Résumé

Systems administrator turned cloud security engineer turned engineering manager. Below is the long version; the LinkedIn profile is the short one.

Professional experience

O’Reilly Media

Boston, Massachusetts · Remote · October 2020 – present

Engineering Manager

– present

Leading the platform engineering group: sprint planning, delivery, hiring, and the professional growth of the engineers on the team.

Senior Cloud Security Engineer

– present

Work with security practitioners across the company to secure the platform in Google Cloud, from infrastructure to the microservices running in Kubernetes and everything in between.

Team Lead

–

Managed Agile epics and stories for the platform engineering team, ran stand-ups and retrospectives, and oversaw sprints so that every team member had what they needed to succeed.

Cloud Security Engineer

–

Developed, built, and secured the Google Cloud infrastructure powering the O’Reilly e-learning platform. Integrated DevSecOps into the CI/CD pipelines and Kubernetes clusters so that they were security-focused and developer-friendly.

Cloud Engineer

–

As part of the platform engineering team, managed the company infrastructure on Google Cloud Platform that facilitates deployment of a suite of apps and products to GCE, Kubernetes (GKE), and serverless targets.

AWS SysOps Engineer · Public Interest Tech Lab at Harvard

Cambridge, Massachusetts · Contract · –

Part-time contractor managing web infrastructure and code pipelines for a team of researchers conducting contact tracing and investigating data privacy within the realm of big data.

  • Migrated critical websites from legacy on-premise RHEL 6 VMs to Ubuntu EC2 instances
  • Redesigned the VPC and network topology to lower deployment friction and raise security
  • Revamped IAM policies with a focus on security and compliance, and required MFA throughout
  • Replaced manually issued InCommon certificates with automated Let’s Encrypt renewal
  • Built processes for securely deploying code from CodeCommit, and RDS instances with read replicas
  • Configured Cognito user pools integrated with Harvard’s single sign-on

Senior Systems Administrator · Tufts University

Medford, Massachusetts · –

Managed a VMware-based data center, leveraging Puppet and Foreman, supporting critical university operations including Oracle and MySQL, full-stack CMS hosting, HR and finance applications, and Kubernetes clusters, for the Enterprise Services Architecture & Infrastructure department.

  • Migrated websites and applications to Docker images on Kubernetes with GitLab and Jenkins pipelines
  • Provided on-call escalation: case delegation, issue resolution, postmortems, and knowledge transfer
  • Coordinated infrastructure-wide security patching of 500+ Red Hat Linux VMs and appliances
  • Project lead standardizing the entire RHEL 5/6/7/8 fleet on RHSM, building the supporting infrastructure
  • Developed an Ansible-based solution, with the Tufts CIO, to deploy Raspberry Pi units campus-wide for student COVID testing

Institute for Quantitative Social Science, Harvard University

Cambridge, Massachusetts · July 2011 – April 2018

Systems Administrator

–

Worked on a DevOps team to configure, deploy, and manage 200+ physical, virtual, and cloud-based CentOS servers making up a social science research cluster, with adjacent services — DNS, LDAP, web hosting, database hosting, big data storage — serving faculty and students across Harvard.

  • Deployed Puppet with Capistrano under a dev → QA → production model
  • Rebuilt the internal web hosting platform on a LEMP stack managed with Puppet and Hiera
  • Upgraded legacy MySQL hosting to MariaDB with multi-master replication and backups
  • Administered NetApp FAS storage running ONTAP 8 for big data and VM storage
  • Managed confidential data across multiple environments under Harvard IRB security levels

IT Support Specialist

–

As a member of a small client services team, provided security training and deployment along with tier I and tier II support for a wide array of hardware, software, mobile devices, and an on-premise high performance cluster for hundreds of faculty, staff, and students.

Systems Project Manager · Harvard EdLabs

Cambridge, Massachusetts · Contract · –

Engineered a secure systems infrastructure, compliant with Harvard’s highest-level security requirements, for a team of statistical researchers storing and processing private, public, and governmental datasets.

  • Deployed high-performance multi-user CentOS 7 workstations for analyzing big data
  • Wrote custom tooling for user management, log retention, data backup, and data onboarding
  • Configured intrusion detection, access control, data encryption, session expiry, and root logging
  • Wrote administrator and user manuals plus security compliance checklists for third-party data providers

LAN Administrator · Personal Computers, Inc.

Buffalo, New York · –

As part of an MSP, performed a dual role as tier II and tier III remote and on-site support for multiple clients, and as a systems administrator overseeing servers, SANs, phone appliances, and networking equipment in a colocation facility.

Systems Administrator I · Crystal Run Village, Inc.

Middletown, New York · –

Member of a small team providing comprehensive IT support for a non-profit serving intellectually disabled individuals and its 50+ residential offices, along with managing mission critical infrastructure and services from the on-site data center.

Want the short version?

Happy to send a one-page PDF, or just talk it through.

Email me