# Richard Fenoglio Pottstown, PA | richardfenoglio.com | linkedin.com/in/richard-fenoglio --- ## Professional Summary Senior infrastructure and cloud engineer with 9+ years of experience spanning site reliability engineering, cloud architecture, security, compliance, and technical audit. Track record of stabilizing failing platforms, modernizing neglected environments, and designing scalable systems across AWS, hybrid datacenters, and regulated environments (FedRAMP, CMMC, PCI-DSS). Combines deep infrastructure expertise with a track record of leading teams and initiatives: built and led technical operations from the ground up, mentored and developed engineers, and owned engagements end-to-end across internal teams and external partners. Known for bridging technical and non-technical worlds, surfacing risk, building consensus, and driving outcomes across organizational boundaries. --- ## Core Competencies Technical Leadership • Team Leadership & Mentorship • People & Career Development • Infrastructure & Platform Engineering • Site Reliability Engineering • Cloud Architecture (AWS, Hybrid) • VMware (vSphere, NSX, vSAN) • Infrastructure as Code (Terraform, Ansible) • Automation & Scripting (Python, PowerShell, Bash) • CI/CD (Jenkins, GitLab) • Monitoring & Observability (Splunk, Prometheus) • AWS Services (EC2, Lambda, IAM) • Security & Compliance (FedRAMP, CMMC, PCI-DSS) • Disaster Recovery & Cyber Recovery • Identity & Access Management • Technical Audit & Risk Assessment • Stakeholder Communication • Cross-Functional Collaboration --- ## Professional Experience ### Coalfire — Chicago, IL **Site Reliability Engineer, Cloud Services** (Jul 2025 – Present) **Senior Consultant, Cloud Services** (Jun 2024 – Jul 2025) - Stabilized an at-risk FedRAMP client engagement by acting as dedicated technical lead, restoring trust through clear architectural guidance and delivery execution. - Implemented agile workflows and delivery tracking for an at-risk client engagement, achieving a significant turnaround in client satisfaction and communication despite an inherited decision to transition away. - Designed FedRAMP-ready cloud architectures incorporating zero-trust network access, ITSM-aligned change control, and scalable operational patterns. - Led FedRAMP discovery and architecture workshops for new clients, producing readiness roadmaps, risk assessments, and project plans that consistently converted to delivery engagements. - Automated complex configuration management asset discovery workflows, reducing inventory collection errors by 98% and eliminating a major source of compliance drift. - Diagnosed and resolved systemic AWS discovery and visibility issues impacting continuous monitoring and audit readiness. - Standardized engineering and operations documentation across MSS engagements and onboarded new team members against it, improving ramp speed, consistency, and troubleshooting effectiveness across the team. - Served as a trusted technical advisor to clients maintaining regulated cloud environments across AWS infrastructure, endpoint protection, and vulnerability management platforms. --- ### U.S. Bank — Horsham, PA **Senior Cloud Audit Specialist, Digital, Technology & Operations Services** (Aug 2023 – Jun 2024) - Served as technical authority for cloud and infrastructure audits, ensuring audit teams asked the right questions and accurately evaluated complex technical evidence. - Led a comprehensive audit of the enterprise cloud migration program, assessing technical design, financial governance, security controls, and operational readiness. - Bridged engineering, audit, and risk teams by translating modern cloud architectures into clear control implications and remediation actions. - Integrated evolving regulatory expectations and internal risk partner guidance into audit procedures to align reviews with emerging risk trends. - Supported non-technical audit teams when technology became a factor, preventing misinterpretation of evidence and improving audit accuracy and credibility. --- ### Ansys Government Initiatives (AGI) — Exton, PA **Senior Systems Engineer, Infrastructure Services** (Oct 2022 – Aug 2023) - Re-architected a multi-site VMware platform suffering from years of misconfiguration, delivering significant uptime improvements and eliminating recurring outages through a phased redesign. - Led adoption of governance controls across the infrastructure organization (change management, t-shirt sizing, and tagging strategies), driving cross-team buy-in that eliminated uncontrolled capacity growth and emergency hardware purchases. - Designed and launched a ground-up HPC compute and storage platform supporting hosted client workloads, achieving meaningful performance gains for Ansys Fluent and Mechanical environments. - Rebuilt Active Directory and RBAC architecture, correcting long-standing technical debt and aligning identity controls with CMMC requirements. - Implemented business-driven backup automation via self-service tagging, improving recoverability while reducing operational overhead. - Architected and validated disaster recovery and cyber recovery strategies, including an air-gapped clean-room environment. - Embedded CMMC readiness requirements into all infrastructure design and operational practices. --- ### The Vanguard Group — Malvern, PA **Project Manager, Global Technology Audit Services** (Jul 2021 – Oct 2022) **Senior Auditor, Global Technology Audit Services** (Nov 2019 – Jul 2021) - Promoted to Project Manager; owned audit engagements end-to-end, coordinating internal teams and external partners and directing the work of auditors and contract staff. - Evaluated and developed team members through formal performance reviews for 3-5 auditors and 1-3 contract staff per cycle, delivering feedback that directly influenced compensation and promotion decisions. - Co-developed and delivered a Cloud Infrastructure Audit Training program, upskilling the department, increasing efficiency, and reducing reliance on senior technical auditors. - Served as the department's technical authority on cloud and infrastructure audits during the enterprise AWS migration. - Identified compliance gaps in critical infrastructure areas that had gone undetected through prior review cycles. - Built automation and reporting tools using scripting, Excel, SharePoint, PowerBI, and PowerApps to streamline testing and documentation. --- ### Flexential — Denver, CO **Engineer, Professional Services** (Jul 2018 – Nov 2019) - Served as senior engineer for complex migrations, production recoveries, and compliance-driven infrastructure engagements. - Led high-risk migrations requiring precise orchestration to prevent data loss and minimize downtime. - Diagnosed catastrophic Active Directory corruption missed in initial troubleshooting. Designed and executed an unconventional recovery approach, rebuilding the forest from raw extracted data over a 3-4 day outage window, restoring operations for hundreds of users and preserving the client relationship. - Owned white-glove backup and disaster recovery implementation and testing across customer environments. - Managed patching and remediation for the full customer base, improving audit outcomes and reducing incidents. - Contributed to ITIL/ITSM adoption, standardizing service delivery and documentation. - Acted as Northeast Professional Services liaison to Sales, supporting pre-sales solutioning and drafting legally binding Statements of Work. --- ### MARS Technology, Inc. — Willow Grove, PA **CIO (Founding Team)** (Sep 2016 – Jul 2018) - Co-founded the company as one of three founders and built and led the technical operation, scaling to 10 clients, 100+ managed locations, and 2,500+ endpoints across four datacenters with a four-person team. - Owned architecture, delivery, and MSP operations across the business from founding through growth. - Architected the initial datacenter footprint and subsequent expansions, overseeing vendor selection and platform deployment. - Led client onboarding and delivery for SMB and mid-market customers, including regulated PCI environments. - Evaluated and integrated tooling to support endpoint, server, and mobile device management. --- ### Signature Systems, Inc. — Warminster, PA **Network Security Engineer** (Mar 2016 – Sep 2016) **Product Specialist** (Jan 2015 – Mar 2016) - Promoted to Network Security Engineer after 5+ months of functioning in the role while formally part of the support organization. - Supported nationwide rollout of a PCI-in-a-Box POS and back-office solution serving 3,500+ customers. - Co-led deployment efforts, owning endpoint configuration, UTM firewall integration, and SIEM tuning. - Built automation tooling that reduced deployment times by up to 75%. - Migrated the MSSP SIEM platform from AlienVault USM to LogRhythm. - Partnered with auditors and pentesters to harden platforms beyond PCI-DSS requirements. - Built a custom Sophos UTM management platform managing 2,500+ firewalls, reducing administrative effort by over 90%. --- ## Certifications - Vanguard Leadership Development Program — Graduate - AWS Certified Solutions Architect – Associate - AWS Cloud Practitioner - ITIL v4 Foundation