Logan Gray
@logangray1
Security engineering leader building Zero Trust identity and cloud protection platforms for scalable organizations.
CanadaWhat I'm looking for
I’m a Security, Identity, and Systems Engineering leader with 15+ years balancing hands-on execution with multi-team engineering management. I build, scale, and govern centralized identity, authentication, and cloud application protection platforms aligned to strict Zero Trust architecture.
In my current role, I direct security governance and authentication architecture for a multi-team engineering organization spanning a 50-project GCP cloud estate. I lead up to 6 direct engineering reports across remote environments and manage security tooling/vendor operations with an annual budget exceeding $600,000 USD.
My focus is measurable outcomes: I led security modernization that eliminated 350+ undocumented LaunchDarkly feature flags and consolidated authorization into 30 native Auth0 permissions across 10 enterprise roles—reducing platform licensing costs by 50%. I also improved vulnerability triage by incorporating risk-based prioritization (CVSS/EPSS), cutting Mean Time to Remediate (MTTR) for critical CVEs by 40% while minimizing alert fatigue.
I’m also fluent in the “bridge work” between engineering and governance—partnering with GRC to align monitoring and KPIs to NIST CSF, SOC2, and CIS Benchmarks. Earlier, I executed cloud-native security and DevSecOps automation across Kubernetes, implemented centralized Just-In-Time access provisioning, and operationalized Orca Security as a CNAPP incorporating ASPM, CSPM, CWPP, and Shift Left Security.
Experience
Work history, roles, and key accomplishments
Directed security governance and authentication architecture for a multi-team organization spanning a 50-project GCP cloud estate, leading up to 6 direct reports. Modernized identity and authorization by eliminating 350 LaunchDarkly feature flags, consolidating authorization into 30 native Auth0 permissions across 10 roles, reducing licensing costs by 50%, and improving critical CVE MTTR by 40%.
Executed cloud-native security, identity, and DevSecOps automation for high-availability Kubernetes environments. Migrated legacy authentication to version-controlled Terraform/Terragrunt IaC, implemented centralized JIT access provisioning across 50 GCP projects using Workload Identity, and strengthened external microservices with Cloud Armor, Apigee, and APISIX; also added security guardrails to
Security Engineer
Shareworks by Morgan Stanley / Solium
Mar 2020 - Oct 2021 (1 year 7 months)
Owned real-time threat monitoring, vulnerability management, and incident response for a high-availability financial services platform using Splunk (SIEM) and Cylance (EDR). Built custom Splunk dashboards to improve alert triage and threat hunting, managed Qualys vulnerability lifecycles, and led investigations into malicious events including account takeover patterns and phishing campaigns.
Systems Engineer
Shareworks by Morgan Stanley / Solium
Jan 2018 - Mar 2020 (2 years 2 months)
Provided Tier-3 application support and configuration engineering for on-prem infrastructure across multiple data centers, supporting 24/7 operations for a high-availability financial services SaaS platform managing $100B in equity compensation plans. Authored a Python/MySQL metrics logger to audit Ansible playbook runs and generate tamper-evident configuration audit trails for regulatory complian
Systems Engineer III
General Dynamics Mission Systems - Canada
Oct 2015 - Jan 2018 (2 years 3 months)
Accountable for end-to-end requirements engineering, architectural definition, and system design for tactical LCSS defense communications platforms, with formal P.Eng. validation on key deliverables. Led engineering coordination between ELAN system architecture and Combat Net Radio (Enhanced) to certify cross-platform voice, TCP/IP data, and cryptographic radio bearer interoperability.
Systems Engineer II
General Dynamics Mission Systems - Canada
Dec 2012 - Oct 2015 (2 years 10 months)
Owned system design for digital audio distribution and system management layers in tactical military communications systems, including requirement management and triaging system problem reports. Applied communications experience to identify platform design vulnerabilities and neutralize implementation risks prior to manufacturing and field deployments.
Systems Engineer I
General Dynamics Mission Systems - Canada
May 2011 - Dec 2012 (1 year 7 months)
Handled analysis of system requirements and owned subsystem use cases, deriving and tracking technical requirements specifications. Engineered a standalone VBA validation tool to verify XML-based device configuration profiles in the product integration lab, preventing invalid configurations from reaching testing environments.
Education
Degrees, certifications, and relevant coursework
ISC2
Certified Information Systems Security Professional (CISSP), Information Systems Security
2020 -
Certified Information Systems Security Professional (CISSP), in force since 2020.
ISACA
Certified Information Security Manager (CISM), Information Security Management
Certified Information Security Manager (CISM) certification in progress.
APEGA
Professional Engineer (P. Eng.), Professional Engineering
2015 -
Professional Engineer (P. Eng.) credential with APEGA.
University of Saskatchewan
Bachelor of Science in Computer Engineering, Computer Engineering
Grade: With Distinction
Earned a B.Sc. in Computer Engineering with distinction from the University of Saskatchewan.
Availability
Location
CanadaAuthorized to work in
Salary expectations
Social media
Job categories
Skills
Interested in hiring Logan?
You can contact Logan and 90k+ other talented remote workers on Himalayas.
Message LoganFind your dream job
Sign up now and join over 250,000+ remote workers who receive personalized job alerts, curated job matches, and more for free!
