Josh Lim Email & Phone Number

Fairfax, Va, Us

Lead DevSecOps, Network, Cloud, Security, Infrastructure, and Systems Engineer• Led Migrations to different cloud providers and processor architectures (x86 and ARM)• Architect hosted development environment complete with automated scripts, resourcemonitor triggers, failover strategies, cloud storage lifecycle policies, infrastructure backup/restore policies, DevSecOps pipeline, automated code deploy, centralized configurationmanagement, serverless event-driven compute services, VPC with DMZ and IGW, Route53DNS, EC2, ELB, ALB, Triggered Policies, and secure RFC1918 routing.• Work closely with software, db, and test engineering teams to encrypt and optimizeapplication integrations and operations• Lead SSO/Authentication changes and guidance with PKI and TLS termination across various environments• Implement configuration policies, HA cluster scaling, network device iRules, trafficmanagement policies, and application supporting devices• Manage all environments and perform impact analysis + resolutions for any degradations• Network SDN with Big IP and AWS ALB for proxies and load balancing, programmaticnetwork infrastructure, NACLs, Route tables, Firewalls.• Manage Software release direction with security and performancerequirements via SIEM, optimizations, thread and resource management.• Reverse Engineered and documented several key processes including JKS SSL terminationwith 302 and various types of network services by utilizing PE and NPE discernment, GOTSOCSP, and PKI value map to data points for Access Management (AAA)• Work closely with Software, Test, and DB Engineers e.g. carefully planned ETL throughsecured pipe data design and contents for another program’s development kickoff• Jenkins product owner; automated manual build and deployment processes• Resolved development connectivity issues and internal server issues inseveral tomcat apps

Fairfax, Va, Us

Created and presented Indrasoft’s DevSecOps pipeline solution powered by Maven, Jenkins, AWS (S3,CodeDeploy, EC2), and various Powershell and Bash scripts powering all Indrasoft’s Java/Spring/Tomcat applications in Development Environment• Created DSF Dev Resource Offhours plan and yaml script to automate server powermanagement and volume auto deletion to reduce Development Cloud Provider bill over 100%• Resolved thousands of inherited/backlogged Production data transfererrors i.e. resolving multilayer errors from 400/500 series codes, proxy window socket andconnection errors, improper memory management (resulting in overflows, spills, java heap. GCissues, and thread processing errors) inefficiently written handler functions and non-chunkingdb queries, data loops with no automated search and terminate follow-up, and daily 1000errors on COTS software from improperly scaled Catalina options and memory management• Implemented Dev environment image based backup and recovery plan, versioning andfailover for blob storage, compliant RTO/RPO, yarn local dev• Reverse Engineered and documented several key processes including missing andincomplete procedures for encrypted JDBC ODBC and Wallets that caused several outages• Integrated third party gov entities through SDN with MLS architecture by configuringtraffic managers, firewall policies, lb, certificate truststores, andsession tokens.• Environment owner performing deployments, rollbacks/restores, dependencyintegrations, cache refreshing on data directory, and debugging (networkerrors,Java,Tomcat)• Reverse engineered stored procedures and configurations• Lead TEMs with Program Director for key actions e.g. deployment bottlenecks,agnostic pipeline for other programs, high-availability/fault-tolerant design, bash/pws automatedscripting to alleviate code errors, and scaling

Nashua, Nh, Us

• Created workflow w/ Cloudwatch, KMS, S3, DynamoDB, Python Lambda, CLI, CF, and NGA APIs to automate user and GovCloud Account creation and management.• Created MFA SSO, NPE (w/ SSL cert), and IDAM processes for USAF, transitioned production enclave through phased approach, and optimized centralized tracking of PKI identities (server and person). This links all cloud provider accounts and providing RBAC for Air Force programs and CI/CD tools, complies w/ security controls, and employs cross-account + GOTS OCSP responder• Designed & deployed IAM update pipeline linking 30 cloud accounts, and discerning permissions based on account ID at the policy level to keep procedures and names uniform across documents• Automated cross account bucket creation that integrates with automated cloud environment setup integrating with a DevSecOps pipeline that leverages AWS one way transfer device.• Created multiple solutions for on prem network NPE automated access to cloud resources from a container i.e. kubernetes w/ STIGed images + networks• Automated fault tolerant one way transfer pipeline to S and TS using Diode, Cloudwatch polling, SQS and SNS for scalability, multiple scenario S3 bucket strategy, Lambda functions, and authored Theory of Ops• Became team lead when previous lead left the contract. Onboarded IAAS layer customers, designed and assigned engineering tasks, established foothold for expanding team with demonstrations and streamlined guide to leverage my product to access all environments.• Wrote & deployed IAAC scripts that automates bare-metal creation of proxy WSUS and AD Windows, secure network architecture in private subnets & DMZ, integrate bastion & forward proxy, and Domain Controller. Created counterpart for RHEL servers that installs configuration management containing components for Yum, Elastic, Puppet, and ACAS, Fortify• Created process for VPC peered cross account SLS including a script for code scanner and dependency installation from cloud

Fairfax, Va, Us

Same DOD client as prior position, changed contractor company. left due to sudden need to move end of Apr2019)• Initiate SIEM (centralized logging solution) alerting mechanism for Linux and Windows servers to report audit failure events through ElastAlert and the ELK stack (Elastic Search, Logstash, Kibana).• Propose a recurring backup script and tiered storage lifecycle solution to manage AWS backups that will directly save the contract hundreds of thousands of dollars in backup storage fees a year.• Monitor cluster health for nodes driving automation (Ansible, Kafka, HDFS, etc.)

Falls Church, Virginia, Us

Built F5 based platform and DevSecOps pipeline. Used OpenShift to pull source code into artifacts or containerized apps, f5 for SSO (single sign on), Jenkins and Ansible for CI/CD, and several tools for compliance with security guidelines (NIST) and auditors. This reduced build times from 4+ weeks to 24 hours or less and saved millions in funding.• Created security solution for unwanted access attempts by automating alerts for key ENIs through Cloudwatch, SSM Agents, and persistent routes to AWS metadata endpoints.• Established configuration management by setting up and debugging various Devops tools (i.e. Atlassian Crowd, Bitbucket, Jira, Nexus, Artifactory, Openshift, etc.) as services (systemctl) and writing Ansible playbooks for future install/updates.• Developed CI Jenkins files to create pipeline builds that utilize Groovy step modules, shell scripts, and Web APIs for DevOpsand security/vulnerability tools. The pipelines fed source code and scanned code (SAST), artifacts (dependencies), and containers to provide a containerized app at the end. • Debugged heavily through Jenkins console output by SSH/RDP into the server posing the issue.• Administered Linux and Windows servers by manipulating registries, firewalls, volumes and filesystems• Managed client & server SSL/TLS certificates by leveraging DoD CA, modifying Java stores and Windows MMC, and installing server certs for port 443. • Engineered sophisticated layered authentication process and RBAC by combining SAML with LDAP and physical tokens (CAC).• Implemented F5 BIG-IP Access Policy Management, Local Traffic Management, and Webtops.• Integrated custom intermediary SMTP solution using IIS 6 and routing traffic through to enforce TLS 1.2 configured via RegEdit.• Queried SQL Server databases to alter server settings for configuring servers using Apache Tomcat and HTTPD proxy, and for SAML SSO.• Remediated servers against DISA STIG compliance guidelines using OpenSCAP, StigViewer, etc.

Falls Church, Virginia, Us

• Presented a Cross Account Federation solution to IA's leadership (NetSec) that consolidates Navy IWC’s various AWS GovCloud consoles, centralizes identity management, and was implemented across the entire organization.• Provisioned secure architecture with Reverse proxies, Bastion hosts, NAT Gateways, Private Subnets, Elastic Load Balancers, and Security Groups using CloudFormation and debugging by tracing the stack.• Developed Python Lambda functions for tag based EC2 cluster management, recurring backups that created and cleaned up snapshots, and SNS notifications of system and security alerts.

Camp H. M. Smith, Hi, Us

Working with program and system teams, I managed IC projects using AGILEmethodology and:• Increased productivity by implementing boolean search algorithms and metatag queries to parse reports from various agency database integrations.• Compiled collective data to investigate threats, evaluate trends, and briefsteering committees.• Scripted scheduled server audits, queried and ETLed metadata for ISRdata, managed RBAC through AD, integrated analyst software with GREtunnel based ISR feed, consulted on cloud based install of COTS andGOTS products, utilized RegEdit and MMC to keep OS STIG compliant withencryption standard and import DISA CA approved TLS certs.

Camp H. M. Smith, Hi, Us

Camp H. M. Smith, Hi, Us

Duties of branch lead, compliance, metrics, brief salient territory reports, integrate and aggregate collection across agencies, improve boolean algorithms and data analysis.

San Diego, California, Us

Coordinated tasks w/ part-time consultants. Created core application: ETL programs integrated with budgeting, consumer behavior analytics, and customer retention (surveys and promotions e.g. surveymonkey, pike13, mailchimp) based SAAS applications for various Shopify/web based ecommerce companies. Hosted the service on the cloud, monitored those concurrent processes, built security logic such as throttling for buffer overflows and formatting for injection based attacks, and scaled the service to accommodate over a dozen different clients. Used Azure, AWS, and Heroku.• Developed reusable and chron automated functions that OAuth from sFTP’s or multiple Web APIs, store data on AWS S3, ETL that data, and then Bulk Upsert or chunk write to Microsoft Azure SQL Server and AWS Redshift Data Warehouses.• Assisted revenue stream by creating a sophisticated application for a new client from Requirement Analysis to Operations and Maintenance with Monitoring Tools (Heroku plugins).• Increased client satisfaction by quickly debugging through SCM and deploying optimizations via microservices.• Allowed for cheap maintenance by documenting code, QA testing, and participating in SCRUM standups.

Berlin, De

Built and provisioned several applications (web & mobile) for local business inquiries:Tinker (Mobile Application for Fashion Consulting)• Built a React Native front-end & Ruby on Rails back-end that employs MVC & REST• Created Components & functions that render user photos, comments, likes, and a navigation bar• Designed Screens that import NPM libraries to utilize the phone’s camera/gallery• Authenticated users via sending State variables through AJAX calls, creating JSON Web Tokens, and storing user information in a PostgreSQL database• Optimized Redis memory usage by converting photos into Base64 objects then uploading to AWS S3Steve’s Coffee (Web/Mobile Invoicing Application) • Built a Bootstrap front-end & Ruby on Rails back-end that employs MVC & REST• Constructed key-binding functions that canvas HTML5 cursor movement to capture signatures• Designed a modern UX compatible with a several devices including tablets using CSS3

Berlin, De

DBC Overflow (Web Application similar to Stack Overflow)• Built a Flexbox front-end & Ruby on Sinatra back-end that employs MVC & REST• Transformed HTML & CSS elements with AJAX, JavaScript key-binding, & jQuery (e.g. a comment button into a text input box) to improve speed and keep many views single page• Authenticated users via RegEx & BCrypt, and stored sessions via Rack Middleware• Created Polymorphic Associations & Has Many Relationships through Active Record• Featured algorithms that score votes and sort by ‘Best Answer, Most Recent, and Most Votes’Tweeter (Web Application similar to Twitter)• Updated a JavaScript front-end & Ruby on Rails back-end that employs MVC & REST• Designed a modern UI capable of unlimited scrolling & live updates using AJAX and jQuery• Created class methods to allow users to search for tags and sort results by time or trending

Arlington, Virginia, Us

Working with program and system teams, I managed IC projects using AGILE methodology and: • Increased productivity by implementing boolean search algorithms and meta tag queries to parse reports from various agency database integrations. • Compiled collective data to investigate threats, evaluate trends, and brief steering committees.• Scripted scheduled server audits, queried and ETLed metadata for ISR data, managed RBAC through AD, integrated analyst software with GRE tunnel based ISR feed, consulted on cloud based install of COTS and GOTS products, utilized RegEdit and MMC to keep OS STIG compliant with encryption standard and import DISA CA approved TLS certs.Awarded Certificate of Excellence at the Presidio of Monterey, CA

La Jolla, Ca, Us

• Provide technical support, training and documentation, and on call maintenance for neuroscience applications that handle data analysis• Credited at: http://winkielmanlab.ucsd.edu/people

Bachelor'S Degree

Associate Of Science - As, Military Intelligence, Command Control And Information Operations

Dlpt Level 2, Linguistics

Web Development