Technical Program Manager

Coordinates sprints and accountability across all three technical tracks.

^{Run sprint planning and stand-ups across CTI, SIE, and IAM tracks
Track deliverables against real client-facing deadlines
Coordinate cross-track dependencies (e.g. IAM provisioning feeding SIE access reviews)
Own status reporting up to Kenneth and Steve}

Cyber Threat Intel Analyst

Evolved from the Cyber Defense Analyst Track, now with a focus on detection engineering.

^{Triage and investigate real notable events in Splunk ES
Build and automate detection rules, reducing manual analyst workload
Progress towards structured, proactive threat hunts by the end of the program
Document findings with IOCs and MITRE ATT&CK mapping} 

Security Infrastructure Engineer

Expanded to extend beyond STIG hardening into live AWS production support.

^{Apply DISA STIG hardening to production Linux servers}

^{Deploy ad tune SentinelOne EDR across production endpoints}

^{Maintain and support live AWS Cloud PROD environments}

^{Produce formal compliance and infrastructure change reports}

IAM Engineer ^NEW!

Brand-new track built around ECA's Enterprise Okta environment.

 ^{Build and maintain ECA's Enterprise Okta account}

^{Manage the user lifecycle, groups, and access policies}

^{Support least-privilege and access-review processes organization-wide}

^{Document identity architecture decisions for audit-readiness}