Senior DevSecOps/Platform Engineer, T-Mobile (Centralized Observability and Security Enforcement on Kubernetes Platform)
Duration: Sep. 2025 - Jul. 2026
Summary: Project focused on platform engineering and cloud security at T-Mobile, building centralized observability and enforcing policy and supply-chain security on T-Mobile's Kubernetes platform to enhance security posture and operational visibility.
Responsibilities:
- Designed and delivered a centralized logging pipeline aggregating Kubernetes/EKS workloads and Windows DNS servers.
- Enforced security guardrails with Kyverno admission controllers on Kubernetes platform.
- Hardened CI/CD pipelines using GitLab with Kaniko image builds and Wiz container image scanning.
- Modernized VM access with GaraSign and automated VM and GPO onboarding using Ansible Automation Platform.
- Automated data collection routines and defined data pipelines in GitLab CI/CD.
Technologies: Kubernetes (EKS), Vector.dev, Kyverno, GitLab CI/CD, Kaniko, Wiz, Ansible Automation Platform, Python.
Senior Site Reliability Engineer, McGraw Hill (Cloud Infrastructure Reliability and CI/CD Modernization)
Duration: Sep. 2024 - Jun. 2025
Summary: Engagement at McGraw Hill's Higher Education division focused on improving cloud infrastructure reliability, platform automation, and modernizing CI/CD pipelines on AWS to enhance operational efficiency and reduce incidents.
Responsibilities:
- Provided L1/L2 after-hours on-call support for production systems, triaging and resolving incidents.
- Conducted post-mortems to drive remediation and prevent recurrence.
- Standardized infrastructure provisioning using GitHub Actions–gated workflows to eliminate configuration drift.
- Codified New Relic monitoring as infrastructure as code with reusable Terraform modules.
- Migrated legacy Puppet/Apache routing rules to CloudFront Functions to modernize CDN delivery.
Technologies: AWS, GitHub Actions, Terraform, New Relic, CloudFront Functions, PagerDuty.
Specialist DevOps Engineer, WEX INC (Enterprise Architecture & DevEx Tooling and Secure Cloud Practices)
Duration: Dec. 2022 - Nov. 2024
Summary: Hybrid DevOps engineering and enterprise architecture role at a NYSE-listed global payments company, focusing on identity architecture, secure cloud practices, PCI-DSS/SOC 2 compliance, and improving operational efficiency across AWS environments.
Responsibilities:
- Acted as AWS Subject Matter Expert and technical reference for DevOps teams.
- Defined authentication architecture and IAM strategy with Auth0 and Okta.
- Migrated CipherTrust Manager platform to multi-region EC2 deployment and integrated tokenization.
- Instrumented backend microservices with Datadog APM and Splunk Enterprise.
- Built Terraform-provisioned Python reference API integrating Auth0 and Google Apigee.
- Led architectural analysis and contributed to company-wide initiatives to reduce operational risk.
- Implemented and optimized MSK Serverless cluster integrated with Kinesis Data Streams and Firehose.
- Improved ECS efficiency through autoscaling and worker capacity tuning.
- Automated SOC 2 and PCI-DSS evidence collection and reporting, liaising with external auditors.
Technologies: AWS (EC2, Lambda, ALB, RDS, Route 53, MSK Serverless, Kinesis Data Streams, Firehose, ECS), CloudFormation, Terraform, Auth0, Okta, Datadog APM, Splunk Enterprise, Python, Google Apigee.
SRE/Cloud Solutions Architect, Senior Sistemas (AWS and Kubernetes Platform for Multi-Tenant ERP/SaaS Products)
Duration: Sep. 2020 - Apr. 2023
Summary: Built and operated AWS and Kubernetes platforms supporting multi-tenant ERP/SaaS products, focusing on CI/CD, multi-account architecture, disaster recovery, and modernization of legacy monolith applications into microservices.
Responsibilities:
- Led application deployments with GitLab CI/CD and CloudFormation across EC2, EKS, and ECS.
- Built multi-account AWS infrastructure using CloudFormation StackSets for WMS product.
- Developed Helm charts and platform components for Kubernetes clusters.
- Migrated Docker Compose workloads to Kubernetes and integrated Elasticsearch-based metrics.
- Designed and delivered greenfield IaaS and public-sector projects on AWS.
- Co-designed disaster recovery plan and automated its execution using Terraform and Bash.
Technologies: AWS (EC2, EKS, ECS, CloudFormation, CloudFormation StackSets), Kubernetes, Helm, GitLab CI/CD, Terraform, Elasticsearch, Bash.
Mid-Level Infrastructure Analyst, Unifique Telecommunications (Hybrid Infrastructure Automation and Observability)
Duration: Feb. 2020 - Sep. 2020
Summary: Managed hybrid infrastructure across on-premises datacenter and AWS, focusing on automation, systems hardening, observability, and datacenter-to-cloud connectivity to improve reliability and security.
Responsibilities:
- Automated OS-level operations using AWS Systems Manager Automation and custom SSM Documents.
- Hardened Linux and Windows instances against CIS benchmarks using Chef InSpec and AWS SSM Compliance.
- Participated in production on-call rotation, troubleshooting issues using Elastic Beanstalk logs and Amazon CloudWatch.
- Built observability dashboards with Grafana, Prometheus, Zabbix, Elasticsearch, and Kibana.
- Established site-to-site IPsec VPNs using Openswan, pfSense, AWS VPN, and Fortinet firewalls.
- Provisioned infrastructure across VMware vCloud Director, AWS, and Hyper-V.
- Maintained datacenter physical layer including rack organization, thermal management, and NAS/iSCSI storage.
Technologies: AWS Systems Manager, Chef InSpec, Elastic Beanstalk, Amazon CloudWatch, Grafana, Prometheus, Zabbix, Elasticsearch, Kibana, Openswan, pfSense, AWS VPN, Fortinet firewalls, VMware vCloud Director, Terraform, Hyper-V, NAS (FreeNAS, QNAP).
Technical Support Technician, DIATIVA, Blu Computadores and Inventti (IT Support and Infrastructure Automation)
Duration: Jun. 2013 - Feb. 2020
Summary: Provided technical support across hardware, networking, operating systems, and business-critical integrations, progressing from intern to mid-level support technician, laying the foundation for later infrastructure and reliability engineering roles.
Responsibilities:
- Delivered end-user and infrastructure technical support for hardware, operating systems, and networking.
- Troubleshot EDI integration failures between communication VANs and business partners.
- Diagnosed and repaired desktop, server, and peripheral hardware.
- Administered Windows Server environments including Active Directory, DNS, and DHCP.
- Automated Red Hat Linux patching with Ansible playbooks (AWX).
- Managed firewalls including pfSense, SonicWall NGFW, and Fortinet.
Technologies: Windows Server (Active Directory, DNS, DHCP), EDI, Ansible (AWX), pfSense, SonicWall NGFW, Fortinet.
Upstaffer since October, 2026
