Henderson, Nevada, United States
Senior Platform Engineer with over 20 years of progressive experience designing and operating hybrid cloud and on-prem infrastructure. Currently operate and secure ~250+ virtual machines across Nutanix, Hyper-V, and segmented DMZ/OT environments supporting ~1000 users and 6 Active Directory domains. My focus is automation-driven infrastructure, high-availability service design, and reducing operational drift through Git-backed configuration management. Recent work includes: • Implementing CI/CD pipelines for Azure App Service deployments triggered by source control commits • Designing high-availability Linux services using HAProxy and Keepalived • Automating cross-DMZ policy distribution via GitHub Enterprise as a source of truth • Operating ransomware-resilient backup architecture protecting 80+ TB of enterprise data I prefer building repeatable systems over maintaining fragile ones. I’m particularly interested in remote-first, product-driven SaaS environments where platform engineering and automation are core to the organization. Outside of corporate work, I build and publish open-source infrastructure utilities through ZentrixLabs and BakBeat Labs, emphasizing deterministic behavior and practical, state-aware system design.
Designed, operated, and automated hybrid infrastructure supporting ~1000 users across Corp, DMZ, and OT environments spanning 6 Active Directory domains., including a ransomware-isolated backup domain secured via one-way trust boundary. Manage ~150+ core VMs across Nutanix AHV and Hyper-V clusters, plus additional OT virtualization environments (~100 VMs) spanning Corp, DMZ, and OT zones. Key Focus Areas: • High-availability Linux services (HAProxy + Keepalived) with AD integration • Built Git-backed configuration distribution workflows across segmented environments using GitHub Enterprise as a source of truth. • CI/CD pipelines for Azure App Service deployments triggered by source control commits • GitHub Actions workflows for build and code-sign automation • Segmented network architecture to enforce trust boundaries and reduce lateral movement risk • Veeam M365 and enterprise backup architecture protecting 80+ TB of data * Designed and implemented internal automation and deployment tooling to reduce operational drift and standardize infrastructure workflows. Build standardized Bash-based provisioning framework to enable repeatable Ubuntu server deployment and reduce configuration drift.
Led infrastructure design and operations for mixed Windows/Linux environment (~50 servers) supporting studio development operations. Architectural Highlights: • Designed and deployed 10GbE network core for new office buildout (Brocade clustered switches and campus fabric) • Architected quad-node Hyper-V failover cluster with iSCSI storage backend • Designed quad-node SAN built on Debian and RozoFS • Implemented Veeam backup architecture with Spectra T50 tape library • Migrated Postfix-based mail system to Exchange 2016 • Implemented PRTG monitoring platform for infrastructure visibility Developed PowerShell and C# automation tooling for user lifecycle management and operational workflows.
Supported large-scale development environment serving 500+ users and ~500 server systems across Windows and macOS platforms integrated with Active Directory and Exchange. Key Contributions: • Developed internal C# and PowerShell tooling for build distribution, user lifecycle automation, and operational workflow reduction in a 500+ user production studio environment. • Implemented tooling to manage new hire provisioning, contract conversions, and user offboarding workflows • Analyzed Windows memory dumps to isolate hardware and software faults • Contributed to monitoring and infrastructure visibility via PRTG Operated within high-availability studio production environment requiring minimal downtime and rapid issue resolution.