Security Engineer within AWS Amazon Linux

Systems Engineer (Support) working within Amazon Video, launched Channels (Linear television) in US, EU, JP including HBO, Cinemax, Encore, Starz, Showtime, Cheddar, Discovery, Eurosport, and many more. Built live events platform to scale for events like Thursday Night Football, US Open, Laver cup, AVP, ATP and many others. Grew team from 3 people to 30+ training new engineers, event operators, managers, incident managers and project managers on current and future platform features and quirks. Assessed architecture requirements with TIMS and TPMS for onboarding new linear channels and live events. Improved reliability of long running linear events 10x over original linear channels launch. Future innovations in the linear and live video space to be seen here.

Demonstrated success in detection and remediation of active threats to the enterprise by stopping a phishing attack and removing the offending email from all affected assets. Satisfied all FINRA regulatory requirements for Security Awareness Training for the new year with total costs of $0 representing a significant savings over last year's training program for the branch level security program. Utilized file integrity monitoring reports where the change advisory board previously only had handwritten reports on change to determine regulatory compliance. This resulted in a significant decrease in time required for CAB meetings and a simplification of filing for change requests. In addition the file integrity monitoring reports provided a rich set of data to include in the SIEM for event correlation, incident investigation and compliance monitoring activities. Provided proof of concept that Venafi could both issue internal certificates as well as keep track of expiration and certificate deficiencies allowing for secure handling and visibility across all SSL certificates within the organization. Tools utilized include AlienVault, Centrify Server Suite, Active Directory, Cisco IPS (ASA 5585), Cyberark, Venafi

Demonstrated excellence in support of US Government (customer), taking advantage of previous experience to ensure AT&T assets pass DISA FSO audits and retain Authority to Operate status. This involved researching findings generated by an audit team to validate existence of the vulnerability on affected systems, fixing or patching the affected components and also collaborating with vendors to update their product for compliance where necessary. Completed this project with the auditors accepting all POAM documentation with no further questions and closing the associated findings for a 100% success rate, compliance was achieved within a month instead of the original 3 year timeline. This work included updating and patching Centreon to support SSO via Kerberos + LDAP in an environment where there are unique challenges to the configuration involving ownership of the monitoring platform by a vendor and domain by a customer where multiple security enclaves are between the two.Successfully mitigated some of the largest active attacks of 2012-2015 through the use of proprietary infrastructure as well as through the use of COTS solutions including those from McAfee, Intellitactics, Arbor networks, Cisco, Juniper and other vendors for IDS/IPS DoS/DDoS.

Refreshed High Performance Computing (HPC) system from ground up. Every part of the new Redhat Linux clusters (6 in total) were addressed to improve processing (Single quad core processor to all available node processors - dual quad xeon) and IO (150MB/s local to 1500MB/s SAN) performance and reliability (SAN storage instead of internal array, autoprovision additional nodes instead of hand built nodes) and efficiency (Blade based node vs 2u node) over the legacy design for our particular workloadDeployed MOAB to link 12 clusters in a grid across 3 sites to better manage resources and balance the workload onto the newer clusters while turning down the legacy clusters. Many changes were required to migrate the cluster applications to new environment, necessitating working closely with the development team during the design phase of the new cluster configuration. In-depth knowledge of DOD and DISA information assurance policies and procedures regarding Linux based computer assets was used to ensure the new clusters and supporting Linux infrastructure passed DISA FSO audits and attained Authority to Operate status with zero findings for the Linux infrastructure, a feat never achieved before in the history of this program.

Duties included most tasks in the day to day operation of a small business, management of 3 contractors day to day and 7 during large projects. Budgeting for promotion of the business as well as advertising duties were not day to day but significant time investment was required to maintain the business in these areas. Big wins included development of solutions for streamlining home offices using VoIP and Linux based routers, Linux as a corporate Desktop, Linux as a Home Desktop, Linux for intrusion detection, and Virtualization of computing environments using VMWare and VirtualPC, VirtualBox, and similar technologies. These solutions allowed for cost reduction both through the use of Linux and through the use of virtual computing while delivering features and stability not possible with any other combination of technologies.

Deployed home grown stateless VMWare cluster solution similar to ESX utilizing HPC Computing principals to allow for easy addition of special projects or temporary resources to assist with unexpected infrastructure load. This allowed for automation and fine grained control of infrastructure resources in an environment that was previously primarily manual deployment of systems and resources.Built and Deployed MPI cluster heads for interactive user computation and compute work/storage nodes. Used MATLAB for burn-in testing of new nodes.Deployed MOAB cluster resource manager and Torque cluster process scheduling system Manually secured and managed Redhat Linux servers to comply with DISA FSO and IA policy.Rebuilt and managed Subversion server to replace legacy CVS server. Fought for storage of automation scripts, configuration details and other operational tribal knowledge in this server.Fought for the addition of a ticketing system to help track current issues, won the case and installed Fog creek software's Fogbugz bug tracking and ticketing system for use across several departments. This system was later adopted in DISA position for similar purposes.Supported homogeneous cluster environment and integrated into a unified grid computing solution, which was later replaced with work in DISA position.Researched Ibrix Parallel FS, GPFS, GlusterFS, Hadoop, and several other clustered filesystem/data warehousing methods to replace on-node flat-file storage in legacy cluster.