Summary
Full Stack Engineer with a career spanning QA, test automation, software development, DevOps/SRE, and security engineering, having worked on every side of the wall. That breadth means I understand how decisions made in one discipline ripple into consequences in another, and how to build systems that hold up under scrutiny from all of them. Proven track record of shipping production systems at scale, contributing to open source, and embedding security and quality practices throughout the development lifecycle. Leverages AI tooling to accelerate delivery without sacrificing rigor.
Core skills
Languages
- Python (Flask, Falcon, Django)
- Go
- Node.js / TypeScript
- Java (Spring Boot)
- Bash, Ruby, Kotlin
Frontend
- React / TypeScript
- jQuery, Bootstrap
- Tailwind CSS
- Component design
- D3.js
Infrastructure
- Terraform / OpenTofu
- AWS (EKS, ECS, Lambda, SSO, WAF, GuardDuty)
- Docker / Kubernetes / Helm
- Packer, Atlantis, Atmos, Spacelift
- GitHub Actions, Buildkite, Jenkins
Security
- OPA / Conftest
- CloudCustodian / SCPs
- tflint, tfsec / trivy, checkov
- Burp Suite, SAST / DAST
- Secrets management
SDET
- Jasmine / Siesta / mocha
- Terratest, OPA Rego policies
- Scapy (packet-level testing)
- Integration & E2E frameworks
Observability / SRE
- Datadog, ELK stack
- OpsGenie, PagerDuty
- ADRs, runbooks
- SLOs / cost optimization
- Incident response
Experience
Geolocation Company, SRE / DevSecOps / DevOps
2022 – Present · Remote- Introduced a third-party CNAPP and DSPM across the AWS organization and 100k+ resources as a replacement for the expensive native AWS CNAPP stack; achieved net-zero cost while driving critical cloud vulnerabilities from 40 to 0 and high from 76 to 0.
- Modernized database access for 175 production databases via a zero-trust access proxy, eliminating static credentials and enabling JIT approval with full query audit.
- Coordinated third-party penetration testing across cloud and API surfaces; identified 50+ undocumented endpoints and drove 100% remediation of critical and high findings.
- Removed 1,500+ unused IAM roles (roughly 20% of org total), 60TB+ of stale S3 data, and hundreds of unused security groups, EIPs, and other resources from the AWS organization via Cloud Custodian automation; implemented proactive S3 PII monitoring.
- Authored the org's first formal security policies and ADRs (Architecture Decision Records) standardizing security decisions across infrastructure teams.
- Rearchitected Atlantis (Terraform CI/CD) into a scalable, low-maintenance platform and introduced cloudposse's Atmos for YAML-based stack abstractions, reducing Terraform sprawl and replacing a bespoke internal system.
- Introduced policy-as-code (OPA, Conftest) across Terraform and Kubernetes; removed all persistent admin access from production accounts via least-privilege roles.
- Led CloudFront-to-Cloudflare and EC2-to-EKS migrations; presented capacity and cost forecasts to VPs.
RB Consulting LLC, CEO / Principal Staff Engineer
2021 – Present · Remote- Consulted for Fortune 500, midcap, and small companies across IaC, security, and cloud architecture.
- Managed 100s of open source Terraform modules in terraform-aws-modules and cloudposse.
- Set up complete AWS environments from scratch: SAML/SSO with Okta, Teleport, Client VPN, Spacelift, Datadog, OpsGenie, WAF, GuardDuty, and delegated IAM roles.
- Configured and maintained EKS (including Bottlerocket) and ECS Fargate with all Helm releases managed via IRSA roles built in Terraform.
- Tested Terraform using Terratest and OPA Rego policies; used tflint, tfsec, checkov, and infracost in all pipelines.
Security & Adtech Company, SRE / DevSecOps / DevOps
2019 – 2021 · Remote- Discovered company secrets and proprietary code in public containers; devised and executed a zero-disruption remediation plan.
- Led team implementation of a zero-trust solution to replace a costly VPN within a hard 2-month deadline.
- Worked with IT to migrate employees to AWS SSO with Okta integration.
- Reduced costs and added governance using Cloud Custodian; installed Atlantis on Fargate for PR-based Terraform automation.
- Built TypeScript/Node.js services using Hapi; deployed to Kubernetes using Helm charts.
DFS / Gaming Company, SRE / DevSecOps / DevOps
2018 – 2019 · In Office & Remote- Automated Golden AMI pipeline: Packer builds, multi-region deployment, Rapid7 InsightVM scans, and cross-account tagging via Lambda.
- Brought Cloud Custodian as a governance tool for cost reduction; used Akamai CDN + AWS WAF to protect against bots and DDoS.
- Built Python microservices using AWS ALB, Target Groups, and Lambda; monitored via Datadog and ELK stack.
- Automated deployment data collection (human crons → GAppsScript webhooks + Google Sheets).
Adtech & Sales CMS, DevOps / DevSecOps / Full Stack Engineer
2016 – 2018 · In Office & Remote- Architected and built a Node.js app (koa + pm2) in 8 weeks that handles 150M+ req/mo and saved the jobs of the entire team.
- Uncovered 60+ high-severity vulnerabilities in legacy apps using Burp Suite, w3af, sqlmap, and custom scripts, enabling a Salesforce security approval.
- Designed a proxy API for Sales in Java Spring Boot with a TypeScript frontend.
- Containerized apps in Docker/Vagrant, set up Jenkins CI pipelines with SAST, auto-merge, and auto-deploy.
- Load tested apps with JMeter, blazemeter, wrk, and Apache Bench; gave company-wide TDD and CI/CD presentations.
Networking & Firewall Company, Automation / DevSecOps Engineer
2013 – 2016 · In Office & Remote- Built an automated test framework for ExtJS frontend code using Jasmine + Siesta, integrating results into CI via Jenkins.
- Created a remote Python test runner agent; VM automation with Packer + veewee + vSphere + Vagrant.
- Wrote Scapy packet-manipulation scripts to test IDS/IPS evasion; scripted Heartbleed reproduction scenarios.
- Won a company award for building a self-correcting Smartsheet using Smartsheet-Data-Tracker.
IoT Company, Engineer
2011 – 2013 · In Office- Built a self-healing mesh network for marine buoys (GPS + accelerometer + Digi + Arduino) at 1/10th the cost of existing solutions, field-tested on a boat.
- Programmed custom Arduino boards in C++ for real-time GPS and tidal clearance data.
- Developed LIDAR analysis functions in Yorick for the USGS EAARL project under a PhD professor; trained USGS personnel via presentations.
Open source & community
Atlantis (Terraform CI/CD)
Contributor (150+ commits) to runatlantis/atlantis, the Terraform pull-request automation server (Go). Long-time adopter and advocate; introduced Atlantis at multiple companies for PR-driven Terraform workflows.
Cloud Posse (cloudposse, Atmos)
Substantial contributor (350+ commits) across the cloudposse Terraform ecosystem, including Atmos, their YAML-based Terraform stack orchestration tool. Helped maintain hundreds of open-source modules used widely across the community.
terraform-aws-modules
Contributor to the community Terraform AWS module collection, helping maintain modules used across the ecosystem.
OpenTofu Release Registry Emulation
Built a static emulation of the Terraform version registry to unblock Go and other language SDKs migrating to OpenTofu after the HashiCorp fork.
HashiCorp Packer
Contributed SourceAMICreationDate to the Packer project (Go).
Terraform AWS Provider
Contributed features and fixes to the official Terraform AWS provider.
terraform-plan-applier
npm package to apply Terraform plans with configurable criteria.
pm2-logrotate
Fixed a gzip issue and added timezone support to the popular pm2 log rotation plugin.
netmiko
Added device support for specific network switches to this Paramiko-based SSH library.
iam-policy-json-to-terraform
Added Homebrew, Chocolatey, and Scoop package manager support.
pandoc_resume
Added mobile-friendly styling and modularized the Makefile.
Smartsheet-Data-Tracker
Fixed a spreadsheet sync failure; won a company award for the contribution.