Inc.
  • Served as lead project manager for a corporate-wide VoIP conversion spanning 230+ locations, coordinating Cisco and Brocade infrastructure across data center, LAN/WAN environments.
  • Standardized network documentation across the department, improving consistency and reducing mean time to resolution for field engineering teams.
  • Established a multi-user FileMaker database solution to consolidate project tracking across multiple spreadsheets, improving visibility and status reporting to leadership.
2010 — 2014

Director of IT

Pegasus Technologies, Inc.
  • Managed a $2.8M annual IT budget, overseeing all technology planning, procurement, and execution across network operations, systems administration, and infrastructure.
  • Guided the organization through a Microsoft Licensing Audit with a zero-dollar true-up, demonstrating full compliance maturity and process discipline.
  • Implemented virtualization and capacity planning strategies to sustain 7×24×365 uptime across a globally distributed environment.
  • Pioneered a corporate Transformation Project enabling secure remote access to network resources from multiple locations through complex network routing design.
2000 — 2009

Senior Network Engineer

Fleet One, LLC
  • Architected and maintained all WAN connections using Cisco routers, PIX firewalls, and ASA devices to partner networks handling financial transaction and supporting data.
  • Developed the corporate Business Continuity/Disaster Recovery Plan with tiered recovery levels scaled to incident severity, protecting a 24/7 payment processing operation.
  • Designed and implemented a multi-server Asterisk VoIP system, replacing a 480-port legacy IWATSU ADIX PBX.
  • Led Layer 3 switching network redesign, improving VoIP call quality through targeted latency reduction and enhanced throughput monitoring.
04

Certifications & Affiliations

ISC2

CISSP · CCSP · SSCP

Microsoft

Azure Fundamentals · Microsoft Certified Professional

ISACA

AAISM — In Progress

Professional Affiliation

InfraGard Member — FBI-affiliated public-private partnership for critical infrastructure protection.

Open to Conversations

Let's talk security.

Open to conversations about security program leadership, IT infrastructure, and roles where 25+ years of hands-on and strategic experience would be useful.

Brian@BrianHolden.com