Director for both a Devops team of embedded devops engineers and a Platform team of software engineers specializing in core components and shared tools. My teams focus is on improving security, developer quality of life, and scalability for all systems and teams at Cityblock

Technical Lead Manager of the new DevOps team within Cityblock Health's software engineering organization. I have grown a team of one to a team of six and worked within the organization to bring devops practices and principles to the product engineering team, the data organization, and the infosec team. Currently working through SOC2 and HIPAA compliance efforts within engineering including changes to CI/CD on github actions, Infrastructure automation with Terraform, and reimplementation of GCP IAM and Infrastructure. Other current goals include improving our kubernetes service offering for our data engineering teams, and improved monitoring and cost management. My focus is on continuing to grow the team to meet the needs of the organization and growing the skills and knowledge of the team itself.Key projects: - Design and implement a terraform-based project factory system for rapidly creating net new projects to current and future company standards - Implement secure self-service terraform automation with spacelift, rego policies, and workload identity - Build out private github actions environment and migrate key projects from google cloud build snd circleci to github actions. - Expose security issues earlier in the software development lifecycle by introducing Snyk container and security scanning into CI - Consulting and implementation in cross-org collaborative onboarding of key vendors for zero trust networking, just in time access grants, security scanning, and secrets management.

• Roll out WAF via AWS network firewall and Cilium eBPF for EKS clusters in a production PCI compliant environment.• Lead project to make terraform self-service for engineers with Atlantis and gitops principles. • Maintain, upgrade, and create EKS kubernetes clusters and related services. Including but not limited to: EKS AMI hardening, calico, externaldns, nginx ingress, karpenter, fluentbit. Introduce new services and tooling for clusters including cilium, EFS and EBS CSI drivers.• Create new ops account and migrate services to a hub and spoke account model.• Utilize codebuild, codeploy, and ECR to create automated CI pipelines for new products.• Work with unique services in the crypto space, including solana, stellar, hedera validators and more.

Embedded Devops Engineer for between 2 and 3 development teams over my term.Highlights include:- Launching Roleiq product for live on stage debut at Pluralsight Live- Launching Guided Learning product from scratch to Pluralsight Live launch.- Launch of deadline-driven new Tech Quotient product from scratch to launch. Hit 100000+ users in the first week of operation.Other notable work:- Pilot and launch gitlab within the organization for CI/CD pipelines as code- Migrate products internally from AWS EC2 to Kubernetes- Migrate products internally for split prod/staging account environments- Migrate infrastructure as code from cloudformation to terraformTechnologies include:New Relic, cloudwatch, grafana, sentry, terraform, cloudformation, opsgenie, docker, helm, gitlab, teamcity, airflow, postgres (RDS, Aurora, Aurora Serverless), lambda, SQS, saltstack

• Design and build a framework for dynamically provisioning product environments in AWS using Terraform, Chef, and Ruby scripting.• Automate build and deployment processes in Jenkins using Job-DSL and Ruby.• Migrate aging cloud architecture from legacy EC2-Classic network to VPC.• Implement infrastructure changes using Terraform and Chef to comply with SOC2 certification.• First place hackathon team for containerizing main product application with Docker, Kubernetes, Consul, and Vault.• Rotational on call for infrastructure emergency response.

• Lead in project to migrate all services from Rackspace to AWS. This included a fresh network design, reconfiguring Ansible deployments for AMI and dynamic inventory, reconfguring of build and deployment services, migration of internal services to AWS equivalent (RDS, Elasticache, ELB, etc...).• Second in project to redesign network and services to be PCI compliant. Much of the AWS work overlapped with this.• Created new command-line tools in Python to increase developer efficiency and automate certain operations tasks. Tools include scripts to automatically deploy new instances to development environments, search for instances by tags, power scripts to shutdown unused instances in the evening, and more.• Integrated internal services with CloudFlare caching and CloudFlare DNS.

• Software development support for internal tools including a test result tracking system written in PHP, A lab overview/management system written in Python with Django, and automated deployment and testing services written in a mix of Python and Bash.• Update services to use docker to standardize our dev, staging, and production environments for internal tools.• Assist with configuration of continuous integration and continuous deployment services in Jenkins for both internal projects and for packaged VMs sent to customers.• Deploy configuration management services for developer desktops and server environments, utilizing SaltStack, Docker containers, and kickstart scripts.• Develop self-service scripts for infrastructure automation written in Python, • Perform emergency physical repairs to servers and network equipment.

• Developed deployment configurations for automated ESXi installations.• Developed scripts for automated VM deployment and configuration.• Provided support for 2 product teams in the form of bug fixing or feature addition of self-service scripts, service maintenance, and physical repairs to servers and network equipment.• Wrote scripts to fix a bad migration from Bugzilla to Jira without any outages.

• Update virtual infrastructure from ESXi 4 to vSphere 5 and conversion of physical servers to virtual machines.• Maintain and update virtual servers running Windows Server 2008 R2 and CentOS • Create and Manage Active Directory user accounts and services across 5 lab environments for 300 students per year• Maintain and update DHCP & DNS for support of 5 labs for student curriculum work under the direction of the lab manager.• Backup and restore of VM environment in the event of disaster recovery.• Assist lab manager with inventory maintenance and physical inventory counts.• Train and educate new student employees to work in the labs to the expected departmental level and to work on the Server Team as future team members.• Build, maintain, and repair lab equipment (PCs, Laptops, Servers, Routers, Switches as necessary to meet curricular needs.)• Prepare labs and equipment for student “hands-on” lab assignments and practical exams.