Senior DevSecOps Engineer

I build, automate, and secure production infrastructure across AWS and on-premises Kubernetes. I own cloud and platform operations spanning CI/CD, infrastructure as code, observability, security controls, and reliability planning.

I harden Kubernetes and CI/CD environments through Pod Security Standards, NetworkPolicies, CVE remediation, SHA-pinned GitHub Actions, and automated gitleaks, Semgrep, and Trivy scanning. I also define resilience, disaster-recovery, storage, networking, and observability roadmaps with engineering teams.

I delivered AWS and Kubernetes platform automation for production services and build environments. I automated provisioning and configuration with Terraform, CloudFormation, Ansible, Jenkins, and related CI/CD tooling.

I operated a six-node on-premises Kubernetes platform supporting more than 30 .NET microservices and React frontends across isolated environments. I built monitoring, logging, alerting, high-availability, DNS, and networking capabilities, and identified and remediated production deployment risks.

I lead the DevOps team part-time and set the technical direction for infrastructure, CI/CD, security, and platform reliability. I mentor engineers and grow the team's infrastructure-as-code practice.

I migrated a production service from third-party hosting to AWS using a serverless architecture, reducing operating cost by up to 80%. I also built automated AWS Marketplace AMI releases with Terraform, Packer, and Ansible; a serverless Red Hat repository mirroring service; and self-service, version-specific development and QA environments.

I implemented and operated DevOps infrastructure, CI/CD pipelines, and deployment environments for applications and services. I supported Linux systems, automation, monitoring, and secure delivery practices.

I contributed to high-availability platform operations, infrastructure provisioning, and production reliability improvements.

I designed and implemented environments for newly created services, including high-availability deployments behind F5 BIG-IP load balancers. I implemented automated CI/CD pipelines in GitLab CI for development, test, and production delivery.

I also supported project migrations from TFS to Git and introduced branching strategies across teams.

I provisioned virtual machines with Terraform and managed server configuration and service deployment with Puppet. I built high-availability environments, load-balanced application traffic with HAProxy, and supported platform networking.

I rolled out Zabbix monitoring agents with Ansible, automated build and release pipelines using TeamCity and Octopus Deploy, and automated TLS certificate issuance and renewal with Let's Encrypt. I also led a three-person IT function covering infrastructure, systems, and end-user support.