Senior DevOps Engineer

• Jul 2019 - Present

Architect and build cloud infrastructure, create and maintain CI/CD pipelines, design and configure system/application performance monitoring, develop internal tools to automate processes, consult with developers to safely release and manage applications • Author and administer AWS cloud infrastructure using IAC (Terraform) including ECS/Fargate, EC2 instances, ElasticSeach/OpenSearch, Kafka, DocumentDB, EKS clusters, RDS instances, CloudFront distributions, WAF rules, VPCs/networks, S3… Show more Architect and build cloud infrastructure, create and maintain CI/CD pipelines, design and configure system/application performance monitoring, develop internal tools to automate processes, consult with developers to safely release and manage applications • Author and administer AWS cloud infrastructure using IAC (Terraform) including ECS/Fargate, EC2 instances, ElasticSeach/OpenSearch, Kafka, DocumentDB, EKS clusters, RDS instances, CloudFront distributions, WAF rules, VPCs/networks, S3 permissions models/policies, IAM resources, etc. • Automate code deployments (.Net, Go, Vue, Clojure) using Github, Jenkins and Octopus Deploy for server-based applications, microservices running in Kubernetes, Lambda/batch functions and SPAs. • Create and manage performance monitoring dashboards and alerts using DataSet (Scalyr), New Relic, Data Dog and CloudWatch • Work closely with developers to design solutions and troubleshoot code builds, deployments and application performance issues. • Configure, manage and troubleshoot IIS web applications using Ansible, Terraform and APM tools. • Consistent focus on process improvement. Initiating and leading team efforts to those ends. • Created notification systems for AWS events and vendor status updates. Show less Architect and build cloud infrastructure, create and maintain CI/CD pipelines, design and configure system/application performance monitoring, develop internal tools to automate processes, consult with developers to safely release and manage applications • Author and administer AWS cloud infrastructure using IAC (Terraform) including ECS/Fargate, EC2 instances, ElasticSeach/OpenSearch, Kafka, DocumentDB, EKS clusters, RDS instances, CloudFront distributions, WAF rules, VPCs/networks, S3… Show more Architect and build cloud infrastructure, create and maintain CI/CD pipelines, design and configure system/application performance monitoring, develop internal tools to automate processes, consult with developers to safely release and manage applications • Author and administer AWS cloud infrastructure using IAC (Terraform) including ECS/Fargate, EC2 instances, ElasticSeach/OpenSearch, Kafka, DocumentDB, EKS clusters, RDS instances, CloudFront distributions, WAF rules, VPCs/networks, S3 permissions models/policies, IAM resources, etc. • Automate code deployments (.Net, Go, Vue, Clojure) using Github, Jenkins and Octopus Deploy for server-based applications, microservices running in Kubernetes, Lambda/batch functions and SPAs. • Create and manage performance monitoring dashboards and alerts using DataSet (Scalyr), New Relic, Data Dog and CloudWatch • Work closely with developers to design solutions and troubleshoot code builds, deployments and application performance issues. • Configure, manage and troubleshoot IIS web applications using Ansible, Terraform and APM tools. • Consistent focus on process improvement. Initiating and leading team efforts to those ends. • Created notification systems for AWS events and vendor status updates. Show less

Senior DevOps Engineer

• Jan 2023 - May 2023

Consultant, Azure Operations

• Nov 2018 - Jul 2019

Azure Operations and design. DevOps support and consultation. Azure Operations and design. DevOps support and consultation.

Process and Automation Engineer - contract

• Apr 2018 - Aug 2018

Develop automations in Python, Powershell, and bash script. Build and manage automation framework using XLRelease and BladeLogic. Develop automations in Python, Powershell, and bash script. Build and manage automation framework using XLRelease and BladeLogic.

Linux Administrator/Cloud Ops

• Oct 2016 - Jan 2018

Systems Administrator (Linux)/Cloud Ops Create, deploy, and administer hosted virtual systems (RHEL/CentOS) in both public (AWS) and private (VMWare) clouds. Strong focus on automation of system provisioning and configuration using Ansible, Python (boto3) and bash scripting with AWS command line tools. Responsible for system patching, system staging, provisioning and configuration, maintenance and monitoring of physical and virtual hardware and cloud infrastructure, backups/restores… Show more Systems Administrator (Linux)/Cloud Ops Create, deploy, and administer hosted virtual systems (RHEL/CentOS) in both public (AWS) and private (VMWare) clouds. Strong focus on automation of system provisioning and configuration using Ansible, Python (boto3) and bash scripting with AWS command line tools. Responsible for system patching, system staging, provisioning and configuration, maintenance and monitoring of physical and virtual hardware and cloud infrastructure, backups/restores, APM diagnostics, alert management, incident response Tools and Technologies : AWS (CLI tools and boto3 API in Python) Ansible Cloud Protection Manager CloudEndure AlienVault AppDynamics VMWare Spacewalk SolarWinds CommVault Show less Systems Administrator (Linux)/Cloud Ops Create, deploy, and administer hosted virtual systems (RHEL/CentOS) in both public (AWS) and private (VMWare) clouds. Strong focus on automation of system provisioning and configuration using Ansible, Python (boto3) and bash scripting with AWS command line tools. Responsible for system patching, system staging, provisioning and configuration, maintenance and monitoring of physical and virtual hardware and cloud infrastructure, backups/restores… Show more Systems Administrator (Linux)/Cloud Ops Create, deploy, and administer hosted virtual systems (RHEL/CentOS) in both public (AWS) and private (VMWare) clouds. Strong focus on automation of system provisioning and configuration using Ansible, Python (boto3) and bash scripting with AWS command line tools. Responsible for system patching, system staging, provisioning and configuration, maintenance and monitoring of physical and virtual hardware and cloud infrastructure, backups/restores, APM diagnostics, alert management, incident response Tools and Technologies : AWS (CLI tools and boto3 API in Python) Ansible Cloud Protection Manager CloudEndure AlienVault AppDynamics VMWare Spacewalk SolarWinds CommVault Show less

Senior Appliance Engineer

• Feb 2016 - Oct 2016

Technical escalation for issues relating to LAMP-based monitoring appliances. Implement new monitoring appliances and customize their configuration for customer environments, often within compressed timeframes. Troubleshoot, diagnose and solve problems related to ports/protocols and end-device access. Configure customer devices, including IPT, UCCE and Cisco IOS layer 2/3 and security devices for monitoring (SNMP, syslog, SOAP/AXL, etc.). Formal testing of new features and custom code… Show more Technical escalation for issues relating to LAMP-based monitoring appliances. Implement new monitoring appliances and customize their configuration for customer environments, often within compressed timeframes. Troubleshoot, diagnose and solve problems related to ports/protocols and end-device access. Configure customer devices, including IPT, UCCE and Cisco IOS layer 2/3 and security devices for monitoring (SNMP, syslog, SOAP/AXL, etc.). Formal testing of new features and custom code patches. Design, maintain and troubleshoot limited access shells (chroot jailed accounts) for customers. Design and build scripts using Perl/PHP/bash script/C/Python for administrative problems including remote backup, database configuration automation, and remote device monitoring. Design and build SNMP- and syslog-based alerts for voice and data devices. Coach other engineers and help them develop their technical skills. This is the same position I've had since 2008. The company was rebranded. Show less Technical escalation for issues relating to LAMP-based monitoring appliances. Implement new monitoring appliances and customize their configuration for customer environments, often within compressed timeframes. Troubleshoot, diagnose and solve problems related to ports/protocols and end-device access. Configure customer devices, including IPT, UCCE and Cisco IOS layer 2/3 and security devices for monitoring (SNMP, syslog, SOAP/AXL, etc.). Formal testing of new features and custom code… Show more Technical escalation for issues relating to LAMP-based monitoring appliances. Implement new monitoring appliances and customize their configuration for customer environments, often within compressed timeframes. Troubleshoot, diagnose and solve problems related to ports/protocols and end-device access. Configure customer devices, including IPT, UCCE and Cisco IOS layer 2/3 and security devices for monitoring (SNMP, syslog, SOAP/AXL, etc.). Formal testing of new features and custom code patches. Design, maintain and troubleshoot limited access shells (chroot jailed accounts) for customers. Design and build scripts using Perl/PHP/bash script/C/Python for administrative problems including remote backup, database configuration automation, and remote device monitoring. Design and build SNMP- and syslog-based alerts for voice and data devices. Coach other engineers and help them develop their technical skills. This is the same position I've had since 2008. The company was rebranded. Show less

Senior Appliance Engineer

• Nov 2010 - Feb 2016

Linux administration, MYSQL database administration, scripting in bash, PHP, Perl, Ruby and Python, network engineering, monitoring and managing Cisco Voice technologies.

Appliance Engineer

• Nov 2008 - Nov 2010

Information Assurance

• 2003 - 2008

Create and enforce network security policies and practices in a dynamic, hybrid military / R&D environment. Aid in designing, accrediting and implementing a diverse R&D network to co-exist with office automation network, enabling several multi-million dollar research projects to advance unencumbered. Assist Information Assurance Manager in creating and auditing design requirements, policies, personnel assignments and implementation of secure facilities (similar to NISPOM). Respond to and… Show more Create and enforce network security policies and practices in a dynamic, hybrid military / R&D environment. Aid in designing, accrediting and implementing a diverse R&D network to co-exist with office automation network, enabling several multi-million dollar research projects to advance unencumbered. Assist Information Assurance Manager in creating and auditing design requirements, policies, personnel assignments and implementation of secure facilities (similar to NISPOM). Respond to and analyze security and classified messaging incidents. Work with Program Managers to assure the continued certification and accreditation of their systems using DIACAP. Oversee and report FISMA compliance with DoD 8570, SATE, and EIDTR. Monitor hundreds of classified (SIPRNet) and thousands of unclassified (NIPRNet and DREN) network nodes for unauthorized traffic and malicious software using IDS, vulnerability scanning, antivirus, and other network mapping and auditing software. Identify and mitigate (or accept) risks and exceptions to policies. Aid technicians in the mitigation and remediation of vulnerabilities. Audit information systems to verify compliance with security policies and practices. Manage TCNO compliance (patching policy) on all information systems. Authorize firewall rules, web proxy exception requests, software approval requests, and local and remote system access. Manage 10 critical Windows 2003 and Linux servers, both classified (SIPRNet) and unclassified. Assist in SQL server administration. Evaluate, recommend and deploy commercial and open-source security products. Show less Create and enforce network security policies and practices in a dynamic, hybrid military / R&D environment. Aid in designing, accrediting and implementing a diverse R&D network to co-exist with office automation network, enabling several multi-million dollar research projects to advance unencumbered. Assist Information Assurance Manager in creating and auditing design requirements, policies, personnel assignments and implementation of secure facilities (similar to NISPOM). Respond to and… Show more Create and enforce network security policies and practices in a dynamic, hybrid military / R&D environment. Aid in designing, accrediting and implementing a diverse R&D network to co-exist with office automation network, enabling several multi-million dollar research projects to advance unencumbered. Assist Information Assurance Manager in creating and auditing design requirements, policies, personnel assignments and implementation of secure facilities (similar to NISPOM). Respond to and analyze security and classified messaging incidents. Work with Program Managers to assure the continued certification and accreditation of their systems using DIACAP. Oversee and report FISMA compliance with DoD 8570, SATE, and EIDTR. Monitor hundreds of classified (SIPRNet) and thousands of unclassified (NIPRNet and DREN) network nodes for unauthorized traffic and malicious software using IDS, vulnerability scanning, antivirus, and other network mapping and auditing software. Identify and mitigate (or accept) risks and exceptions to policies. Aid technicians in the mitigation and remediation of vulnerabilities. Audit information systems to verify compliance with security policies and practices. Manage TCNO compliance (patching policy) on all information systems. Authorize firewall rules, web proxy exception requests, software approval requests, and local and remote system access. Manage 10 critical Windows 2003 and Linux servers, both classified (SIPRNet) and unclassified. Assist in SQL server administration. Evaluate, recommend and deploy commercial and open-source security products. Show less