Resume

Current Employer

• Core Security & IT representative on the Architecture Review Board; pioneered adoption of Architecture Decision Records (ADRs).
• Architected GCP Shared VPC strategy with hybrid connectivity via Cloud Interconnect and Cloud VPN for SD-WAN integration; designed a FedRAMP-mirrored Sandbox for government-adjacent workloads.
• Standardized Terraform and CI/CD pipelines; migrated 100% of legacy cloud and network assets into state-managed IaC.
• Engineered a synchronization engine between NetBox, Jira Assets CMDB, and cloud platforms using custom Python; automated device re-provisioning from CMDB metadata.
• Designed multi-tier observability framework using Prometheus, Grafana, and OpenTelemetry.
• Led alignment of cloud architecture with SOC2, NIST 800-53, and 800-171; implemented zero-trust IAM using Okta and Lumos.

Healthcare

• Architected dual-hub SD-WAN across 200+ sites to ensure 100% uptime for critical traffic.
• Migrated legacy switching to Cisco ACI (VXLAN) fabric; implemented Azure Virtual WAN hub-and-spoke architectures with NVAs.
• Engineered transition from legacy Cisco ASA/Firepower and Palo Alto environments to FortiGate Next-Generation Firewalls.
• Served as Level 4 escalation and Senior Design Authority; engineered visibility fabric using Gigamon TAPs and Viavi Observer for deep-packet inspection across two data centers.
• Standardized network and IPAM configurations using Ansible, AWX, and Python.

Data Center

• Implemented AWS Direct Connect; engineered OpenStack (OVS) and VMware DVS environments for private cloud networking.
• Orchestrated transition to Cisco ACI and Nexus 7000 VDCs, eliminating Spanning Tree and optimizing multi-tenant traffic.
• Pioneered the organization's first Ansible/AWX deployment; developed custom Python and PowerShell modules for large-scale automation.
• Redesigned Internet Edge architecture; integrated FortiGate, Cisco Firepower, and Cisco ISE for identity-based campus security.

Military support

• Engineered high-availability military converged network (Voice, Data, Video) across campus, data center, and remote theater environments.
• Implemented advanced QoS policies to prioritize latency-sensitive traffic over satellite and tunnel-based links.
• Conducted security audits and hardening to maintain 100% DISA STIG compliance.