Principal Cloud Engineer

• Nov 2022 - Present

Cloud Automation Engineer

• Mar 2021 - Apr 2022

Systems Administrator

• Mar 2019 - Feb 2021

As a member of the infrastructure team, I am responsible for managing a wide variety of software, servers, and processes that serve both end users and the cloud engineering teams Specialities: Python automation, AWS, Crowdstrike, Rundeck, Ansible, Device42, Zscaler, Upguard, Jscape SFTP Some things I've specifically worked on: - Primary team member responsible for Crowdstrike (enterprise next-gen endpoint security platform) configuration, management, and automation using Python - Researched, designed, and implemented the Crowdstrike Firewall platform across all desktops globally, resulting in substantial cost savings and increased host based firewall control - Automated the Crowdstrike agent upgrade process across alpha, beta, and production, resulting in a reliable monthly deployment process across all servers and desktops globally - Automated the Crowdstrike agent version download to an S3 bucket for cloud engineering deployments run on AWS Lambda with Cloudwatch alarms configured - Created a script to identify the protection status of all ~7000 servers and desktops globally, resulting in remediation of over 1000 unprotected devices - Provided management with an automated weekly report with relevant Crowdstrike data, resulting in an executive summary delivered in an easily digestible format - Researched, designed, and currently implementing Rundeck (open source) to automate remediation of Pagerduty alerts and daily manual tasks done by our offshore team - Architected Rundeck to run in a multi-AZ environment, within an Auto Scaling Group behind an ALB using Aurora serverless for the database - Integrated Rundeck user database with Active Directory utilizing LDAPS Show less

Systems Administrator

• May 2017 - Mar 2019

Part of the infrastructure engineering team responsible for user management and systems design, configuration, and management of the charter school’s 14,000 users across 43 locations Specialties: AWS, Okta, G Suite, Cisco, Sonicwall firewalls, Windows/CentOS/Ubuntu/Debian servers, Active Directory Some things I've specifically worked on: - Created multiple SSO / SAML integrations with Okta - Created a multi-account AWS environment using Infrastructure as Code where possible - Identified information security infrastructure vulnerabilities within the infrastructure - Directly supported upper management on creating company wide information security policies in lieu of an acting CISO - Supported the external MSP on network infrastructure Show less

Network Security Engineer

• Apr 2016 - Dec 2016

Sole infrastructure engineer of a financial services blockchain company providing network architecture, configuration, and infrastructure maintenance of both the company HQ and AWS environment. Additionally supported over 150 employees globally. Specialties: AWS, Juniper SRX/EX network design and implementation, CentOS/Ubuntu/Debian servers, Ruckus wireless, JAMF Casper, Bettercloud, Grafana, Zabbix A few things I've specifically worked on: - Created and implemented company wide information security policies under the guidance of the company Chief Security Officer - Sole infrastructure engineer of the company providing network design, configuration, and maintenance on infrastructure both at the company HQ and cloud. - Built global network using Juniper SRX/EX, HPBX, and Ruckus corporate WIFI - Successful as the sole technical lead moving the company to a new office - Secured and improved the existing AWS environment - Researched and implemented information security products and controls to secure Google Drive and end user devices while enforcing configuration management best practices Show less

Network Engineer

• May 2013 - Apr 2016

Member of the engineering team responsible for the global infrastructure, providing low latency machine-readable financial information delivered via multicast to high frequency trading firms, among other non-low latency services Specialties: AWS, Juniper SRX firewalls, Cisco switches, CentOS/Ubuntu/Debian servers, SSL OpenVPN, Strongswan IPSEC VPN Some items I've specifically worked on: - Responsible for migrating existing EC2-Classic AWS infrastructure in totality to a new properly designed EC2-VPC environment - Researched, implemented, and replaced company's existing Cisco IPSEC remote VPN platform with an open source PKI (SSL OpenVPN over Linux) utilizing multiple factors of authentication - Primary member of the company responsible for client integration/termination for low latency data delivery; this includes working with sales until the client has been integrated into production - Technical lead and product manager for the Selerity Alerts Live Audio event capture product - Primary member of the company responsible for telecommunications planning, pricing, installation, and management Show less

NOC Technician

• Aug 2011 - May 2013

Member of a facilities-based 24/7 ISP NOC providing IP data (layers 1-3) and voice support to businesses I've specifically worked on the following: - Provide direct Tier 1-3 IP data and voice support to customers from a facilities-based CLEC environment - Troubleshoot carrier-class Ethernet (EoC/Fiber), T1/T3, xDSL, VoIP (SIP/RTP), HPBX, POTS, E-mail/Web hosting, and various LAN services daily - Interact daily with both technical and non-technical customers; address customer escalations - Take ownership of escalated/hot tickets and drive to resolution - Troubleshoot daily with Transbeam and partner carrier dispatch technicians - Engage, update, and escalate with partner CLEC/ILEC carriers - Develop and maintain excellent customer-provider relationships - Assist engineering, provisioning, and dispatch departments with configuration and troubleshooting issues - Monitor all data, backhaul, network core, and collocation services via Zenoss and Hobbit monitoring systems Show less

Custodian

• Jun 2005 - Aug 2010