Software Integration, Automation, & DevSecOps.

Continuation of my role at Nexient, LLC following tighter integration with the NTT Data parent organization.* Selecting appropriate cloud services and additional tools to design solution architecture for clients* Creating and automating proof-of-concept for access to an AWS ECS Fargate clustered Java application from OpenVPN Connect, across accounts via an AWS Client VPN Endpoint, Private Certificate Authority, and Transit Gateway* Supporting our platform accelerator projects, such as the Open Sourced Launch Common Automation Platform (LCAF).* Championing a migration from Terraform to OpenTofu based upon Terraform’s licensing change beginning with v1.6.* Consulting with sales teams on prospective client engagements* Migrating legacy LCAF Terraform modules between GitHub organizations, adopting internal current best practices along the way* Adding examples and test coverage via Terratest and Golang to existing modules* Updating Python and Make-based Terratest utilities* Improving internal processes to satisfy previously custom requests by working with IT teams to add to enterprise workflows* Training DevSecOps engineers and assisting them with platform accelerator onboarding when they are not assigned full-time to client-facing project* Managing projects with Azure DevOps Boards* Internal subject matter expert on Information Security, Identity and Access Management, and Networking* Leading technical interviews and code screens of prospective employees* Supporting container-based development in Visual Studio Code

Cloud architecture, information security, continuous integration, continuous delivery, and continuous deployments for private sector clients including educational institutions, non-profits, and internally via platform accelerator efforts and training/mentoring.* Selected appropriate AWS/Azure/GCP services and additional tools to architect solutions for clients, in collaboration with their business, IT, and InfoSec stakeholders based upon requirements analysis* Produced architectural diagrams, advised lead software engineer, and provided additional project management support for client-facing projects* Reviewed privacy laws for all countries in which clients operate to ensure compliance concerns are remediated* Managed and trained DevSecOps engineers (~5-10 engineers) while they were not assigned full-time to client-facing projects* Collaborated with my peers to standardize interview topics and processes, providing the foundation we still use today* Internal subject matter expert on Identity and Access Management* Led migration of internal software CI/CD pipelines from Jenkins to Azure DevOps* Managed projects in both Jira and Azure DevOps Boards* Reviewed Terraform and shell scripts for Azure Infrastructure-as-Code* Migrated legacy Azure resources between accounts

Technical lead, systems engineer, and cloud architect for the Defense Medical Exchange (DMIX) Sustainment & Systems Integration Support (SSIS) program and its Data Exchange Service (DES) healthcare product.* Providing overall technical guidance to the SSIS Sustainment, DevSecOps, Capacity Planning, Database, IA, and AppDynamics teams (~20 engineers)* Providing technical solutions and recommendations to the DMIX Chief Engineer, Infrastructure & Platform Management lead, and non-technical leadership* Supported migration of the DES production environment from Defense Information Systems Agency (DISA) on-premises to AWS GovCloud* Successfully completed ASRC Basecamp Leadership Program following nomination by my direct manager* Designed and implemented smart card-based account management using Red Hat IdM, Active Directory, Red Hat SSO, Ansible Tower, PuTTY-CAC, & Pageant* Designed HIPAA data archival solutions from Oracle RDS to AWS S3 Glacier Deep Archive and imported PHI via Snowball Edge Storage Optimized appliance* Architected new highly-available (dual Availability Zone) system design, eliminating single points of failure, while adding cross-region backup capabilities* Participating in ASRC Federal Cloud Services Community of Practice, spanning AWS, Azure, Google Cloud Platform, & Oracle Cloud, to share knowledge* Assisting with upcoming new business proposals and technical questions from other programs within ASRC* Linux system administration lead, including IAVA/CVE mitigations, tuning EC2 and JBoss instances & filesystems for reliability and performance* Configuring, managing, and troubleshooting of F5 BIG-IP Virtual Edition and AWS Elastic Load Balancer instances & network connectivity* Review third-party source code to more fully understand production systems, in order to diagnose defects and provide root cause analysis* Providing guidance to vendors on improvements to SQL injection mitigation techniques, to minimize false positives

Architect, technical lead, and product owner for transformative Continuous Integration and Continuous Delivery efforts in support of enabling engineers via version control for build configurations, increasing release frequency, reducing recurring license costs, and reducing defect rates in higher environments via a shift-left approach to QA and feedback.* Headed the project to migrate CI capabilities from TeamCity to Jenkins multibranch pipelines, builds from Windows to Linux, and adopt Nexus as the system of record for all build artifacts* Developed Jenkins shared libraries in support of release builds and packaging, including adoption of Maven versioning best practices, dependency tree build triggers, and earlier integration of components* Added new features to proprietary Java-based deployment tools for legacy applications to leverage Sonatype Nexus and JFrog Artifactory REST APIs for query and download of build artifacts* Evaluated existing Software Development Lifecycle (SDLC) and DevOps capabilities, ultimately delivering a software Capability Maturity Model balancing organizational and architectural constraints with risk mitigation and modernization goals* Constructed build pipelines leveraging Docker and Kubernetes* HIPAA training in support of healthcare and benefit enrollment software* R&D and administration for Google Cloud Compute Engine, in support of cost reduction versus AWS and to supplement capacity during data center migration* Ansible script development and review for new application deployment* Management and technical direction for offshore contractors* Created project scope statements, budget plans, work breakdown structures, and groomed project and team work backlogs* Reduced defect rates in integration branches by requiring successful builds of pull requests and additional reviewers for pipeline changes* Internal dependency analysis via Maven, Bitbucket, and Graphviz* Open source governance and reporting for senior leadership

Technical leadership role within the Trading Technologies group. Primarily responsible for multiple production trading systems (Alternative Trading Systems, market access platforms, 15c3-5 risk checks, low-latency trading API) handling billions of dollars of executions per day, accounting for >6% of U.S. equities trading.* Responsible for day-to-day technical operations of trading systems for Bank of America Merrill Lynch, LeveL ATS, and other clients, spanning the U.S. and Canada; bare metal, AWS, containers, VMs, and IBM Cloud* Managed multiple teams of DevOps Engineers and Software Engineers* Triaged issues, supervised production support, and performed issue post-mortems for internal and external audiences* Agile sprint planning for development and DevOps efforts, product development, and strategic planning for software and infrastructure* Automated provisioning of servers (primarily Ubuntu) via Puppet and Ansible for rapid deployment, reproducibility, and security remediations* Ensured proper infrastructure and environments to enable others (and myself) to succeed with C++, Python, Ruby, and JavaScript development* Continuously improved monitoring capabilities to close gaps as they were discovered and to cover new systems via collectd, Prometheus, Nagios, scripting, and integration of hardware vendor utilities* Established infrastructure and dashboards for system metric capture and visualization via Grafana, Graphite, and Centreon* Gathered, analyzed, and clarified requirements for new/legacy systems* Analyzed the impact of regulatory and technical specification changes* Analyzed application logs, system metrics, NoSQL data stores, relational databases, raw data, and packet captures* Managed role-based access controls, system entitlements, repositories, and CI/CD* Provided subject matter expertise in market data (SIPs and direct feeds), clock sync., risk checks, FIX, regulatory reporting, and capacity planning

Senior Engineer holding a variety of roles and responsibilities in support of government software development, risk reduction, and integration projects utilizing Agile (Scrum) methodologies.Technical Lead* Provided technical direction and architectural guidance to scrum team* Developed Flex/Flash front ends and J2EE web services* Worked with requirements analysts and other teams to ensure technical requirements were both accurately communicated and fulfilled* Drove office-wide software engineering standards for static code analysis, code reviews, and branching* Integrated with legacy data and enterprise service-oriented architectureLead System Administrator* Provided hardware specifications for and established a large-scale isolated development environment, from scratch* Managed configurations of workstations and server VMs via custom Puppet modules & system administration work backlog* Implemented offline account caching on Mac OS X via OpenDirectory and OS X Server* Configured XML firewalls and air-gapped scanning of softwareProduct Owner* Led a scrum team focused on application logging at an enterprise scale* Provided technical leadership, instituted versioning standards, and developed software, primarily in Java* Translated customers’ requirements to scrum team via product backlog* Integrated applications with F5 BIG-IP load balancersSenior Developer/Integrator* Researched and evaluated Identity Management and Single Sign-On solutions, including OpenAM and Shibboleth* Analyzed and adopted industry standards, best practices, and mitigated OWASP Top 10 security risks* Implemented prototypes using viable candidate products

Automated Trading DeskContinuous improvement and automation of monitoring, configuration management, and deployment capabilities & support and troubleshooting of automated trading systems used globally for retail, institutional, and proprietary equities trading.* All tiers of support for electronic trading infrastructure for both market makers and broker-dealers (spanning market data, RegNMS, order management systems, trading interfaces, and databases)Identified and engineered solutions to emergent issues with software, OS, hardware, and networks, in both production and QA environments* Planning and project management for data center refreshes, server migrations, and legacy system retirements* Took lead role in software development to automate system health testing and integrate custom tools with enterprise solutions to deliver a “single pane of glass” for monitoring via GroundWork, MySQL, & jQuery* System administration for 1000+ Linux servers across 10 data centers* Capacity planning, load balancing, and low-level system tuning* Change management and reconciliation for production systems* Maintained supporting codebases in Ruby, Bash, Python, Perl, C, C++, PHP, & Java* Information security (including SOX compliance) and risk/audit support

E-commerce web site development, online store management, and supply chain logistics for a small retail furniture start-up. Established a nationwide presence from a single storefront, via free delivery.* Research and development of information technologies* supply chain logistics* management of online store* CGI programming in Perl and PHP* database schema design, administration, and creation of SQL queries* development of user interface tools in Flash and Perl* integration between multiple databases and payment gateway* Linux and Windows server administration* search engine and PPC advertising optimization* graphic design, including print advertisements, signs, and web sites* customer service and sales

Provided database and supply chain solutions for a non-profit educational organization serving Anderson, Oconee, and Pickens counties. * Software development* database schema design and creation of SQL queries* modernization of warehouse and inventory management by implementing bar code scanning system* integration of new database with UPS WorldShip database and legacy proprietary databases and spreadsheets* computer, network, and printer administration* order fulfillment, data entry, and customer service.

Co-developed a network of video game web sites which received over 15 million page views per month.* Management of ten employees and contractors* Red Hat Linux server administration* web site design and development* CGI programming in Perl and C++* editorial duties for content and news coverage* public relations* graphic design* previewed unreleased games by invitation and at major industry events