Senior Infrastructure Engineer

I operate a hybrid on-premises and AWS estate with a small infrastructure team, supporting more than 130 physical hosts, 120 virtual machines, and 20 EC2 instances across five VPCs connected through AWS Direct Connect. I build AWS foundations with Terraform, including VPCs, subnets, security groups, and IAM roles, replacing manual console changes with reviewed and versioned infrastructure.

I support PCI-DSS Level 1 compliance through network segmentation, CDE scoping, QSA evidence preparation, ASV scans, Wazuh SIEM/FIM operations, and security control automation. I planned and executed a production MySQL migration from on-premises infrastructure to RDS/Aurora, built an automated Lambda/SQS access-key rotation service for more than 100 IAM users, and operate CI/CD workflows across Jenkins, GitHub Actions, and CodePipeline/CodeBuild. I also deploy and operate Kubernetes workloads on EKS using Helm.

I introduced AWS to the organization and helped lead the move of production workloads to the cloud. I codified the hybrid environment first with CloudFormation and later with Terraform.

I designed and implemented a redundant site-to-site VPN between on-premises infrastructure and AWS VPCs with sub-ten-second failover. I also served as interim network administrator for six months, managing routing, switching, load balancing, and edge configuration, while partnering with product engineering to rebuild deployment paths for cloud-hosted workloads.

I collaborated on the build-out of a PCI-DSS-compliant internal payment-processing gateway and supported the underlying production infrastructure.

I built and operated production DNS, mail, and web platforms, while managing core networking infrastructure including switches and load balancers.

I operate a self-run autonomous system and infrastructure lab announcing /24 IPv4 and /40 IPv6 prefixes through two upstream transit providers, with peering at F4IX and FogIXP.

I run production BGP using BIRD with route filtering, RPKI ROA publication, and prefix validation. The environment includes DNS, mail, and monitoring services and serves as a testing lab for changes before they are applied to production systems.