• Successfully promoted and evangelized Pulumi infrastructure-as-code software, leading to its adoption as Alchemy’s IaC platform for all future development.• Participated in a small team focused on prototyping and proof of concept for Pulumi, going from zero to a fully functioning VPC, EKS cluster with Istio ingress, DNS and certificate management in three weeks.• Designed repository and packaging standards for infrastructure code. • Performed technical evaluation of software and services including, Pulumi Cloud, Spacelift.io, Ceph and OpenEBS, including proof-of-concept implementationsDeveloped Systems Design interview and acted as primary Systems Design interviewer for all infrastructure candidates.• Automated engineer onboarding and setup for MacOS laptops using Homebrew, reducing manual onboarding process from 1-2 days to one hour or less.

• Developed argoCD application factory, a Kubernetes controller inspired by ArgoCD Application Sets. Implemented in Go, this controller provides templated management of ArgoCD applications, supporting multiple value sources including Git repositories, Kubernetes ConfigMaps, JFrog Artifactory, and inline YAML.• Developed Kubernetes controller, implemented in Go, to manage dynamic callback URL registration for Kubernetes workloads that rely on external OAuth/OIDC providers. • Developed Webhook forwarding controller, and Cloud Function/Lambda. This allows external sources to deliver Webhook payloads to one or more internal services via SNS/SQS or Cloud Pub/Sub, without requiring internal applications to be exposed publicly. • Implemented critical internal Terraform modules for management of AWS resources, including EKS, EFS, IAM roles and policies, etc.

• Implemented infrastructure-as-code, using Terraform to deploy full development and service delivery environments, including Jenkins, Google Container Registry, PyPi Cloud, Google Kubernetes Engine, Google Cloud DNS, Google Cloud SQL. Google Cloud Storage buckets, and associated user permissions.• Developed pterradactyl [ https://pypi.org/project/pterradactyl/ ], a tool enabling management of parameterized, DRY Terraform deployments with simple YAML files, implemented in Python.• Implemented canary deployment for kubernetes hosted applications using Argo Rollouts controller. Implemented automatic DNS registration and SSL certificate issuance for Kubernetes ingresses using Jetstack cert-manager and Teapot external-dns.• Developed minimalist Docker containers for hosting Python web applications, using multi-stage builds and BuildKit secret mounts to avoid packaging build-time dependencies and secrets in the final container image.

• Developed CI/CD pipeline for applications deployed to Kubernetes and Google AppEngine, automating the build and deployment lifecycle from pull request to production.• Developed key management utility to allow developers to easily manage secrets stored in Google Storage and encrypted with Google KMS. This was implemented in Python as an extension to the Google Cloud CLI.• Developed Python connector for Google Cloud SQL, allowing applications to securely authenticate and access database instances without need for a separately managed instance of Google’s Cloud SQL proxy. • Developed Java HTTP connector library, allowing Java applications to securely authenticate requests to web application resources protected by Google Identity Aware Proxy.• Planned and executed company-wide migration from github.com to GitHub Enterprise. Minimized downtime by automating the migration process end-to-end. Minimized developer disruption by creating migration tools for Windows and OS X to discover local git repositories and automatically configure remote URLs.• Created Vagrant based sandbox for developing and testing against legacy puppet infrastructure. Developed Jenkins pipeline to dynamically deploy environments to puppet masters allowing pull requests to be tested against staging environment prior to merging.• Developed ChatOps plugin for Jenkins, allowing any job to be launched by Slack slash commands. Job parameters are presented to users via Slack dialog, and jobs may accept input from users via Slack interactive messages

• Rewrote bespoke legacy Puppet environment to better align with industry best practices. Automated previously manual server deployment and lifecycle management with fully automated bare-metal deployment driven by Foreman. • Replaced manual XenServer deployment process with custom Puppet module allowing Puppet to manage configuration of Xen servers, pools, storage repositories, network configuration and authentication. • Built NodeJS hosting environment with Phusion Passenger and managed by Puppet. This was first used for isomorphic rendering during the 2016 presidential election, delivering 70ms average page load times. • Developed JSON API for proprietary Methode CMS, allowing developers to render content externally using ReactJS. The API is extensible through a Groovy DSL, allowing developers to modify it as needed.• Built internal repositories and associated build process automation for NPM, PHP Composer, and Vagrant.• Worked extensively with Jenkins, including creation of jobs, pipelines and custom plugins.

• Developed web-based mapping application with Backbone and Marionette, allowing editors tocreate and publish rich content maps. This application was first used for 2015 Boston Marathoncoverage.• Created developer workflow and build process for Wordpress themes and plugins using Gruntand LAMP stack on Vagrant. This process is now used for all Wordpress development at theGlobe.• As a developer on a team of six, created a configurable component architecture forboston.com site. This allowed editorial staff to customize the look and layout of the site asneeded, without assistance from developers.

• Led three person IT team supporting 100 developers and testers through development ofBioShock Infinite Burial at Sea.• Managed business critical Perforce environment with zero unplanned downtime orperformance bottlenecks throughout the BioShock Infinite development cycle.• Increased enterprise storage IOPS by 50% while reducing costs from $1100/TB to $125/TB byreplacing proprietary filer with open source FreeBSD/ZFS solution on commodity hardware.• Achieved the highest level of policy compliance across Take2 global organization by developingautomated IT reporting suite in PowerShell.

• Reduced Perforce maintenance window from 4 hours to 30 seconds by developing fault tolerantmaintenance scripts with offline checkpointing.• Reduced false positive monitoring alerts up to 95% by developing Nagios check plugins withpredictive trend analysis.• Reduced enterprise backup RPO from 120 to 24 hours and RTO from 12 to 4 hours.• Maintained 120 HP and Cisco blade servers in Linux MMORPG development environment.• Developed “38tube" intranet video sharing application.

• Architected global network monitoring for 1600 services on 200 servers using Opsview Nagiosplatform, developing custom check plugins, on–call rotation management, and notificationfiltering scripts.• Reduced system administration overhead by developing “Minion", a distributed administrationtool based on OpenSSH.• Reduced production backup costs by 90% by migrating to open source Bacula software.• Planned and executed move of production data center from Massachusetts to New Jersey withno downtime for customer applications.• Reduced hosting costs by 40% by migrating physical servers to Xen virtualization environment.

• Planned and executed migration of hosting environment from Rhode Island to Utah.• Migrated billing server from Freeside to ModernBill.• Improved customer experience while reducing overhead by consolidating mailplatforms from multiple acquired ISPs.

• Maintained web development toolchain builds of Apache, Perl, mod_perl, Mason, MySQL andPHP.• Developed Perl tools for LDAP management, enterprise backup, and global data replication.• Architected and implemented VMS to Solaris migration and LDAP based SSO solution.

• Developed application to collect and manage SNMP and topology data for over 40,000 devicesusing Perl and MySQL.• Supported Micromuse Netcool event management system deployment.

• Supported POS credit processing for several globally recognized brands.• Managed business critical Solaris, AIX and Telebit Netblazer devices.• Developed distributed network monitoring and helpdesk ticketing web applications in Perl.

• Supported development team for flagship WebPlus product.• Maintained Linux, Solaris and IRIX systems for production and development.• Planned and implemented production backup cycle.