Aaron Lippold
Chief Engineer MITRE Security Automation Framework
Ashburn, Virginia, United States
Summary
🤩
Rockstar🎓
Top SchoolAaron Lippold is a seasoned security automation engineer and leader with over a decade at MITRE, where he founded and serves as Chief Engineer of the MITRE Security Automation Framework (SAF) to bring DevOps and SecDevOps automation into federal programs. He leads cross-sponsor initiatives and multi-level teams that design, build, and open-source tools for validation, hardening, and continuous monitoring used by agencies such as NGA, NRO, DISA, Army Intel, and HHS. A hands-on backend and DevOps contributor, Aaron has improved database auditing and configuration in widely used open-source projects like InSpec, reflecting practical expertise in system configuration and pipeline automation. His background blends computer science and mathematics with minors in English and philosophy, which informs a pragmatic yet communicative approach to technical leadership. Notably, he has repeatedly translated cross-agency requirements into reusable, Apache-2.0 licensed toolsets that accelerate secure deployment at scale.
11 years of coding experience
13 years of employment as a software developer
University of Illinois Urbana-Champaign
German
Stackoverflow
1reputation
0reached
0answers
0questions
Github Skills (9)
configuration-management10
postgresql10
devops10
mysql10
ruby10
audit9
testing9
auditing9
documentation8
Programming languages (20)
Github contributions (5)
inspec/inspec
Mar 2016 - Mar 2022
InSpec: Auditing and Testing Framework
Role in this project:
Backend & DevOps Engineer
Backend & DevOps EngineerContributions:21 reviews, 32 commits, 42 PRs in 6 years
Contributions summary:Aaron primarily contributed to enhancing the InSpec framework's resources for various database systems, including MySQL and PostgreSQL, and for integrating new configurations for Postgres. They implemented features to improve database query functionality, specifically focusing on feature parity and better output handling. Moreover, they addressed bug fixes related to resource parsing and configuration, particularly in the PostgreSQL and Kernel Module resources, indicating a strong understanding of DevOps and system configuration within the project. The user's work also involved documentation updates and improvements.
testing-frameworkdevsecdevopsauditinspec
mitre/ansible-cis-tomcat-hardening
Mar 2018 - Nov 2020
WIP Ansible playbook for hardening a tomcat instance to the CIS Tomcat Benchmark v1.0.1
Contributions:6 commits, 1 PR, 2 pushes in 2 years 8 months
v1-0wipansiblecistomcat
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.