Matt H. Email & Phone Number

New York, Ny, Us

San Francisco, Ca, Us

New York, Ny, Us

Security Engineer on the DevSecops Team.Projects include:Successfully led the migration of monitoring and alerting from New Relic to Datadog for NYT Syndicated NYT Licensing team and systems.Built and Automated the deployment of the New York Times website as an Onion service on AWS, Including PKI management and maintenance.Worked with the Information Security team to automate the deployment of Falcon Crowdstrike agents across AWS environments.Hands-On:Maintain Hashicorp Vault clusters running in 2 clouds and six different environments.(AWS, GCP) Automated provisioning and sharing of Linux images on AWS and GCP platforms using Packer and Terraform.Wrote and deployed Ansible playbook for Golden Image pipeline to validate installed services across multiple Linux Operating systems (AL2023, Amazon Linux 2, Rocky, Ubuntu, Debian).Install and configure Vault plugins across different environments.Review Pull requests for Vault policies as part of day-to-day responsibilities. Collaborate across teams and advise on best security practices.Work closely with platform engineering teams to ensure compliance while not hampering productivity.Write and update documentation on completed projects. Update team runbooks as processes are updated.

New York, Ny, Us

Developing infrastructure as code at scale at the New York Times.Member of the Infrastructure team at the New York Times.Building out Red Hat Ansible tower clustered environment to deploy OS patching automation across Windows, Linux, and Network Switch environments.Collaborating on the design, planning, architecture, and security hardening of Red Hat Ansible Tower environment for enterprise use.Assist development teams with application issues such as logging, monitoring and cloud infrastructure provisioning.Work with security and compliance teams to ensure that PCI compliance policies are implemented and enforced.Use and contribute to internal tooling that is used in multiple development groups.Troubleshoot and diagnose issues with Jenkins build pipelines. Worked with Hashicorp Vault, Consul, AWS, Azure Active Directory, Jenkins, GitHub, Docker.Implement signed ssh certificate backed connections on Ansible Tower using Hashicorp Vault as the Certificate Authority.Assist development teams with Github repository configurations and security best practices.Migrate application checks from Pingdom to Datadog. Work across teams to assist with standardization initiatives on different code repositories in the organization. Update and improve current monitoring. Utilize Datadog for metrics, visualization, and alerting.Improve security posture when possible and push to implement a "zero trust" internal network model.Participate in on call rotation and contribute to technical/procedural run books.

New York, Ny, Us

Member of the SRE / Infrastructure team responsible for building and maintaining production, development, QA, and corporate environments.Participate in 24/7 on-call rotation to support the exchange and ancillary services. (Pagerduty)Maintain and contribute to the company's infrastructure repo on Github. (CI/CD)Assist developers with various aspects of their environment setup including ssh configurations, git repo configuration, etc.Participate in deployments of production code utilizing Ansible playbooks. Write and modify Ansible playbooks to deploy new infrastructure code.Designed, built and deployed JamfPro cluster in AWS to manage laptop fleet. This tool helped us achieve SOC II Type 1 certification. Troubleshoot and remedy problems/issues with any server-side or networking issue in any of our environments. (Debian Linux)Working with Linux (Debian Ubuntu CentOS), Prometheus, Splunk, Netbox, Github, Logstash, AWS, Terraform, Palo Alto firewalls, Fortinet firewalls.Work with the security team to patch vulnerabilities and CVEs when needed. Experience with AWS IAM provisioning, role escalation policy provisioning, and granular policy editing. Perform local testing with Molecule and Docker for Ansible roles. Work with the institutional support team to ensure both sandbox and API customers have reliable connectivity. Troubleshooting Jenkins build pipelines.Work with development teams to streamline the release process for the mobile application on iOS and Android platform.Maintain (Jfrog) Artifactory instance in AWS for development teams to use cached repositories. Build and maintain infrastructure both in AWS EC2 instances and bare metal HP Proliant servers in our datacenter.Maintain and configure Nasdaq SMARTS software for the market surveillance team.Troubleshooting Python and Bash scripts when issues arise.Maintain and configure Corvil (now Pico) appliance to monitor trades and orders at the network/packet level.

Berlin, Berlin, De

Configure and Deploy Network Configurations with ChefConfigure Network Switch backups with RancidMaintain AWS instance of JAMF ProConfigure and network monitoring with Prometheus/GrafanaSoftware package development and deployment with Jamf ProWork with the security team to onboard new engineersI had a chance to learn about Prometheus from some of the source developers which was a great experience.

Berlin, Berlin, De

IT Lead for North American division of SoundCloud. Supporting NYC,SFO and LAX offices.

Oakland, Ca, Us

Oakland, Ca, Us

New York, Ny, Us