Professional Experience
Amazon Web Services, Seattle, WA
Principal Security Engineer - Amazon EKS, Sept 2022 - Present
Principal Software Engineer - Amazon EKS, Sept 2021 - Sept 2022
Sr Software Development Engineer - Amazon EKS, Mar 2020 - Sept 2021
Sr Systems Development Engineer - Amazon EKS, Mar 2019 - Mar 2020
Systems Development Engineer - Amazon EKS, Mar 2018 - Mar 2019
- Compiled a multi-year strategic plan for organizational security initiatives. Coordinated with multiple teams to sign up for annual goals to meet security objectives. Themes included software patching, implementation of least privileged operator access, hardened tenet isolation, data protections and classification, data perimeters, hardened encryption, penetration testing, software inventory, and open source security contribution
- Prototyped, designed, and led implementation of security tooling and monitoring frameworks, including dashboards, reports, and alarms to enhance the organization’s security posture
- Defined, designed, architected, advocated for, contributed to, and led the build of multiple customer facing features including IAM for Service Accounts (2019), EKS Fargate (2019), KMS encryption of Kubernetes Secrets (2020), EKS Distro (2020), EKS Anywhere (2021), EKS Anywhere Bare Metal (2022), AccessEntry API (2023), IAM for Service Accounts v2 (2023)
- Member of the Kubernetes Product Security Committee and administrator of Kubernetes Bug Bounty program. Coordinated with researchers, project developers, and distributors in the triage, verification, fix, and communication process of CVEs
- Initiated service team security on call rotation, developed and documentation the incident response for security issues
- Frequent speaker at internal and external conferences and internal team training sessions, and actively mentored and coached multiple ICs in regular one-on-ones
- Frequently met with customers, engineering, and management teams to help define products and advise customers of the EKS roadmap
Skuid Inc, Chattanooga, TN
DevOps Team Lead & Senior Site Reliability Engineer, September 2017 – February 2018
Senior Site Reliability Engineer, February 2017 – September 2017
Site Reliability Engineer, February 2016 – February 2017
- Designed and implemented all of the Skuid Platform AWS infrastructure, including high-availability, monitoring and alerting, logging, security, deployment & multiple Kubernetes clusters
- Implemented intrusion prevention and alerting system
- Advised and assisted with design and development of the Skuid Platform
- Attended and presented at several industry conferences, and wrote multiple company blog posts
- Designed, setup CI/CD, implemented, and supported the infrastructure and tooling around developer documentation site
- Led, attended, and advised in over 25 interviews for various positions and lead training of SRE hires, documented the process
- Helped lead migration of company domain, and transfer of 40 domains between registrars
- Migrated external infrastructure services TLS to LetsEncrypt
- Drove automation of development pipeline including CI, TLS and domain provisioning, with tools like DroneCI, Kubernetes, ExternalDNS, LetsEncrypt, and Spinnaker
- Presented multiple internal training sessions on technologies and product features
- Contributed to multiple Open Source projects including Kubernetes and Spinnaker
Ambition Inc, Chattanooga, TN
System Engineer, March 2013 – February 2016
- Lead operations team in designing and building a PaaS-like infrastructure and deployment service
- Grew operations from zero to thousands of users including multiple Fortune 500 Enterprise companies
- Architected company stack and infrastructure in AWS
- Migrated server provisioning from Puppet to Salt
- Administered developer and employee services (VPN, Ticketing systems, Google Apps, etc.)
- Initiated documentation of internal applications and code and maintained organizational security
- Researched, explored, and integrated new technology solutions such as application monitoring, logging, and alerting services
Retickr/Fireplug LLC, Chattanooga, TN
System Engineer, August 2011 – March 2013
- Administered and supported social news service
- Provisioned all services with Puppet
- Managed services including: Apache, Django, RabbitMQ, MySQL, Cassandra
- Migrated entire service from a colo to Amazon Web Services
Education
Covenant College, Lookout Mountain, GA
Bachelor of Arts December 2011, Computer Science, Major
- Maclellan Leadership Scholarship Recipient
- Dean’s List Student – Fall 2007, Fall 2009, Fall 2010
- Resident Assistant – Fall 2010 – Spring 2011
- Post-graduation coursework in Computer Security and Cryptography