Baltimore, Maryland, United States
DevOps Engineer with 9+ years of experience designing, automating, and operating secure Linux and AWS-based infrastructure across hybrid cloud environments. Specialized in Infrastructure as Code (Terraform), Kubernetes orchestration (self-managed), CI/CD pipeline engineering, and enterprise automation using Ansible. Proven ability to improve deployment efficiency, reduce operational overhead, strengthen security compliance, and enhance production reliability in high-availability systems. Strong expertise in AWS networking (VPC architecture, IAM governance, routing, security groups), containerization with Docker, and observability using Prometheus, Grafana, and CloudWatch. Experienced supporting compliance-driven environments (STIG, FISMA) while enabling modern DevOps practices.
- Architect and provision AWS infrastructure using Terraform, deploying VPCs, subnets, route tables, EC2 instances, and security groups in production environments - Administer 150+ RHEL 7/8/9 systems across hybrid AWS environments, maintaining 99.9%+ availability. - Implement IAM least-privilege access controls and enforce AWS security best practices. - Develop reusable Ansible roles and playbooks to automate provisioning, patching, and configuration management workflows. - Integrated Docker containerization into application environments and deployed workloads into a self-managed Kubernetes (kubeadm) development cluster. - Support CI/CD pipelines using Jenkins, Nexus, and Git-based workflows. - Implement monitoring and alerting using Prometheus, Grafana, Datadog, and CloudWatch, improving observability and reducing MTTR. - Participate in on-call rotations, performing root cause analysis and implementing preventative automation improvements.
- Managed secure AWS environments including EC2, IAM, VPC networking, security groups, and route table configurations. - Automated STIG compliance remediation using Ansible, improving audit readiness and reducing manual effort. - Implemented automated patch management using AWS Systems Manager and Ansible for RHEL systems. - Configured centralized logging using Splunk and CloudWatch for enhanced monitoring and incident response. - Managed backup strategies using automated EBS snapshot policies - Administered RHEL systems in mission-critical, high-availability environments. - Led the migration of 500+ AWS EC2 instances from GP2 to GP3 Amazon EBS volumes, improving storage performance (~30%) and reducing AWS costs (~20%) - Leveraged GitLab for version control and collaboration, managing AWS CloudFormation templates and Ansible playbooks to support infrastructure-as-code (IaC) and automated system provisioning
- Built and Administered RHEL 6/7/8 systems in secure federal environments. - Provisioned and monitored AWS EC2 instances, configuring autoscaling and CloudWatch alerts. - Managed Red Hat Satellite lifecycle and patch orchestration. - Install/configure/manage Trend micro Deep Security - Automated configuration management using Ansible and Bash. - Conducted OSCAP (OpenSCAP) security scans to assess system compliance with security benchmarks, generating reports and remediating vulnerabilities. Troubleshot TCP/IP connectivity issues, firewall rules, and service binding conflicts in production environments. - Managed user accounts, sudo policies, and access controls in accordance with enterprise security standards. - Applied Linux system hardening controls including SELinux policy tuning, firewall configuration, and service minimization. - Tuned Linux kernel parameters and system limits (sysctl, ulimits) to optimize performance for high-throughput production workloads.
- Led RHEL 7 migration initiatives across enterprise environments. - Implemented Ansible and Ansible Tower (AWX) to automate VMware-based infrastructure provisioning. - Managed VMware vSphere and vCenter environments, optimizing compute and storage allocation. - Provisioned LUNs and managed datastores to improve infrastructure scalability. - Installed and maintained monitoring platforms to improve system health visibility. - Administered enterprise storage and lifecycle management using Red Hat Satellite.
- Deployed Linux-based web applications using Apache, Tomcat, and LAMP stack. - Built VM-based Linux servers using VMware ESX. - Implemented monitoring using Nagios. - Automated administrative tasks using Bash scripting and cron.