-
CACI International Inc - NASA
Mar. 2025 - Present
Lead Platform Engineer
Lead Platform Engineer for the NASA Enterprise Data Platform (EDP), architecting and maintaining cloud-native, multi-tenant infrastructure that powers data analytics and AI initiatives across NASA centers.
- Contributed to/maintained a large, multi-tenant Terragrunt/Terraform code base supporting 6+ environments, 26+ tenancies, and 30+ isolated states/contexts orchestrated through CI
- Performed technical administration of multiple large Databricks workspaces/accounts, including networking, governance, RBAC/ABAC, identity and user management, and FinOps
- Served as team lead, facilitating Agile ceremonies, driving backlog prioritization and sprint planning, aligning with epics/long term objectives of the org, and providing mentorship to junior engineers
- Extended the NASA EDP into AWS GovCloud to support ITAR/EAR-controlled Artemis II campaign data, deploying Databricks, EKS, and GitLab Runner infrastructure
- Deployed multiple highly-available Tableau clusters and integrated them with the EDP, making them available as an enterprise service across NASA
- Eliminated manual Databricks identity administration by implementing automated SCIM provisioning from NASA Entra ID, including IaC-based permission mirroring and zero-disruption cutover
- Reduced operational toil by automating AMI updates via Renovate and GitLab CI, eliminating manual patching steps across 6+ environments each patch cycle
- Planned and executed zero-downtime EKS upgrades, customer application upgrades, and worker node OS migrations across 6+ environment clusters
- Led planning and execution of migrating all platform workloads to NASA-plumbed Source-NAT (SNAT) VPCs, authoring a phased strategy with work breakdown, risk register, and cross-enterprise-team coordination
- Tech: Terragrunt, Terraform, Databricks, AWS EKS, Python, Ansible, GitLab CI, Flux
-
Naval Air Warfare Center - Aircraft Division (NAWCAD)
Feb. 2020 - Mar. 2025
DevOps Engineer
- Reduced cycle time and mean time to repair (MTTR) by migrating 30 production workloads from singular dedicated VMs to Docker Swarm clusters
- Reduced operational toil by using Ansible roles to standardize configuration management of a fleet of ~100 RHEL machines
- Reduced cycle time and improved network security posture by engineering Continuous Integration (CI) pipelines to produce secure container/VM images while enforcing quality gates
- Reduced cycle time by developing Continuous Deployment (CD) pipelines that release containerized workloads to production
- Reduced operational toil by co-developing Python tooling that automates the auditing of assets' Cybersecurity posture
- Reduced operational toil by writing Python tooling that allows management of web application accounts from a central identity provider (Okta) via REST API synchronization
- Collaborated with software engineering teams to resolve CI/CD pipeline issues in GitLab
- Aided in a full on-prem development environment migration to AWS GovCloud, resulting in improved developer productivity, cycle time, overall fleet readiness
- Migrated legacy log aggregation system to an ElasticSearch, Logstash, Kibana (ELK) stack, resulting in improved visibilty into our network security posture
- Deployed a Prometheus stack for aggregation and visualization of network metrics, resulting in reduced MTTR and alert fatigue
- Occasionally participated in red team engagements of Navy fleet assets
- Tech: Python, Ansible, Terraform, AWS ECS, Okta, Packer, GitLab CI, Docker Swarm, Prometheus, ELK, Anchore, Prisma, vSphere
-
Platform One
July 2023 - Jan. 2024 (6 month residency)
Software Developer
- Led a team of 4-5 engineers in a multi-month effort to harden Big Bang packages in accordance with NSA's secure Kubernetes guidelines
- Contributed to complex Helm template codebases that comprise the Big Bang DevSecOps platform
- Supported and deployed common Software Factory tooling within Big Bang (GitLab, ArgoCD, Istio, Sonarqube, Twistlock, Nexus, Anchore, etc)
- Triaged and resolved community-identified software bugs
- Reduced cycle time by writing several shell scripts to expedite development environment provisioning
- Tech: Helm, Kubernetes, GitLab, Bash
-
Sabre Systems, Inc.
June 2017 - June 2018
Naval Air Warfare Center - Aircraft Division (NAWCAD)
June 2018 - Feb. 2020
Linux System Administrator
- Increased developer productivity by migrating legacy physical infrastructure to a highly available, scalable, and 10GbE virtual platform
- Improved network security posture by aggregating, normalizing, and visualizing audit data for analysis by our Cybersecurity team
- Reduced developer toil by migrating legacy build scripts to CI/CD pipelines
- Collaborated with software engineering teams to resolve C/C++/Ada compiler issues
- Increased developer productivity by resolving various build system issues to improve software compilation speed
- Reduced operational toil by implementing server configuration management with Ansible
- Planned, tested, and implemented major version upgrades for the primary Software Configuration Management (SCM) platform Rational ClearCase
- Tech: Bash, Ansible, Python, RHEL, Bamboo, Bitbucket, ClearCase, vSphere, Horizon View, Active Directory
-
Booz Allen Hamilton
Dec. 2014 - June 2017
System Administrator
- Provided technical support for active duty users operating mission critical, forward deployed assets
- Improved server deployment efficiency by developing a fully-automated deployment process leveraging:
- Microsoft Deployment Toolkit (MDT) for image configuration
- Windows Deployment Services (WDS) for system deployment via Preboot Execution Environment (PXE)
- Various PowerShell scripts for post-install configuration
- Conducted quarterly audits against Cross Domain Solution (CDS) components:
- Validated SELinux Mandatory Access Control (MAC) policies and enforcement level
- Validated syslog/audit functionality by performing privilege escalation attempts
- Validated input filtering by injecting malicious/malformed transport stream (MPEG-2 TS) packets
- Performed on-site verification testing for various servers fielded on U.S. Navy ships
- Tech: PowerShell, MDT + WDS, Hyper-V, RHEL, Windows
-
St Mary's County Public Library
Jan. 2014 - Nov. 2014
Public Technology Assistant
- Supported Windows machines, an Active Directory domain, and various library software for patrons and staff
- Reduced lead time for delivery of workstations to staff by developing various software deployment batch scripts
- Conducted IT training classes for patrons and/or the public
- Tech: Active Directory, Windows, Batch, PowerShell