Migrated CI/CD pipelines publishing and deployment of application artifacts from Azure DevOps Artifacts to Jfrog Artifactory.Migrated Azure DevOps CI/CD pipelines to Github Actions.Wrote Terraform IaC to deploy container applications to AWS ECS

Designed and built cloud network resources in AWS with Terraform: VPC, Subnets, Routing Tables, and Routes, Transit Gateways and Attachments, Direct Connect, Security Groups, etc.Implemented effective security solutions on cloud networks to secure traffic flows.Performed network traffic and failure analysis.Developed tools in Python to assist with AWS tasks and everyday workflow.Established lower environments for testing Terraform code and AWS resource changes before implementing in productionEngaged and collaborated with business partners to interpret business needs and requirements.

Secured and hardened Kubernetes clusters managed with RancherDeveloped Infrastructure as Code with Ansible and Terraform to build infrastructure and configure applicationsImplemented architectural runways for developers to smoothly onboard workloads into AWS GovCloud using more cloud native resources like VPCs, EC2 instances, ASGs, ELBs, RDS, etc.Used Jenkins to build CI/CD application code pipelinesWorked with other DevSecOps team members to design, architect and stage changes and deployments through lower environments to productionOrganized tasks in Jira tickets and document changes and procedures in Github and ConfluenceReceived SAFe for Teams training and SAFe Practitioner certificationHeld a US security clearance while on project for the US Department of Veterans Affairs

Design and build environments in AWS using infrastructure as code.Write automation in CloudFormation and Ansible to build AWS compute, network, storage, identity and security resources.Utilize Linux and virtualization administration expertise to build and support CentOS and Arch Linux servers and applications in hybrid environments on physical servers, VMWare and AWS virtual hosts.Manage Cisco equipment for LANs and multi homed WANs with upstream Internet providers and VPNs to major cell carriers.Monitor OS, network, and application level metrics with Nagios and CloudWatch.Maintain source code control with git and Bitbucket; package and deploy code updates with yum and pacman repositories.

Protected information assets through the management, administration and monitoring of UNIX systems and security toolsAdministered BoKS Management software for access and authorization controls to UNIX servicesProvided support for other custom applications written around BoKS that were used for monitoring and auditing privileged access, reporting and gathering statistics of use and performance, importing accounts from Active Directory, and managing individual entitlement requestsResponded to incoming support requests and escalationsSupported ArcSight infrastructure for security event gathering

Identified and secured root compromised serversPerformed forensic analysis of root compromised servers to discover the attack vectorDealt with legal issues such as DMCA and trademark complaints, terms of service abuse issues, and other illegal contentIdentified and resolve IP blacklist issues due to spam and malwareEscalation point for advanced technical security, abuse, and terms of service issuesContinued to identify, resolve, and secure hacked web sites, compromised accounts, and spam sources

Attended to a variety of abuse issues such as hacked web sites, compromised accounts, and spamDetermined source of web site compromise by analyzing various logsRemoved virus and malware infections from web site files, scripts, and databases using Linux tools and custom scriptsIdentified security vulnerabilities in web sites and offer solutions to close holes and secure web sites and web serversIdentified spam sources such as compromised email, hacked sites with malware used to send spam, and deliberate spam.

Transfered web site content for new and existing customers using traditional Linux file transfer services such as rsync and ftp and a variety of custom toolsInstalled and configured various services for web sites including cPanel accounts, DNS zones, MySQL databases, PHP scripts, and various web site content management software on CentOS Linux web servers

Performed various Linux systems administration tasks on Centos 4, 5, and 6 web serversSupported traditional Linux web server services such as DNS, SMTP (exim), web (Apache), MySQL databasesAssisted customers with technical issues related to cPanel/WHM hosting packages, DNS, web, database, and email services, and site functional issues related to PHP and HTML code and/or the configuration and performance of various web site CMS software such as WordPress, Joomla, osCommerce, zenCart, vBulletin, etc.