Andy Wright Email & Phone Number

Detroit, Mi, Us

Cloud architecture/engineering/migration/DevSecOps consultant, focused on GCP, AWS, and Cloudflare; CNAPP, DAST, and SAST tooling; Terraform, CloudFormation, Python, Bash, and Powershell languages; CI/CD automation (GitHub Actions, Jenkins, CircleCI, Azure DevOps); and containerization (primarily GKE, ECS, and Docker).

Atlanta, Georgia, Us

Farmington Hills, Mi, Us

• Designing, engineering, and managing Google Workspace and GCP environments• Engineering GCP infrastructure in Terraform: Custom modules to reduce boilerplate code and speed up deployments; GCP Project APIs; API gateways; Cloud Storage buckets for Terraform state files, logging, and application code; Cloud Functions for web applications; Cloud Run for web applications; Organization Policies to prevent default VPCs from being built, enforcing proper ingress/egress for serverless solutions, SQL restrictions, and OS requirements; Audit and Usage Logs and Log Metric Alerts; GKE clusters; VPCs and VPC Connectors for serverless solutions; Load Balancing (forwarding rules, backend services, network endpoint groups, URL maps, and proxies); Secrets Manager for serverless environmental variables; StackDriver collections and uptime checks; Log Sinks; IAM policy bindings and custom roles; SAML integrations between Firebase and on-prem ADFS; Cloud DNS zones and records; Cloud Armor policies and WAF rules; Service Accounts and user-managed keys; Project/Organization Access Transparency and Approval rules; and Managed Certificates• Building CI/CD pipelines in Azure DevOps for IaC and application code deployment• Managing Cloud Identity Provider and integrating GCP with Microsoft Entra for internal SSO• Implementing Wiz for CNAPP: Scanning cloud configurations, CI/CD pipelines, and both locally and remote stored code• Developing API swagger files, implementing proper authentication/authorization model with web applications, and mapping API endpoints to Cloud Functions• Educating teams on DevOps and DevSecOps processes, CI/CD pipelines, version control and code repositories, infrastructure-as-code, changes to SDLC, and reliability/visibility• Speaking on behalf of the company at E3 about the future of their cloud environments and projects• Creating presentations for executive-level teams for approval of project resources and budget

Atlanta, Georgia, Us

• On Assignment with NBC Universal• Designing, engineering, and managing an API migration of over 1000 endpoints from an on-prem solution to Cloudflare• Developing Terraform modules to handle onboarding applications to Azure Active Directory and Cloudflare• Developing CloudFormation to build serverless ECS infrastructure in AWS• Hosting/deploying Cloudflare connector infrastructure in ECS using Fargate• Deploying Terraform and CloudFormation via GitHub Actions pipelines• Managing all code deployments and secret storage through GitHub Actions pipelines for multiple environments – i.e., sandbox, dev, stage, and prod• Creating and reusing Composite Actions in GitHub Actions for cross-functional use• Creating Transform and Origin Rules, DNS records, WAF rules, and Workers in Cloudflare to develop a new API Gateway solution from the ground up• Using Cloudflare Tunnels and Tunnel Routes for ZeroTrust traffic• Creating application registrations and app roles in Azure Active Directory for API exposure and audience claims• Documenting architectural and infrastructural changes, High-level and Low-level diagrams for all newly proposed solutions – e.g., API gateway, Cloudflare Workers handling authn/z traffic, ECS infrastructure for Cloudflare Tunnel connectors – as well as RACI matrices, email templates, and migration plans• Developing implementation, testing, and rollback plans• Troubleshooting authn/z traffic between Cloudflare and services on-prem and in cloud infrastructure • Integrating Cloudflare with Splunk and DataDog for visibility using log aggregation, metric collecting, and visualization

• 1-Month engagement working on multiple cloud infrastructure projects for various clients• Creating IaC using Terraform and Cloudformation • Developing Terraform modules from scratch• Building out an entirely new infrastructure to host web-based applications in AWS – i.e. VPCs, route tables, EC2 instances, Docker containers, ELBs, and WAF• Implementing infrastructure security and secure coding practices• Documenting proposed changes and migration, IaC, infrastructure, and new processes to hand over to client when project is completed

Dallas, Tx, Us

• Migrating over 500 web applications from AWS, Azure, and F5 WAF solutions to Imperva Cloud WAF on a Global DevSecOps team• Troubleshooting application security issues for teams around the globe• Troubleshooting network issues for application teams• Developing Terraform modules for WAF implementation• Creating IaC using Terraform and Python• Documenting technical processes, runbooks, and reports for upper management• Analyzing application traffic for false positives• Analyzing security incidents, security, events, and attacks on various applications • Creating and managing CI/CD for DevSecOps teams using Github Actions and Terraform Enterprise

Chicago, Illinois, Us

• Leading SRE team while current team lead is out on paternity leave• Representing SRE team to C-level and Vice-level management• Interfacing with other team leads• Implementing team and organizational level policies and documentation• Designing security infrastructure, such as WAFs, and reimagining network security using Terraform• Creating Terraform modules to manage Security Groups, WAF Rule Sets, Network ACLs, and IAM policies• Implementing security controls and vulnerability remediation for SOC2 Compliance such as restricting security group and S3 storage access; implementing S3 bucket versioning; updating Terraform provider versions, CircleCI orbs, and various other CLI tools; encrypting data at rest; and adding alerting to SQS queues• Running Agile ceremonies• Developing and deploying IaC through Terraform• Managing IaC using Terraform Cloud• Deploying code and container builds using Circle CI pipelines• Managing several AWS ECS clusters• Maintaining multiple Docker containerized environments• Monitoring infrastructure and application metrics, and creating dashboards in both New Relic and Grafana• Scripting in Bash and Python• Creating and maintaining regularly scheduled maintenance work• Creating and promoting Docker images• Maintaining MySQL databases in clustered RDS instances• Parsing logs in CloudWatch• Creating and managing EventBridge Rules• Controlling internal and external traffic using Elastic Load Balancers• Working with caching utilities like Varnish, Drupal Cache, and Cloudflare• Utilizing several aspects of Cloudflare from caching to DNS to • Documenting out internal team runbooks and company-wide processes• Running SCRUM/Agile ceremonies• Writing expert contributor articles on the tech industry• Managing IAM and access for Github, AWS, New Relic, Grafana• Monitoring APIs with granular alerts• Contributing to news articles for the platform

Durham, North Carolina, Us

• Engineering and monitoring infrastructure for GPS-based technologies used by multi-million dollar transportation/automotive industries• Developing and deploying IaC through Terraform, Helm Charts, and PowerShell• Engineering and managing infrastructure in Google Cloud Platform and AWS• Maintaining multiple Kubernetes clusters in production, stage, and development environments• Creating and deploying Docker images• Engineering and maintaining VPN connections between on-prem and cloud solutions; implementing BGP to have connections as HA• Managing infrastructure states through SaltStack• Developing/deploying Helm Charts and monitoring containers• Architecting infrastructure solutions in both Microsoft and Linux• Developing Kubernetes Operators to manage availability metrics and lifecycles• Querying for metrics using SQL-based languages• Developing code solutions for legacy infrastructure – i.e. creating/managing DNS and VPCs in Terraform• Implementing solutions to collect metrics with Prometheus and Thanos• Creating dashboards in Grafana for engineers and developers• Maintaining 99.99% uptime for client sites in varied environments (IIS, AWS, GCP, K8s)• Deploying and maintaining log aggregation solutions with StackDriver, NxLog, FluentD, and BindPlane• Managing/updating code repositories in GitHub and Cloud Source• Deploying, managing, and monitoring multiple RabbitMQ environments• Converting on-prem solutions to cloud-based solutions in AWS and GCP • Testing monitoring applications and hosted solutions • Engineering automation scripts and snippets with PowerShell, PromQL, Bash, YAML, and Go• Maintaining infrastructure using command-line tools like PowerShell, Bash, and Google SDK• Troubleshooting high level infrastructure issues related to VPN connectivity, DNS problems, load-balancing solutions, and message-queue failures

Raleigh, Nc, Us

• On Assignment with TransLoc/Ride Systems• Engineering and monitoring infrastructure for GPS-based technologies used by multi-million dollar transportation/automotive industries• Developing and deploying IaC through Terraform, Helm Charts, and PowerShell• Deploying, maintaining, and troubleshooting applications in Google Cloud Platform and AWS• Querying for metrics using SQL-based languages• Implementing solutions to collect metrics with Prometheus and Thanos• Creating dashboards in Grafana for engineers and developers• Maintaining 99.99% uptime for client sites in varied environments (IIS, AWS, GCP, K8S)• Deploying and maintaining log aggregation solutions with StackDriver, NxLog, FluentD, and BindPlane• Managing/updating code repositories in GitHub and Cloud Source• Deploying, managing, and monitoring multiple RabbitMQ environments• Architecting infrastructure solutions for web environments in both Microsoft and Linux• Converting on-prem solutions to cloud-based solutions in AWS and GCP • Testing monitoring applications and hosted solutions • Deploying Helm Charts and monitoring containers• Engineering automation scripts and snippets with PowerShell, PromQL, Bash, YAML, and Go• Maintaining infrastructure using command-line tools like PowerShell, Bash, and Google SDK• Troubleshooting high level infrastructure issues related to VPN connectivity, DNS problems, load-balancing solutions, and message-queue failures

Atlanta, Georgia, Us

• On Assignment with TrustMark Insurance Company• Managing team of 3 system engineers for a security vulnerability remediation project• Remediating security vulnerabilities within Microsoft server infrastructure – 500 systemso Configuring SMB Signing, disabling old TLS/SSL protocols and ciphers, disabling HTTP methods on web servers, application upgrades, updating/installing system and web certificates, strengthening Diffie-Hellman encryption standards, disabling NetBIOS Naming System, • Managing security vulnerability project using Agile methodologies• Scanning and maintaining security of the infrastructure using personally developed PowerShell Scripts, InsighVM’s Rapid7 reporting tools, SCCM/SCOM, and WireShark• Owning and managing system/environment changes through a standardized change process – i.e. creating Implementation, Test, and Rollback plans per vulnerability, presenting to CAB, and owning change until closed after review• Automating fixes, deployments, system reports, Active Directory cleanup, Group Policy implementations, system tests, and implementation-rollbacks in PowerShell, VBS, and Batch scripts• Documenting system/environment changes, processes, project progress, proposals for future projects, implementation-test-rollback plans, and CMDB information• Creating dashboards to show progress of project, individual security fixes, and overall vulnerability of the Microsoft environment• Presenting progress, project approach, newly discovered vulnerabilities, individual accomplishments, and proposals to InfoSec team and Security Committee• Organizing system change schedules to reduce system downtime and maximize rollout efficiency

Detroit, Mi, Us

• Developing and deploying IaC through Terraform and Azure CLI• Managing and automating Linux patching• Converting processes written in VBS to PowerShell and Python• Automating day-to-day tasks and system upgrade processes in PowerShell• Managing Online Ordering environment with 99.9% up-time• Maintaining multiple cloud environments and directories in both Azure and GCP• Deploying software installations and international websites on a weekly basis• Engineering SaltStack and Ansible enterprise environments for POC• Developing Windows 10 images• Engineering Linux (Ubuntu) environments for system monitoring and analytics• Automating imaging process for in-store systems• Maintaining LANDesk environment of over 30,000 systems• Supporting in-store DaaS systems• Researching new technologies for configuration management• Maintaining version control in GitLab and Azure DevOps• Performing forensics on failed hardware to do root cause analysis• Analyzing isolated incidents and in-store issues, and developing scalable solutions• Troubleshooting technological issues escalated above level three support

Hanover, Md, Us

• On assignment with Ford Motor Company• Automating processes in PowerShell – viz. server deployments, patching, datacenter operations, compliance checks, and package deployment• Updating scripts from VBS to PowerShell and Python for migration to a NextGen Datacenter• Scripting from scratch to reduce team effort on day-to-day tasks• Deploying and decommissioning Windows servers• Patching production and development Windows servers• Training in Chef and Ruby for NextGen automation

Seattle, Washington, Us

• On assignment with a major Midwest chemical company• Leading project management on Windows 10 deployment and Microsoft Teams work streams• Supporting and managing Office 365 licensing deployment• Maintaining current SharePoint environment and assisting in transitioning off SharePoint• Troubleshooting SharePoint, Azure, SCCM, and Office 365 issues• Using and teaching Agile methodologies to on-site staff for new projects• Automating processes in PowerShell – e.g. license maintenance for Office 365, Azure Active Directory Group membership, and SharePoint list/page editing

Atlanta, Georgia, Us

• Contracted employee of Domino’s on the Store Platform Engineering team• Automating processes in PowerShell – e.g. disk space queries, disk cleanup processes, email notifications during machine staging and disaster recovery, event logging, creating new functions, and remote management.• Scripting from scratch in PowerShell, Python, VB, and .NET• Documenting processes, environments, and code• Engineering backend solutions for “above store” operations• Deploying solutions through SCCM• Managing version control through Git/Stash• Building image deployments for local and international stores with MDT and WDS• Deploying server and client/desktop solutions for in-store solutions• Testing new hardware for in-store deployment• Creating and managing “above store” services through Jenkins• Using Agile methodologies for projects and development

Ann Arbor, Michigan, Us

• Automating solutions for manual processes via PowerShell – viz. API calls, application migrations, machine discovery, system monitoring, security patching, firewall control, AD account management, and server configuration• Architecting and managing virtual infrastructure – viz. VMWare• Implementing cloud solutions – e.g. Microsoft Azure and Amazon Web Services• Engineering Windows environments for user services and internal solutions – e.g. RDS and RemoteApplications, research computing nodes, webhosts, and SQL clusters• Administering and troubleshooting Linux environments• Operating, maintaining, and refreshing hardware – e.g. rack-mounted servers, SANs, networking switches, and UPSs• Documenting processes, environments, application and licensing information, and repeatable troubleshooting solutions• Maintaining Active Directory infrastructure for the School of Information• Monitoring server performance and health metrics• Managing current storage and scaling for future needs

Hanover, Md, Us

• Contracted employee for the University of Michigan’s School of Information• Engineering Windows environments to improve accessibility to applications and hardware resources• Automating manual processes to reduce overhead and afterhours work – viz. application migrations, server cleanup, WSUS• Troubleshooting end user issues related to share permissions, server connectivity, software upgrades, and VDI• Improving security for web and classroom applications• Migrating research environments to and from different University departments• Cleaning up Active Directory infrastructure, share permissions, • Decommissioning old servers and migrating systems to newer operating systems• Reallocating hardware resources for mission critical systems• Documenting processes, environments, and repeatable troubleshooting solutions

Farmington Hills, Mi, Us

• Building and maintaining Exchange 2013 environment in hosted mode for multiple clients• Safe guarding mail flow by monitoring spam filtering and implementing e-mail encryption• Managing and troubleshooting a multi-domain forest in Active Directory for internal company and hosted external clients• Implementing Microsoft Best Practices for better use of security groups and enforcing company policies• Troubleshooting and maintaining Exchange 2010 hosted environment via PowerShell• Scripting automated processes for patching and monitoring software via PowerShell• Managing Group Policy for software deployment, password policy enforcement, and drive/print shares• Operating, maintaining, and refreshing hardware – e.g. rack-mounted servers, SANs, and blade servers• Converting remaining physical machines to a near-completely virtual environment• Architecting a new virtual domain via VMWare• Deploying and administering Windows servers via VMWare• Managing all Windows Server machines (2003 through 2012 R2) used internally• Deploying and maintaining Kaspersky anti-virus for entire enterprise• Storing and protecting Imaging data for over 60 credit unions and $43 million in assets• Developing and maintaining a webhosting environment using IIS 8 and 8.5

Beverly Hills, Mi, Us

• Helping families pre-plan cemetery needs

• Assisting customers in using the Western Union Speedpay system• Troubleshooting website/web applications

San Felice Sul Panaro, Mo, It

• Troubleshooting and repairing robotics for paint dispensers, PC hardware issues, software applications and Windows OS (Windows XP thru 7), and printers (document and label)• Providing IT support in person and over the phone• Training customers on proper use of paint dispensers and Windows-based software

• Sales, customer service, and managerial duties such as banking, ordering stock, and office organization• Providing IT support for mobile devices, anti-virus software, and Windows OS upgrades

• Managing customer-technician and inter-departmental relations• Troubleshooting various information technologies: Windows XP client machines, document and dot-matrix printers, LAN issues with switches and routers, and Point-of-Sale software

• Customer service and sales• Managing 1 – 4 employees• Scheduling, banking, ordering stock, loss prevention, and other managerial duties

• Tutoring college students in physics, chemistry, philosophy, and mathematics

Bachelor'S, Philosophy, Psychology

Physics

Hs Diploma, General Studies