30% GCP cost reduction via shared review-app infrastructure (replacing full-stack per-MR environments), Cloud Run scale-to-zero for non-production services, and build pipeline cleanup (eliminating unnecessary container builds on every commit). Serving parallel AWS and GCP client engagements.

• Cloud Cost Optimization Initiative: Led an initiative resulting in a 30% reduction in monthly infrastructure expenses across all environments.
• Dynamic Preview Environments: Designed and implemented scalable preview environments tied to GitLab merge requests to improve testing efficiency.
• AWS Cognito Authentication: Implemented AWS Cognito-based authentication system with user pools, MFA, and federated identity for secure application access.
• Certificate Management Automation: Implemented automated SSL certificate renewal system with GCP Secret Manager and Pub/Sub.
• Automated Terraform module documentation: Integrated terraform-docs into CI pipelines to auto-generate Terraform module documentation — README files, usage examples, and configuration templates kept in sync with HCL source, reducing IaC onboarding friction and doc drift.
• Multi-account AWS infrastructure with Terragrunt: Designed and maintain Terragrunt modules across five environments (dev/stage/prod plus sandbox/local), with shared baseline modules and per-environment overrides.
• Layered local AWS development with LocalStack and SAM: Built a layered local development experience: a fully-local mode using LocalStack for offline iteration, and a hybrid mode using SAM CLI bootstrapped against deployed AWS dev resources for richer integration testing. Keeps cloud bills off engineers writing unit tests.
• Per-merge-request preview environments on GCP: On a previous client engagement, built per-merge-request preview environments on GCP / Cloud Run so reviewers could click around real infrastructure on each open MR instead of relying on screenshots or local repros.
• Observability-as-code with CloudWatch: Treated CloudWatch alarms and dashboards as code — error-rate metric math, per-environment retention tiers, master enable/disable switches, and SNS routing to email and Teams webhooks across multiple environments.
• Secret management across AWS and GCP: Shipped secret-management implementations across two client engagements. On AWS: moved vendor API keys and service credentials from CI variables into Secrets Manager, with Lambda-side caching at cold start. On GCP: automated certificate rotation triggered by Pub/Sub with Secret Manager as the store, eliminating manual cert-swap downtime.
• Monitoring stack migration from Datadog to GCP Cloud Monitoring: Led migration of a client's monitoring stack from Datadog to GCP Cloud Monitoring — rebuilding dashboards and alarm routes while maintaining SLO coverage during the cutover. Standardized alert routing across email, Teams, and Slack.
• CI/CD reliability guardrails: Hardened CI pipelines to block broken code from reaching downstream environments — parallelized jobs with automated smoke tests, static-analysis and database-changelog validation, SAST/DAST-style scanning, and build-success-gated release automation.
• Department IAM ownership on GCP: Owned IAM design and administration across a GCP department engagement — role bindings, custom roles, service-account hygiene, and least-privilege enforcement across multiple projects.

GCP · Terraform · GitLab CI · AWS · Terragrunt · OpenTofu · LocalStack · AWS SAM · Cognito · KMS · Secrets Manager · ECR

Developed cloud administration applications reducing support call durations by 50%. Collaborated on web application for cloud migrations, removing technical interventions. Implemented code review protocols strengthening software quality standards.

• Cloud Administration Application: Built cloud administration application providing clients self-service access to integrate and map external service data in a centralized location, reducing support call durations by 50%.
• GitHub CI/CD migration: Spearheaded migration from Bitbucket and TeamCity to GitHub, implementing branch protection with required team code reviews and automated secret-scanning on all commits.
• Automated TypeDoc documentation pipeline: Built internal PowerShell tool automating the release and updating of TypeDoc comments into a Gatsby documentation website, eliminating manual doc maintenance.
• Client database migration SPA: Collaborated with product managers to architect and develop a single-page web app for client database migrations into cloud applications.

TypeScript · GitHub · CI/CD · AWS · Angular

Designed CI/CD pipelines streamlining deployment processes across teams. Architected scalable Puppet infrastructure for environment consistency. Automated user onboarding and routine administrative tasks via PowerShell. Owned on-premises operations end-to-end: updates, disaster recovery and backups, and capacity planning.

• CI/CD Pipeline Architecture: Designed and implemented comprehensive CI/CD pipelines streamlining deployment processes across multiple teams.
• Infrastructure Automation: Developed infrastructure-as-code using Puppet Enterprise (Server/Agent architecture) to reduce configuration drift and ensure consistency across developer environments.
• Automated engineer onboarding: Implemented automated user creation for new engineers, eliminating manual provisioning and reducing onboarding human error.
• Automated server provisioning: Developed automated server creation with Cloud-Config and VMware vRealize to give developers fast, consistent, reproducible environments — reducing manual operations interventions by 75%.
• Automated security scanning pipeline: Established scheduled SAST and DAST security scanning with automated vulnerability reports to development teams, preventing vulnerabilities from reaching production.
• Microsoft Active Directory administration: Administered Active Directory — user provisioning, permission management, group creation, and distribution lists.

On-Prem · Azure · Puppet · PowerShell · IIS · MS SQL Server · SQL

Converted legacy data systems, increasing revenue by $500K. Engineered a CLI automation tool for error log processing, accelerating conversion speed by 50%. Developed SQL scripts for seamless data integration.

• Legacy System Conversions: Successfully converted legacy data systems contributing to $500K in increased revenue.
• CLI Automation Tool: Engineered automation tool for error log processing, accelerating conversion speed by 50%.
• Engineer mentoring on data extraction: Trained team engineers on extracting and processing HTE, CSV, and other flat-file data formats as part of conversion workflows.

COBOL · SQL · PowerShell · Python

Implemented automated pharmacy reporting systems using Python and SQL. Established IT communication protocols with 2-hour response standards. Created comprehensive IT documentation framework.

• Automated Pharmacy Reporting: Implemented automated reporting systems for pharmacy operations using Python and SQL.
• IT Documentation Framework: Created comprehensive documentation framework establishing IT communication protocols and standards.
• Vendor partnership and technology optimization: Strengthened vendor relationships to ensure optimal solution usage, collaborating on installations and upgrades.

Windows · Active Directory · PowerShell · Python · SQL