CISSP
2026
ISC2
Career
Andy Ziber
IT & Security Leader · DevOps
IT and security leader who scaled infrastructure, security, and compliance for a medical device company as it grew from 40 to 150 people. Led IT, DevOps, and security through that growth, with hands-on expertise in AWS, Terraform, endpoint security, and ISO 27001. CISSP-certified.
Experience
Carlsmed
Carlsbad, CA
Manager of Information Technology
– Present
- Lead IT, security, and DevOps for a 150-person medical device company, managing a team of 4 and owning cloud infrastructure, endpoint security, and compliance end to end.
- Led the transition of IT from an outsourced MSP to an in-house function supporting all 150 employees and contractors.
- Run the security program under HIPAA and ISO 27001, including the ISMS, internal and external audits, and risk assessments.
- Contributed to Carlsmed's initial ISO 27001 certification as a management representative, participating in ISMS review through to successful certification.
- Deployed and tuned CrowdStrike and Datadog SIEM, establishing endpoint threat detection and centralized security monitoring across the environment.
- Rebuilt incident response plans, dropping mean time to resolution from 24 hours to 4 hours.
DevOps Engineer
–
- Owned AWS infrastructure across 10 environments.
- Moved provisioning to Terraform, replacing manual setup and cutting new-environment spin-up from 14 to 2 hours.
- Built CI/CD pipelines in TeamCity that reduced deploy time from 15 minutes to 4 minutes.
- Managed secrets and credentials with Vault across all production and non-production workloads.
- Standardized Git workflows for the engineering team.
IT Manager
–
- Ran day-to-day IT operations as the company scaled past ~80 people.
- Handled hardware, software, and services procurement, supporting rapid headcount growth.
- Partnered with engineering and other teams to integrate and secure new systems.
IT Specialist
–
- Set up and maintained workstations during the company's early growth from ~40 employees, including onboarding provisioning.
- Kept servers and networks running through peak periods.
Cerner Corporation
Kansas City, MO
System Engineer
–
- Monitored 8+ production systems and provided on-call infrastructure support.
- Worked firewall PPSM (Ports, Protocols, and Services Management) tickets.
- Resolved and escalated incidents with knowledgeable, responsive support.
Certifications
AWS Certified Cloud Practitioner
2023
Amazon Web Services
Education
M.S., Cyber Security Operations and Leadership
In progress
University of San Diego · San Diego, CA
Began
B.S., Information Technology
University of Missouri · Columbia, MO
Minor in Computer Science · Certificate in Cyber Security
Skills
- Infrastructure & Security
- AWS · Terraform · Vault · JumpCloud · Microsoft Entra · CrowdStrike · Datadog · Juniper Networks
- Languages & Tools
- Bash · PowerShell · Python · Git/GitHub · Linux/CentOS · Microsoft 365
- Frameworks
- HIPAA · ISO 27001 · CI/CD · Infrastructure as Code