• Drive standardization and adoption of CICD, IssueOps and GitOps. Promote security through development of deployment standards and practices.• Develop practices and tooling using GitHub Actions, Python, Terraform, CDK and Pulumi.• Architect workflows, infrastructure and applications in GitHub Actions, Azure Cloud, AWS and GCP.

• Drive standardization and adoption of CICD/GitOps and promote security throughdevelopment of secure architecture blueprints and examples using IAC tooling such as the AWS CDK, CloudFormation and Terraform.• Manage security and compliance of AWS Infrastructure and provide advisory services formultiple companies under Nelnet’s AWS Organization(s).• Develop event driven security / compliance CI/CD pipelines using AWS Services such asCodeSuite, CodePipeline, CodeCommit along with AWS Config, Security Hub, GuardDuty,CloudTrail, CloudWatch SSM/Systems Manager and Lambda.• Integrate DevSecOps tooling e.g. Palo Alto Networks - Prisma Cloud / Twistlock into existingprocesses, architectures and CI pipelines as well as developing DevSecOps standards andprocesses for future application development.

• Develop tools, documentation and AWS SDK code samples for AWS engineers as well as internal and external customers within AWS and Amazon (Boto3, Dotnet / C# SDKs and CDK).• Participate in hiring, interviewing, mentorship, development and training other AWS Engineers within the Security Profile.• Provide escalation support layer (AWS SDK SupportOps) for AWS SDKs and AWS CLI between Premium Support Engineers and the AWS SDK Dev Team.• Provide both internal and external AWS Customers with architecture guidance as well as fielding queries and issues related to AWS Services, including but not limited to: AWS Identity and Access Management, AWS SAML Federation for IAM, AWS SSO Service, Amazon Certificate Manager, AWS Key Management Service, CloudTrail, CloudHSM, GuardDuty, Inspector, Config Service, SecurityHub, Detective, AWS Organizations, Macie, AWS Shield, VPC, EC2, ELB, CloudFront, Lambda, API Gateway, Cognito and other services when customer needs require.

• Provide both internal and external AWS Customers with architecture guidance as well as fielding queries and issues related to AWS Security Services, including but not limited to: AWS Identity and Access Management, AWS SAML Federation for IAM, AWS SSO Service, Amazon Certificate Manager, AWS Key Management Service, CloudTrail, CloudHSM, GuardDuty, Inspector, Config Service, AWS Organizations, Macie, Shield Advanced, VPC, Ec2, ELB, CloudFront, Lambda as well as other services when customer needs overlap.

• Designed imaging (preseed, postseed), configuration and deployment of Kali Linux based RTA (Remote Testing Appliance) servers and repositories in support of Penetration Testing utilizing reverse SSH tunnels and OpenVPN for callback for remote access to client resources.• Built out new Optiv Labs Penetration Testing infrastructure and network datacenters after formation of Optiv Security from Accuvant/Fishnet Security company merger.• Design and maintain Network, VMware, Active Directory and Linux infrastructures for Attack and Penetration, Security R&D, Malware/Forensics and Software Security Group (AppSec) Advisory Services teams.• Deployed Puppet/Foreman for centralized configuration management of servers and imaging.• Deployment of Servers and Software relating to Penetration Testing, i.e. Nessus, MetaSploit, OpenVAS, Burp Suite, Acunetix, etc.

• Network, System and VOIP Engineer for 14 site educational institution and head administrative office. • Cisco, Palo Alto, Juniper and Ubiquiti administration, 14 site full mesh IPSec VTI/OSPF, Exchange 2013/OWA, Lync Enterprise Voice, VMWare ESXi, Citrix XenServer, Symantec Endpoint Protection and Backup Exec, Unitrends Virtual Backup, Active Directory, PowerShell Scripting, GPOs and C#.NET.• Implemented PfSense and Ubiquiti router UTMs.• Implemented Proxy/Content Filtering using Squid/DansGuardian.• Implemented Lync Server 2013 Enterprise VOIP with Exchange Unified Messaging, Response Groups, Auto Attendants.• Migrated virtual infrastructure from VmWare to Xenserver.• Upgraded from 2003/2008R2 DCs and DNS to 2012R2. • Implemented Employee file and folder redirection to DFS. • Implemented Apache servers with Active Directory integration for Website and Employee Intranet, custom internal sites using Joomla and Drupal.• Migrated backup solution from Symantec Backup Exec to Unitrends Virtual.• Deployed FOG imaging server with PXE DHCP server for imaging PCs remotely.• Migrated from Cisco routers to Ubiquiti routers with IPSec tunnels between sites and PPTP for employee vpn.• Migrated to managed L2 infrastructure, implemented Voice, Data, Storage and VM traffic VLANS, Subnets and QOS.• Deployed, Ubiquiti Unifi wireless APs and controller.• Deployed Observium and Zabbix network monitoring, Linux DHCP servers.• Deployed Spiceworks and OSTicket ticketing software.• Deployed, Ubiquiti Unifi Video security cameras and controller software.

• Created custom C#/MSSQL IT applications to automate IT tasks on remote computers, AD accounts, and Exchange accounts.• Wrote scripts to automate the enterprise wide update of applicationsand settings based on subnet.• Streamlined ShoreTel Enterprise Call Center call routing for enterprise widereception into a single English and single Spanish group with preferential routing to qualified agents based on "weighted skill set".• Implemented and revamped GPOs for Computer Power Settings, Security and user lockdown,etc.• Created logon scripts to comply with audits, empty recycle bins, warn users, etc.• Managed Microsoft Terminal Servers.• Successfully deployed GPO along with Windows Server Update Services to control Windows Update on PCs enterprise wide and bring over 1300 Windows XP and 7 PCs up to date.• Continually automated IT tasks through the use of C#, Powershell and VBScript.

IT Consulting

• Developed C# application to automate and perform more than 75 common IT tasks on remote computers, AD accounts, and Exchange accounts. Computer Hardware, Software, Networking, Game Consoles, Smart Phones, Car Audio/Video, Home Audio/Video. • Gained a broad range of software and hardware experience in all spectrums of IT and Electronics.• Successfully set up office networks, servers, and desktop computer systems and software.• Gained experience creating custom software for companies and end users.

Call Center and Data Entry.