Securing the Frontier: Cloud, AI, and National Security.
John Lake | TS/SCI Cleared | Security Engineer & Emerging Technology Cybersecurity Consultant
Bridging the gap between mission-critical defense and the future of AI security.
Based in Washington, D.C. — Available Remotely.
Executive Summary
I'm a security leader and engineer dedicated to defending the infrastructure that powers our future. With a decade of experience spanning Army Cyber Command, AWS, and Mandiant (Google Public Sector), I specialize in building resilient security programs for the most sensitive environments on earth.
My approach combines the rigor of national security with the agility of modern cloud-native engineering. Whether it's securing frontier AI models, architecting multi-cloud zero-trust environments, or leading $3M digital transformations, I focus on one thing: reducing the attack surface without slowing down the mission.
Core Competencies
Strategic Leadership
Cloud & Infrastructure
Defense & AI Security
Selected Impact
DoD IL5 Agentic AI Security Architecture
- Authored a DoD IL5 ATO Security Strategy and 28-control SRTM across 6 domains (IAM, Agentic Security, Network, Data, DevSecOps, Observability)
- Secured cross-cloud AWS/GCP Vertex AI agent workflows via Workload Identity Federation (WIF)
- Established Compliance Inheritance model, VPC Service Controls, Pydantic schema validation, and Semgrep/TruffleHog CI/CD checks
AI-Powered Security Compliance Agent
- Built and deployed an AI sub-agent to automatically audit proposals and SOWs against Google SAIF, FedRAMP, and DoD compliance baselines
- Merged Proposal Reviewer and Security Reviewer into a unified comprehensive agent for streamlined workflow
- Standardized Gemini Enterprise, Gemini for Government, and Classified AI SOW templates organization-wide
$3M Defense Industrial Base Security Overhaul
- Led end-to-end IT/OT and SCADA transformation for a DIB client
- Built comprehensive Splunk Cloud SIEM covering IT and OT networks
- Managed SOC as MSSP across VMware Cloud, CrowdStrike, Okta, AWS, Azure, Fortinet, Nozomi, Gigamon
National Security Firm Multi-Cloud Assessment
- Led security workstream for partner enablement supporting AWS-to-GCP replatforming
- Executed AWS Multi-Account Security Assessment analyzing 83,000+ configurations across 7 accounts
- Identified critical database exposures and delivered structured remediation guidance
Government Sector Information Assurance Program
- Built and led Government Sector Information Assurance Team from scratch
- Drove RMF compliance across satellite network infrastructure (NIST 800-53, CMMC, ISO 27001, STIGs)
- Led classified systems strategy: Cross Domain Solutions, TRANSEC, S/TS/GOV Clouds, FedRAMP, DOD IL5
Counter Infiltration & Zero Trust Deployment
- Led Discovery and Counter Infiltration (DCI) efforts validating detections on partner networks
- Re-engineered network architecture to implement zero-trust, isolating adversary presence
- Deployed distributed IDS solutions (Security Onion, ELK SIEM, Endgame) across multi-state operations
Experience
Mandiant · Google Public Sector
Security Engineer & Emerging Technology Cybersecurity Consultant
APR 2024 – PRESENT
Reston, VA
- Authored a DoD IL5 ATO Security Strategy and 28-control Security Requirements Traceability Matrix (SRTM) across 6 domains for a US Army agentic AI program, securing cross-cloud AWS/GCP Vertex AI agent workflows
- Led $3M IT/OT and SCADA transformation for DIB client; built Splunk Cloud SIEM covering IT/OT networks, managed SOC as MSSP across VMware Cloud, CrowdStrike, Okta, AWS, Azure, Fortinet, Nozomi, Gigamon
- Executed AWS Multi-Account Security Assessment for a national security technology firm (AWS-to-GCP replatforming), analyzing 83,000+ configurations across 7 accounts to identify critical exposures
- Delivered Security Technical Infrastructure Design Document and foundations workbook for a state government modernization initiative; presented Security Engineering plan to customer executive board
- Architected HIPAA and CMMC-compliant Secure Research Enclave design for a major public university within existing GCP footprint
- Built and deployed an AI sub-agent to automatically audit proposals and SOWs against Google SAIF, FedRAMP, and DoD compliance baselines
- Standardized Security Engineering SOWs, consolidating Gemini Enterprise, Gemini for Government, and Classified AI SOWs into modular templates
- Spearheaded enterprise-wide AI security initiatives, integrating frontier models (Claude Enterprise, Gemini for Government) while establishing governance and security controls
- Led cloud and AI security assessments for municipal, state, and higher education clients across AWS, GCP, and hybrid environments
Amazon Web Services
Information Systems Security Manager (ISSM)
SEP 2023 – APR 2024
Herndon, VA
- Built and led Government Sector Information Assurance Team
- Conducted Risk Mitigation Framework (RMF) across satellite network infrastructure
- Led classified systems strategy: Cross Domain Solutions, TRANSEC, S/TS/GOV Clouds
- Drove compliance roadmaps: FedRAMP, FISMA, DOD IL5, CMMC
Amazon Web Services
Cloud Security Consultant
JUN 2022 – AUG 2023
Herndon, VA
- Conducted dozens of Deliverable Security Reviews across all AWS services
- Led multiple ATO engagements: WorkSpaces, Direct Connect, SageMaker, Cross-Domain Solutions
- Led Landing Zone Accelerator deployment for DIB Academic Institution (CMMC 2.0)
- Conducted Engagement Security Assessments across data handling and endpoint protection
United States Army
Senior Cyber Network Defense Program Manager / Technical PM
OCT 2016 – MAY 2022
Multiple Locations
- PM for red/blue simulation exercises; managed cross-functional geographically dispersed teams
- Led Discovery and Counter Infiltration (DCI) efforts on partner networks
- Implemented zero-trust via VRF network segmentation
- Deployed distributed IDS (Security Onion, ELK, Endgame)
- Authored TTPs and SOPs organization-wide
Education & Certifications
Education
M.S. Management of Information Technology
University of Virginia · McIntire School of Commerce
M.S. Homeland Security, concentration Cybersecurity
University of the District of Columbia
B.S. Computer Information Systems
Virginia Commonwealth University
Certifications
How I Work
Security as an Enabler
I build security programs that accelerate the mission, not slow it down.
Threat-Informed Defense
Every control I implement is mapped to real adversary TTPs, not checkbox compliance.
Bridge Builder
I translate between the boardroom, the SOC, and the engineering team — fluently.
Let's Secure What Matters.
Open to CISO, Cybersecurity Manager, and Practice Manager roles.
Washington D.C. + Remote.
© 2026 John Lake. All rights reserved.