I design, build and maintain technical infrastructure based on Linux (and other Unix derivatives) and free/open-source software.
I like to write clean, reusable and human-readable code in addition to leveraging existing tools in order to save time and money.
I take a firmly pragmatic approach to architecture, design and tooling decisions with the goals of reducing technical debt and overall system complexity whenever possible.
Experience
Enterprise Cloud Administrator
Los Angeles Unified School District
Los Angeles, CA
2025-present
- Acted as senior AWS administrator among a team of juniors and peers, along with a small architecture team
- Planned, designed, implemented, maintained, supported and repaired the District's AWS enterprise cloud infrastructure supporting many in-house and vendor applications
- Supported application infrastructure design and deployment using Elastic Container Service, Cloudfront, Elastic Container Repository, Azure DevOps, AWS Lambda, API Gateway, RDS/Aurora, IAM & IAM Identity Center, AWS Organizations and many other services central to District operations
- Performed monitoring and troubleshooting tasks across AWS and Azure DevOps
- Designed and implemented cloud disaster recovery operations and procedures using AWS best practices along with AWS Backup, AWS Route 53 and other multiregion services
- Led successful effort to implement IaC practices using Terraform, including in-house module development geared around District policies and best practices
- Performed security audits and remediation across various AWS services and in-house/vendor-supplied applications and associated infrastructure
- Managed highly-secured user and service access integrated with Azure AD/Entra, on-prem Active Directory, and AWS IAM/Identity Center
- Worked with external vendors to vet new applications and services to support ongoing cloud platform work
- Served on resource selection committees; performed vendor reviews and participated in RFC processes and selections
DevOps Engineer
BioTech Medical Software
Honolulu, HI, Tacoma, WA & Long Beach, CA
2017–2025
- Senior infrastructure architect and engineer for legacy Perl (Catalyst/Mojolicious) and cloud-native backend REST API systems (Go/gin) and frontend user interfaces (Vue.js) supporting more than
10 state contracts and 200+ private business customers
- Co-led successful efforts to modernize our medication tracking platform (from manually-managed infrastructure and software release process to using
Terraform and Bitbucket Pipelines for automated releases and updates)
- Developed in-house IaC/IaaS deployment and management tools for various AWS services
- Responsible for software/network security, image management/maintenance and ecosystem architecture
- Created workflows to execute and support over 400 successful production-level PostgreSQL server migrations and upgrades
- Onboarded and supported 20+ integration partner companies to expand our platform's B2B services
- Acted as a final point of escalation for multiple departments including technical support, infrastructure and governmental affairs
Technical Consultant
Self-Employed
Washington State
2016
- Designed and supported secure wireless network topology and hardware for internal and guest networks in high-volume commercial environments
- Consulted on point-of-sale hardware purchase and installation
- Managed IT services for medium-to-large scale public event production
Technical Support Shift Lead
ReadyTech Corporation
Nieuwegein, Netherlands & Oakland, CA
2012–2016
- Led an international team of technical support staff during EMEA business hours
- Developed internal training and documentation materials
- Performed image intake and maintenance, including physical-to-virtual conversions and ground-up image design for use in private-cloud-based
software training IaaS
- Responsible for datacenter hardware/networking operations, documentation and support
Network Technician
OpenAccess Network Services
Bellingham, WA
2009-2011
- Provided phone, email and CMS-based support for various ISP products
- Responsible for datacenter and network hardware intake, configuration, testing and installation
- Performed on-site installation and support of fiber, copper and wireless networking infrastructure including in hazardous conditions
- Assisted in service/bandwidth provisioning, web/VPS hosting, physical colocation and light construction to deliver services