Platform Engineering Manager / Site Reliability Engineering Leader

Led and mentored an eight-person Platform Engineering team supporting a Fortune 500 consumer cybersecurity portfolio spanning more than 200 AWS accounts and five global regions. Directed AWS modernization, including a Cloud WAN migration from legacy hub-and-spoke Transit Gateways to a segmented core network, while achieving zero downtime on major migrations.

Built secure and scalable platform capabilities through CI/CD, Control Tower landing zones, Account Factory for Terraform, centralized identity, and post-merger AWS integrations for Avast and Avira. Enabled AI-driven operations through LiteLLM and AWS Bedrock, and led FinOps, security, compliance, audit evidence, access certification, and optimization initiatives across PCI-DSS, SOC 2, FTC, and ISO 27001 requirements.

Directed a seven-person Site Reliability Engineering team responsible for infrastructure as code, cloud security automation, and post-merger infrastructure integration. Established engineering practices and operational capabilities for reliable, secure cloud services.

Led corporate information security initiatives, including CrowdStrike Falcon deployment across Windows and Linux environments. Owned business-critical proxy and DNS infrastructure with on-call responsibility, led a Squid proxy modernization from Amazon Linux 1 to AL2023, and created a centralized runbook and knowledge base to improve Tier-1 self-service resolution.

Engineered and maintained enterprise-scale infrastructure-as-code pipelines across AWS and hybrid VMware environments. Developed reliable baseline templates to support core business services and improve infrastructure consistency.

Partnered with Information Security to remediate critical vulnerabilities, harden cloud and virtualization environments, and implement automated policy enforcement. Maintained highly available production infrastructure, optimized compute allocation, and reduced manual operational toil.

Directed fleet-wide Linux operating system patching cycles and vulnerability remediation for production environments. Maintained strict SLA adherence while minimizing customer impact during maintenance and remediation activities.

Led technical execution for PCI-DSS compliance audits, including security hardening, log validation, and automated evidence collection. Collaborated with Information Security and Platform teams to resolve audit findings and reduce legacy security debt in critical tier-1 systems.

Led Linux FedRAMP remediation efforts and served as an engineering representative in Change Control Boards. Coordinated cross-functional technical milestones to align infrastructure work with federal security requirements.

Managed incident, request, and problem lifecycles across highly available environments while meeting SLA targets. Built capacity planning models, implemented cross-training programs for support teams, and streamlined on-call rotations to improve platform reliability.

Served on the PayPal Standard Base team, standardizing Linux and Unix operating system builds and account administration across production, QA, and development environments to support SOX compliance. Planned and executed operating system patching for more than 5,000 production servers while coordinating maintenance windows to avoid business disruption.

Owned deployment, operations, and reliability for SecureTransport across development and production environments. Managed datacenter infrastructure including servers, switches, SAN and fiber storage, hardware consoles, and automated routine administration using Bash shell scripting.