Graduate Education
Master of Professional Science (MPS), Information Science
Concentration in Geographic Information Science
Unity Environmental University
Graduated: 2021
GPA: 3.97AWS Cloud Engineering • Platform Automation • Governance • Security
AWS Cloud Engineering, Platform Automation, Governance, and Security
I design, automate, secure, and support enterprise cloud environments, with deep AWS experience and additional Azure, GCP, and hybrid infrastructure experience across cloud engineering, cloud administration, platform automation, and production operations.
About
Cloud Engineer and Cloud Administrator focused on AWS-led platform automation, governance, security, and production operations.
I design, automate, secure, and support enterprise cloud environments, with deep AWS experience and additional Azure, GCP, and hybrid infrastructure experience across cloud engineering, cloud administration, platform automation, and production operations.
My background includes cloud platform engineering, cloud architecture, DevOps automation, infrastructure design, cloud migrations, CI/CD delivery, identity and access management, governance, monitoring, security operations, cost optimization, production support, and application delivery support.
My strongest hands-on work is in AWS, including multi-account environments, secure infrastructure operations, Terraform and CloudFormation automation, compliance-aligned support, and production workload reliability. I also bring Azure and GCP experience across identity, governance, cloud operations, and hybrid infrastructure support.
I bring a cloud engineering background where architecture, automation, security, and operations intersect, supporting environments that require reliability, governance, scalability, and production readiness.
Current Operating Scope
Platform responsibilities managed across cloud governance, delivery, and business operations.
30+
AWS accounts managed
Multi-account governance, access, security, and platform operations.
20+
CI/CD pipelines managed
Release workflows supporting application and platform delivery.
5
business units enabled
Cloud operations aligned to business and technical stakeholders.
PROJECTS
Cloud Platform Projects
Select a project to view architecture, scope, impact, and tools.
Infrastructure Deployment Automation
CloudFormation StackSets, Azure DevOps, YAML, account lifecycle automation
Built and maintained repeatable infrastructure deployment patterns using CloudFormation templates, StackSets, Azure DevOps pipelines, YAML pipeline definitions, template validation, approval stages, and automated updates when accounts were created, moved, or added to deployment scope.
- Scope: reusable templates for account baselines, IAM roles, Security Hub, Systems Manager, DNS, tagging, monitoring, and shared platform services.
- Impact: reduced console-based deployments, improved release consistency, and helped platform changes reach the right AWS accounts faster.
- Tools: CloudFormation, StackSets, Azure DevOps, YAML, AWS CLI, Lambda, EventBridge, Git.
Multi-Account Cloud Governance
Control Tower, Organizations, SCPs, IAM, CloudTrail, AWS Config
Implemented and maintained governance patterns for a multi-account AWS environment using Control Tower, AWS Organizations, IAM role baselines, SCPs, CloudTrail, AWS Config, Security Hub, and account separation across production, pre-production, shared services, audit, security, and sandbox-style accounts.
- Scope: 30+ AWS accounts, landing-zone baselines, organizational guardrails, IAM/SCP controls, and account onboarding.
- Impact: improved consistency across accounts, reduced manual governance drift, and gave teams a repeatable operating model for secure cloud usage.
- Tools: AWS Control Tower, Organizations, IAM, SCPs, CloudTrail, AWS Config, Security Hub, CloudFormation, StackSets.
Container DevOps & Application Delivery
Docker, ECS, EKS, CI/CD, image build, deployment operations
Built containerized application delivery patterns using Docker, container image workflows, private registry patterns, and cloud-native container services. The work connects local container builds, image tagging, registry workflows, CI/CD pipelines, runtime configuration, service exposure, logs, and operational troubleshooting across ECS and EKS-style deployments.
- Scope: Dockerfile builds, local container testing, image publishing, ECS service/task concepts, EKS/Kubernetes deployment concepts, load balancing, environment variables, logs, and CI/CD release flow.
- Impact: created a practical bridge from traditional server hosting to repeatable container deployments, supporting repeatable container deployments, operational troubleshooting, and platform-ready delivery patterns.
- Tools: Docker, Dockerfile, ECS, EKS, Kubernetes, ECR, ALB, Azure DevOps/Jenkins, YAML, AWS CLI, CloudWatch Logs.
Serverless Application Architecture
API Gateway, Lambda, S3, DynamoDB, CloudWatch, IAM
Designed serverless application patterns where users access a web front end through static hosting and CDN-style delivery, API Gateway receives application requests, Lambda handles backend logic, and managed AWS services store data, logs, and application artifacts.
- Scope: static HTML/CSS/JS front end, S3-hosted assets, API Gateway endpoints, Lambda functions, IAM execution roles, DynamoDB or S3-backed storage, CloudWatch logs, and DNS/certificate integration.
- Impact: reduced server management overhead, improved scalability, and created a cleaner path for event-driven application workflows without maintaining long-running web servers.
- Tools: API Gateway, Lambda, S3, DynamoDB, IAM, CloudWatch, Route 53, CloudFront/ACM patterns, AWS CLI, JSON, Python/JavaScript.
Cloud Web Hosting & LAMP Stack Operations
EC2, Apache, MySQL, PHP, WordPress, Route 53, TLS
Built and operated a Linux web-hosting stack on an Ubuntu EC2 instance covering the full path from server provisioning to public website delivery. The work covered package installation, service validation, Apache virtual hosts, MySQL database setup, PHP integration, WordPress deployment, DNS routing, Elastic IP usage, and HTTPS configuration.
- Scope: Ubuntu EC2, Apache2, MySQL, PHP modules, WordPress files under
/var/www, Apache config under/etc/apache2, logs under/var/log/apache2, Route 53 DNS, Elastic IP, and Certbot TLS. - Impact: improved application hosting readiness, Linux troubleshooting, DNS and TLS validation, web server operations, application dependency management, and production-style support capability.
- Tools: EC2, Ubuntu, Apache, MySQL, PHP, WordPress, Route 53, Elastic IP, Certbot, SSH, systemctl, curl, ss, journalctl, Linux permissions.
Security & Compliance Monitoring
Security Hub, AWS Config, OU findings aggregation, remediation tracking
Delivered security visibility using Security Hub, AWS Config, CloudTrail, CloudWatch, account-to-business-unit mappings, OU-level findings aggregation, CSV reporting to S3, and quarterly evidence gathering for remediation and stakeholder review.
- Scope: high/critical findings, AWS Config aggregators, Security Hub control visibility, account mapping, and reporting across account groups.
- Impact: made security findings easier to group, report, prioritize, and route to the right teams for remediation.
- Tools: Security Hub, AWS Config, Lambda, S3, CloudTrail, CloudWatch, CloudFormation StackSets.
Cloud Fleet Operations
Systems Manager, EC2 inventory, patch visibility, Resource Explorer
Managed EC2 fleet operations through AWS Systems Manager, centralized node visibility, inventory, patch scan associations, Resource Explorer views, managed execution, and operational runbook patterns that reduced dependency on direct SSH/RDP access.
- Scope: organization-level Systems Manager visibility, patch scans every 12 hours, SSM agent update cadence, inventory, and operational troubleshooting workflows.
- Impact: improved fleet visibility, simplified operational workflows, and gave teams a clearer path for patch/compliance follow-up.
- Tools: AWS Systems Manager, State Manager, Resource Explorer, EC2, CloudFormation StackSets, CloudWatch.
Credential Rotation Automation
SES SMTP rotation, IAM access keys, Lambda, DynamoDB, Secrets Manager
Built and maintained automated credential rotation for SES SMTP and IAM access key workflows. The automation used scheduled Lambda execution, DynamoDB configuration tables, role assumption, target storage updates, verification, rollback handling, CloudWatch alarms, and SNS notifications.
- Scope: rotation across multiple storage targets including Parameter Store, Secrets Manager, SQL Server, and RDS-backed configurations.
- Impact: reduced long-lived credential risk, improved audit posture, and replaced manual key updates with controlled automation.
- Tools: Lambda, EventBridge, IAM, SES, DynamoDB, SSM, Secrets Manager, RDS, SQL Server, CloudWatch, SNS.
DNS & Disaster Recovery Operations
Route 53, hosted zone backups, internal DNS, DRS, certificate validation
Managed DNS and resilience operations using Route 53 hosted zones, private hosted zones, internal DNS patterns, DNS backup automation, disaster recovery planning, certificate validation workflows, and failover-ready operating documentation.
- Scope: hosted-zone backup automation, DNS guardrails, internal DNS operations, AWS DRS planning, and production DNS troubleshooting.
- Impact: improved recoverability, reduced DNS change risk, and enabled safer production and DR operations.
- Tools: Route 53, S3, Lambda/Python, AWS DRS, ACM/DNS validation, CloudWatch, IAM/SCP guardrails.
Cloud Cost & Operations Reviews
CloudHealth, Trusted Advisor, AWS Config, rightsizing, quarterly reviews
Contributed to quarterly cloud reviews that combined AWS Config, Security Hub, Trusted Advisor, CloudHealth, tagging evidence, rightsizing checks, stale resource checks, and cost-saving opportunities for business and technical stakeholders.
- Scope: unused secrets over 90 days, idle RDS resources, low-utilization EC2 findings, RI/Savings Plan opportunities, and resource ownership gaps.
- Impact: surfaced measurable savings opportunities, including examples around idle RDS, EC2 rightsizing, and reserved capacity recommendations.
- Tools: CloudHealth, AWS Cost Explorer, Trusted Advisor, AWS Config, Security Hub, CloudWatch, Excel/reporting workflows.
Cloud Email Migration & Operations
WorkMail, SES, Route 53, Zoho migration planning, SPF/DKIM/DMARC
Managed cloud email operations and migration planning across Amazon WorkMail, SES, Route 53, identity integration, shared mailboxes, inbound/outbound mail flow, DNS records, and migration planning toward Zoho Mail with coexistence and rollback considerations.
- Scope: WorkMail administration, SES inbound routing, Route 53 MX/SPF/DKIM/DMARC, AD/SSO planning, mailbox mapping, and test mail-flow validation.
- Impact: improved migration readiness, clarified mail-flow design, and validated email delivery paths before production cutover.
- Tools: Amazon WorkMail, SES, Route 53, S3, Zoho Mail, AD Connector, DNS, SPF, DKIM, DMARC.
Architecture Patterns
Cloud work backed by real architecture, automation, and operating patterns.
Landing Zone & Account Baselines +
Control Tower customization, landing-zone prerequisites, account management, shared-resource buckets, Security Hub setup, StackSet deployment, baseline roles, service-linked roles, CloudWatch, CloudTrail, and AWS Config foundations.
Guardrails & Identity Governance +
IAM restriction SCPs, VPC and SSM guardrails, DNS access controls, permission boundaries, SAML/SSO role templates, access key controls, privileged-role exceptions, and account-level security standards.
Security Reporting & Quarterly Reviews +
Lambda-based Security Hub findings aggregation, account-to-business-unit mapping, high/critical finding filtering, CSV reporting to S3, control summaries, and evidence used for stakeholder-facing AWS reviews.
Systems Manager Operations +
Organization-wide Systems Manager visibility using Resource Explorer views, patch scan associations, State Manager patterns, managed execution, inventory management, and operational visibility for EC2 fleets.
DNS, Ingress & Resilience +
Route 53 hosted-zone backup automation, S3 archive storage, SES status notifications, centralized ALB ingress patterns, TLS policy enforcement, HTTP-to-HTTPS redirects, and DNS operations for recovery workflows.
Automation & Release Governance +
Azure DevOps YAML pipelines, CloudFormation template validation, StackSet delivery, key cycling automation, tagging automation, deployment stages, approval gates, and production troubleshooting runbooks.
Credentials
Graduate education and cloud certifications.
AWS Certification
AWS Certified Solutions Architect - Associate
Active: May 10, 2025 - May 10, 2028
Validation: WNGJFFVC7EB4QH97 View certificateAWS Certification
AWS Certified DevOps Engineer - Professional
Active: August 25, 2023 - August 25, 2026
Validation: 2LVZ8B9CWBRQ1RSF View certificateContact
Let's connect.
Cloud platform, governance, automation, and production operations contact.