Cybersecurity architecture · Exposure management · Agentic SecOps

I design security systems that hold up when the stakes are real.

I’m Eddie Espino—a Cybersecurity Architect with 25+ years translating complex business, regulatory, and operational requirements into resilient enterprise architecture, from external exposure and vulnerability assessment through operational handoff.

West Palm Beach, FL · Remote · English + Spanish
ARCHITECTURE CONTROL PLANE OPERATIONAL
01BUSINESSRequirements
02SECURITYControls
03OPERATIONSResilience
04PRIVATE AIAutomation
EDDIE ESPINO ARCHITECTURE ASSESS → DESIGN → DELIVER
25+Years
250+Firewalls
5MSmart meters
1,800Wireless APs

Trusted in complex environments

NextEra Energy / FPL NCSA Government of Qatar FDOT / SunPass Miami International Airport Telefónica

Selected impact

Architecture proven in high-consequence environments.

A record of turning complex requirements into systems that can be operated, defended, and trusted.

01Critical infrastructure

Securing power generation at enterprise scale.

Led multi-year security engineering for NextEra Energy / FPL across 17 power plants and a 250+ firewall environment, supporting NERC CIP governance and AMI growth from 2 million to 5 million smart meters.

17 power plants 250+ firewalls 5M meters
  • NERC CIP-aligned governance
  • Segmentation and firewall modernization
  • Multi-year operational continuity
02National security + NDR

Turning network telemetry into detection advantage.

Architected Corelight / Zeek detection capabilities for government and national-security environments, integrating Suricata, threat intelligence, SIEM workflows, and automated AWS sensor lifecycle operations.

  • Zeek + Suricata engineering
  • Threat intelligence and hunting workflows
  • Repeatable sensor lifecycle automation
03Private AI infrastructure

Production-ready private AI platforms.

Engineered an end-to-end Ansible framework for Linux and Kubernetes AI clusters with MetalLB, Calico, NVIDIA GPU Operator, Triton, Ollama, and full GPU observability.

ANSIBLEK8S + GPUMODEL SERVINGOBSERVABILITY
  • Reproducible cluster provisioning
  • GPU time-slicing and model serving
  • Prometheus, DCGM, and Grafana dashboards
04Transportation + payments

Defense in depth for continuous operations.

Designed security across two FDOT / SunPass data centers and four high-availability firewall clusters built from the ground up for PCI-regulated toll-collection systems.

2 data centers 4 HA clusters PCI regulated
  • High-availability architecture
  • Defense-in-depth controls
  • Validated operational handoff

Core expertise

Deep security roots. Modern infrastructure range.

Equally comfortable in an executive architecture review, a packet capture, a firewall migration window, or a GPU observability dashboard.

01 / 04

Security Architecture & External Attack Surface Management

Target-state designs and external exposure assessments that connect reachable risk, vulnerability validation, resilient controls, and remediation priorities.

Attack Surface ManagementVulnerability ManagementPenetration TestingAsset DiscoveryRemediation ValidationCheck PointPalo AltoFortinetSegmentationBGP / OSPFVPN / ZTNANIST CSFCIS Controls
02 / 04

Detection & Threat Operations

Network evidence engineered into usable detections, investigations, and response workflows.

CorelightZeekSuricataThreat IntelligenceDetection EngineeringThreat HuntingSIEM / XDRPacket AnalysisIncident ResponseMITRE ATT&CK
03 / 04

Private AI & Automation

Secure, observable AI infrastructure and integrations designed to be repeatable and supportable.

KubernetesGPU InfrastructureAnsiblePythonREST APIsLLM IntegrationAgentic WorkflowsTritonMLXOllamaKnowledge Graphs
04 / 04

Infrastructure & Observability

The operational layer that makes architecture measurable, diagnosable, and durable.

LinuxVMwareAWSProxmoxGrafanaPrometheusTelemetryAPI SecurityAlerting

How I deliver

  1. 01AssessBusiness, risk, and current state
  2. 02ArchitectTarget state and decision record
  3. 03PlanMigration sequence and guardrails
  4. 04ImplementEngineering leadership and execution
  5. 05ValidateTesting, documentation, and handoff

Career trajectory

Architecture leadership from field engineering to private AI.

My through-line is simple: understand the operating environment, build the right architecture, and lead through implementation and validation.

Fortinet NSE4 Check Point CCSE CCNA Juniper Certified MCSE · Legacy
2023 — PRESENT

Secure Data Solutions

Founder & Lead Cybersecurity Solutions Architect

Technical leadership for engineering teams delivering external exposure and vulnerability assessments, network-security transformations, Agentic SecOps, Proxmox and Kubernetes automation, observability, and security-control implementation.
2022 — 2023

Corelight Inc.

Professional Services Engineer · NDR Specialist

Production Corelight / Zeek deployments, Suricata, threat intelligence, SIEM hunting workflows, and automated AWS sensor operations.
2020 — 2021

Fortinet

Cybersecurity Systems Engineer & ATP Specialist

Regional technical authority for 76 field teams, integrated enterprise security architecture, and a $1.6M+ quarterly ATP quota.
2012 — 2020

Secure Data Solutions

Founder & Principal Cybersecurity Solutions Architect

Risk-based vulnerability management plus concurrent enterprise firewall, security, cloud, and infrastructure engagements from design through implementation and support transition.
2004 — 2012

Compuquip Technologies

Senior Cybersecurity Architect

Penetration testing, network assessment, and large-scale energy, transportation, government, financial-services, and Fortune 500 security programs.

Additional notable clients

Partners Federal Credit Union (Disney) BankUnited Office Depot Sony Music Latin Miami-Dade County

Let’s talk

Looking for an architect who can connect strategy to the actual system?

I’m open to conversations about external attack surface management, vulnerability testing, senior cybersecurity architecture, NDR, Agentic SecOps, and technical leadership roles.

START A CONVERSATION

Your message goes directly to Secure Data Solutions.