2020–Present

Selected Client Engagements

Federal Financial Services Client, May 2023–May 2026

• Assumed ownership of maintenance and support responsibilities for 400+ AWS WorkSpaces, including vulnerability remediation, automation, and process documentation.
• Collaborated with a four-person team to identify and implement AWS configuration changes that reduced client infrastructure costs by more than $9,000 per quarter.
• Drove cross-team implementation of security and operational controls, including AppLocker application whitelisting, removal of local administrator rights, inactive-user policies, and streamlined ServiceNow software requests.
• Contributed to development of a successor Desktop-as-a-Service (DaaS) platform by coordinating requirements across stakeholders and developing initial Terraform IaC configurations.

Enterprise Technology Client, Apr 2022–May 2023

• Designed modular Terraform IaC for a large AWS environment, isolating services across repositories and S3-backed state files to reduce deployment scope and simplify infrastructure maintenance.
• Developed and versioned reusable Terraform modules, including internally maintained versions of public modules, to control dependencies and enable independent vulnerability remediation.
• Designed and implemented Jenkins pipelines that evaluated Terraform plans for conflicts and unintended infrastructure changes before deployment to development environments.

Technology and Media Client, Aug 2021–Jun 2022

• Designed and delivered a GCP proof-of-concept for a legacy VoIP/RTC monitoring platform, independently determining deployment requirements and implementing compute, load balancing, Packet Mirroring, VPC connectivity, IAM, and supporting infrastructure within budget constraints.
• Migrated interconnected GCP projects to Terraform IaC, including CIDR planning, Cloud NAT, firewall rules, and cross-project IAM, while evaluating existing resources for import versus recreation based on availability and operational risk.
• Developed GitLab CI/CD controls for Terraform repositories to validate configurations and plans, restrict changes to approved environments, detect secrets, and require authorized approval before infrastructure changes could be applied.