Open to opportunities

Carlton Thomas

@carltonthomas

Message

Endpoint Engineer specializing in macOS device management, security compliance, and automation.

United States

Message

What I'm looking for

I’m looking to build and scale automated, compliance-driven endpoint security—especially macOS management—where I can partner with Security and Engineering to deliver measurable risk reduction, fast incident response, and production-ready automation.

I’m an Endpoint Engineer with 6+ years of enterprise IT infrastructure experience, focused on scaling secure, automated endpoint operations across Fortune 500 environments. I manage large-scale device deployments, enforce security compliance, and build repeatable automation that reduces risk at the source.

In my current role (DevSecOps Engineer | Lapetus Solutions), I architected endpoint security across 50+ managed environments by automating compliance validation, encryption enforcement, and configuration management—reducing security misconfigurations by 90%. I also built patch management workflows that process 100,000+ security events daily, achieving 95% accuracy in vulnerability identification.

Previously at Charter Communications (Spectrum), I led enterprise security operations for 500,000+ daily security events using Splunk Enterprise and CrowdStrike Falcon. I improved incident response time by 25% through enhanced triage and automated escalation, and I coordinated endpoint protections that resulted in zero security breaches during my tenure.

I bring a DevSecOps mindset to automation and security testing, using AI-augmented tooling like Claude Code, Cursor, and GitHub Copilot while manually reviewing and testing all AI-generated code for production endpoint management tools. I collaborate closely with Security, Engineering, and Support teams to implement least-privilege policies, SSO integration, and enterprise software deployment at scale.

Experience

Work history, roles, and key accomplishments

Current

Endpoint Engineer

Current

Lapetus Solutions

Jan 2023 - Present (3 years 5 months)

Architected enterprise endpoint security across 50+ managed environments, reducing security misconfigurations by 90% through automated compliance validation, encryption enforcement, and configuration management. Built automated patch management and zero-touch provisioning workflows (Python/Bash/Terraform), cutting manual deployment time by 80% and enabling compliance evidence collection for enterp

Terraform Python Bash Scripting

Security Engineer III

Charter Communications (Spectrum)

Oct 2020 - Oct 2024 (4 years)

Led enterprise endpoint security operations by monitoring 500,000+ daily security events in Splunk Enterprise and CrowdStrike Falcon, improving incident response time by 25% via automated triage and escalation workflows. Conducted vulnerability assessments across 10,000+ devices and enforced automated security baselines, reducing attack surface by 30% with zero security breaches during tenure.

Splunk Enterprise Incident Response Vulnerability Management Patch Management Security Baselines Endpoint Security Threat Intelligence

Security Support Engineer

Microsoft

Nov 2021 - Nov 2022 (1 year)

Resolved complex Azure infrastructure security needs by deploying and configuring Microsoft Defender for Identity and Cloud App Security across enterprise endpoint environments for Fortune 500 customers. Performed advanced log analysis and forensic investigations to support endpoint security incident escalations and investigations.

Microsoft Defender Azure Security Endpoint Security Log Analysis Forensics

Cloud Engineer

CSX Corp

May 2019 - Nov 2020 (1 year 6 months)

Built and deployed secure Docker containers with best practices and automated security scanning, reducing container security risks by 85%. Implemented container security monitoring and vulnerability management and maintained secure Git workflows for enterprise application deployment.

Docker Container Security Docker Security Vulnerability Management Monitoring And Alerting CI CD Pipelines

Unit Deployment Manager

United States Air Force

Jan 2011 - Mar 2019 (8 years 2 months)

Directed deployment operations and security protocols for 233 military personnel, ensuring operational readiness, security compliance, and equipment accountability. Maintained zero security incidents by managing enterprise equipment deployment procedures within complex operational environments.

Deployment Security Compliance SOP Management Operational Readiness Risk Management Security Protocols

Education

Degrees, certifications, and relevant coursework

UNC Charlotte

Associate of Applied Science, Cybersecurity

Activities and societies: Projects include SecurityOpsAi (AI-powered security operations framework) and CodeDiligence.ai (AI-powered code analysis platform for vulnerability scanning and remediation recommendations).

Completed a Cybersecurity program at UNC Charlotte. Earned an Associate of Applied Science with a focus on security-related logistics and resource management.

Air Force University

Associate of Applied Science, Logistics and Resource Management

Studied at Air Force University at Travis AFB, CA as part of the Associate of Applied Science program. Focused on logistics and resource management with security-oriented coursework.