Collaborated with the Head of DevOps and other DevOps Engineers to build, deploy and maintain several dozen Magento-based e-commerce sites using Amazon Linux hosts. Responsible for code repository Used Jenkins for CI/CD automation and Bash, Python, and Ansible for configuration and scripting.• Developed Ansible scripts to automate cipher replacement/upgrade and shared key regeneration for assorted versions of OpenSSH across multiple hosts.• Helped develop Python runbooks for Azure automation and Bash scripts for AWS automation.• Began initiative to convert classical hypervisor-based development and production environments to Docker containers with Amazon ECS for orchestration and scaling.

Engaged to upgrade and secure organization’s network and server infrastructure.• Upgraded ESXi server to fix known security holes, including subsequent troubleshooting and patching related to errors with legacy tape backup system dependent on passthrough.• Replaced end-of-life Cisco PIX firewall with Fortigate, enabling higher security VPN software on a greater variety of platforms (Mac, Chromebook) than possible with legacy system.

Designed, implemented and administered all IT-focused activities of a multimillion dollar nonprofit manufacturing organization in collaboration with the Director of IT and the System Administrator. Provided phone and hands-on support to both internal office users and employees at a dozen remote locations. Primary architect of organization’s PCI and DFARS cybersecurity initiatives.• Was instrumental in moving corporate and departmental web sites from third party hosted solution to in-house Linux/Apache/PHP/MySQL servers.• Built and maintained multiple Magento installations for departmental e-commerce use.• Used Ansible configuration recipes and Git version control system to convert stand-alone in-house e-commerce platform to a dev/test/stage/production workflow running on a combination of in-house and Amazon AWS hardware.• Developed, maintained, and audited procedures to ensure all network, server, and web site infrastructure maintained compliance with all PCI SAQ D requirements.• Replaced firewall hardware to improve performance and security, along with replacement of both employee and office-to-remote VPN tunnels, in keeping with improving security requirements.

Provided server, firewall, data center, and network design and administration for a hosting-focused service provider, plus phone and hands-on support for co-located and hosted customers. Exposed to a wide variety of hardware and software vendors, due to variety of customers’ requirements.

Provided design and planning of all aspects of network and server infrastructure for an Internet service provider with approximately 12,000 customers plus other client ISPs with customer bases between 5,000 and 10,000 users. Performed administration of servers, firewalls, routers, and switches at multiple points-of-presence, including installation and maintenance of DNS, DHCP, E-mail, and web services, as well as internal administration and VOIP applications for customer support call center.● Completely re-built and consolidated ISP client’s servers to improve performance and enhance flexibility; praised by both client and employer for completing project in under one month and for substantial increases in server operating efficiency and reliability.● Designed and implemented a load-balanced redundant web and E-mail server farm with real-time replication of all user data between servers, reducing outages and simplifying maintenance.● Instrumental in converting hosting farm from single-service oriented physical servers with local storage to customer-specific virtualized instances using Solaris Zones and ZFS on a central NAS.

Contracted to assist in-house IT staff with commissioning of Internet connection and firewall. Primary help desk contact through service transition.

Performed same duties as Axis.net, now the Milwaukee POP of MWCI, Inc.

Performed design, installation, administration, and support for servers and network equipment, primarily dial-up remote access for end-user clients and UNIX web hosting servers.