I will update this section as I gain experience in this new role but it is very similar to my previous role as a Principal DevOps Engineer at my last company.

In this role, I designed, built, and implemented DevOps practices, systems, and organizational standardsfor the financial services growth technologies hosted on AWS infrastructure. I integrated acquisitions onto the infrastructure and migrated to AWS. I developed and maintained Infrastructure as Code (IaC) utilizing tools like Terraform and GitHub. I federated existing accounts, established VPC peering, and deployed management and alerting tools to boost security. I mentored and trained junior engineers to maximize productivity and collaborated with cross-functional teams on multiple projects. I upgraded technologies, facilitated security audits, and resolved discrepancies to mitigate risks. I also tested functionality with read only replicas in lower environments. Some of my achievements include: Steered a major modernization project by containerizing “Emburse Spend” BU onto EKS and AWS SFT from standalone EC2 App, Web and FTP instances; leveraged role-based security via IAM roles and deployed DataDog APM replacing Sumologic. Attained a $30K monthly operational expenditures saving by leading a major cost savings project that included migrating Elasticsearch to Graviton and RDS storage from IO1 to GP3, leveraging Spot Instances for EKS node groups in lower environments, rightsizing multiple RDS instances by working with devs to share inefficient MySQL queries, upgrading to MySQL 8 to eliminate extended support fees, and replacing Datadog APM to Coralogix for monitoring and logging. Onboarded non-PCI (payment card industry) compliant startups; identified and isolated personally identifiable information(PII) and cardholder data (CHD) to ensure security and made them PCI compliant and partnered with developers to securely integrate card services to existing legacy expense reporting SaaS solutions.

In this position, I established CI/CD pipelines to ensure the seamless integration and delivery ofapplications. I evaluated the existing infrastructure and systems and recommended improvements thatboosted functionality and availability. I also designed and implemented automation scripts to improveaccuracy and operational efficiency. A few of my achievements include: Served as the first dedicated DevOps engineer focused on virtual credit card and ACH transactions after an organizational restructuring eliminated DevSecOps. Segregated PII and CHD data in Emburse cards and Abacus BUs to gain PCI certification, including establishing separate VPC and subnets to isolate networks and new RDS instance for CHD data and encryption at rest on databases with CHD as required. Deployed a PCI required antivirus scanning solution on uploaded files from customers utilizing BucketAV. Applied IAM Roles and Secrets Manager, enhancing control access and simplifying security access management of AWS resources.

In these roles, I spearheaded penetration (pen) testing and patch management to discover and eliminatesecurity vulnerabilities. I interfaced with third-party PCI auditors and the development team to resolvecomplex issues. In addition, I managed web application firewalls (WAF) to prevent threats. Myachievements include: Served as the subject matter expert (SME) on four-person team. Ran a quarterly phishing exercise with the security team. Collaborated with SOC and PCI auditors to gather information for audits and remediate findings; interfaced with developers on code related issues such as outdated libs. Implemented Contrast and tfsec for application security.

I directed the daily operations and led a three-member team to design and launch technical solutions thatsupported the production infrastructure. I coordinated technology stack transformations that increasedorganizational efficiency and system security. I also partnered with IT stakeholders to develop enterprise-wide technology roadmaps and facilitate data center migrations. I communicated with vendors for pricingand support. My achievements include: Deployed and maintained a service-based data center that featured an OpenStack environment for the DevOps team, mimicking AWS as much as possible. Installed 16 node 1.5 PB object store using Swift Stack, resulting in significant savings on Amazon S3 spend. Launched an 8 node SolidFire cluster for high performance iSCSI block storage managed via Trident API and Netapp AFF-A200 all flash array for NFS storage, increasing efficiency and automation by allowing the DevOps team to fully manage exports under SVMs and move to a container-based Kubernetes environment using Jenkins for CI/CD. Revamped an outdated hardware infrastructure for a VMware environment that ran traditional legacy workloads. Applied VxRail, vSAN on ready nodes, Nutanix, and Netapp's SolidFire as hyperconverged infrastructure (HCI) solutions, creating a distributed computing platform fully integrated with the entire data center.

I oversaw the installation and configuration of operating systems and software to support our systemsand storage infrastructure comprised of 3K physical nodes and nearly 2K virtual machines (VM) inmultiple data centers globally. I monitored system security to protect against external and internalattacks. I designed and built virtual environments and orchestrated data center migrations. In addition, Iautomated processes to optimize deployments and repurpose systems. My achievements include: Promoted to a senior role on a seven-member team located across the U.S. west coast. Leveraged my virtualization, storage, and Linux and Windows systems skillset to consolidate four datacenters into a single Switchnap 7 facility located in Las Vegas. Paved the way for the sale of web properties (Livestrong.com and ehow.com) during a rebrand from Demand Media to Leaf Group under new senior leadership. Partnered with engineering teams to orchestrate the physical to virtual conversion of multiple Linux and Windows systems and transition VMs to a single facility from various data centers, driving business continuity for Pluck BUs new owners following the sale. Designed and built a vSphere 5.5 virtual environment that used Dell R820s, EMC VNX5500, and 5300 Arrays on Brocade fiber channel switches; this served as the target for migrations and P2Vs out of various colos.

Consulting any and everything VMware. Some examplesAt Fox Network Group, I assisted with upgrade ~400 VM virtual infrastructure to vsphere 5.1. Assist with HP SIM upgrade and tuning for alerting. Assist with SCOM R&R including agent troubleshooting. Automate VM build process.At USC Annenberg School of Multimedia Art, I Implemented vSphere at the Responsibilities included POC, assistance in project planning, hardware/software purchasing including SAN and network gear to support the virtual infrastructure. Implementing and doing training/handoff of VMware vSphere virtual infrastructureAt Westfield I standardized and expand the current ESX 3.5 Farm in preparation for a 2nd phase server consolidation project as well as fine tune and support a recently implemented VMware View 3.1 Managed 200 VDI Linked Clone Desktop Pool using persistent user mappings.

Work as a resource for Forsythe's sales teams and clients in qualifying and consulting on our IT sales and service portfolio focus on converged hardware (i.e.Blade, 3cV, vBlock etc), Forsythe's partnered cloud offerings, and virtualization 2.0 solutions.

Responsible for ~ 500 VM Virtual infrastructure and HP C7000 Blade/virtual connect hardware Infrastructure at EP including implementation, operations and design.Migrated virtual infrastructure onto C7000 blades and 3Par storage.Upgraded the environment to sphere 4.1.Implemented a self serve dev/qa IaaS solution via Lab Manager Implemented Virtualization DR solution via SRM.Knowledge transfer and documentation.Participated in ITIL methodology training and implementation.

A Legacy Countrywide employee in the process of being re-orged into Bank of america. Currently part of "tiger team" tasked with Data Center Integration initiative. In a nutshell we are integrating Countrywide's IT systems into BAC. As a Virtualization SME at Countrywide, my specific task is leveraging Virtualization technologies to assist with migrating servers to Legacy BAC owned Data Centers. (V2V P2V P2P P2V2P)

Responsible for all ESX Implimentations and Infrastructure maintenance for all ESX Vi3 environments in the West Coast Data Centers including CHQ, Simi valley and Rosemead.Training operations teams for Production handoff of all VMWare related responsibilities.Work directly with Architecture team for all of Countrywide's virtual infrastructure implimetations including feedback on as designed vs as built OK implementations

Senior Operations Engineer for The CHQ datacenter. Escalation point for all Windows OS and HP hardware related issues. Work directly with business units to assist in specing out and tuning stand alone windows servers, server farms, dr stratigies, etc.

Responsible for Sharepoint and SMS incluing Enterprise wide patch management for all Windows servers using SMS 2003 and Shavlik.