• Performed SAST/DAST remediation using HCL AppScan and Cloudguard tools as part of application security program based upon OWASP 2023 standards.• Architected AWS global multi-region backup/ disaster recovery plans for domestic and international usage.• Used GitHub for security testing within a CI/CD pipeline.• Performed application security reviews of AWS services using Terraform.• Collaborated with Application teams to create custom WAF rules to deter unauthorized access.• Managed repositories within GitHub for CI/CD testing and orchestration. • Led security team directing new company 3rd party acquisitions.• Performed AWS security audits to find vulnerabilities and led remediation programs.• Architected security solutions for Rest API’s and python-based Lambda functions within AWS.• Implemented DLP policies within AWS to discover inappropriate behavior.• Architected WAF solutions using AWS managed rulesets.• Communicated security requirements from business owners to internal IT staff, including Application, Networking, and Cloud Engineering teams.• Oversaw results of penetration tests of applications behind WAF’s to be sure of WAF rulesets.• Performed security audits of Terraform and Python CDK automation scripts.• Created VPC architecture limiting public access and implementing encryption.• Created and administered Security Groups using Terraform and encrypted network traffic.

• Written code to contribute to and provision software architecture of highly concurrent, high-throughput systems via CloudFormation and Terraform.• Used GitHub, and AWS Code Deploy to ensure zero downtime during application deployments through rolling updates.• Worked with developers in deploying Python Flask applications to ensure base AMI that contains the necessary Python runtime, as well as OS patches.• Designed with and developed front-end development solutions using JavaScript, CSS, HTML & Browser Developer tools.• Ensured system reliability by integrating our existing stack with modern monitoring solutions via CloudWatch. • Migrated existing infrastructure using serverless offerings like AWS Lambda, API Gateway, Dynamo DB via Infrastructure as Code (IaC).• Replicated data into standby EFS clusters across VPC’s as part of multi-region disaster recovery strategy to limit RTO and RPO.

• Designed, implemented, and maintained architectural solutions designed for successful deployment, security, and high availability in the AWS cloud.• Provisioned various security solutions including S3 bucket policies & encryptions, IAM Least Privilege Principle, Security, VPC ACL configuration, AWS Shield for DDoS protection and AWS WAF to filter specific requests and IP addresses.• Developed, implemented, and tested data backup and recovery procedures using S3• Recreated company organizational structure in the cloud using AWS Organizations, Control Tower, and IAM user groups & permissions.• Configured VPN Gateway, Virtual Networks, Security Groups, Routing, Load Balancing, and NACL’s within AWS.

NCAA Division 1 accreditation Participated in Conference and Regionals racesLearned discipline and the payoff of hard work