×

Background


About

About

Linux Systems Engineer with 13 years of experience in managing and maintaining complex server environments; 9 years experience with SELinux policy development and systems integration and engineering; 5 years DevSecOps experience. The 🐝 and 🦋 know where I live.

Work Experience

Work Experience

  • Systems Engineer IV, Sealingtech

    Nov, 2026 - Present

    Software engineer for the Joint Cyber Hunt Kit program under USCYBERCOM

    • Develop software automation to support deployment of Joint Cyber Hunt Kit (JCHK) infrastructure.

    • Develop software automation for single stack variant of JCHK for International partners

    • Accelerated company development, testing, and production lifecycles by engineering container solutions for enterprise applications ( jenkins and jenkins-agents, bugzilla, CrunchyData postgresql, maestro, grafana, prometheus, graylog, testlink, hashi-vault).

    • Advocated for adoption for Software QA processes across development teams

    • Develop hardened provisioner template for deployment of the JCHK

    • Develop software and container lifecycle management processes to guaruntee integrity of solution

    • Identified and triaged undocumented vendor firmware bug

  • Software Security Engineer IV, Sealingtech

    Apr, 2024 - Nov, 20251 year 7 months

    Full stack developer for a novel multi-tenant secure high-performance computing (HPC) cluster solution.

    • Act as a stake holder at all stages of the Software Development Life Cycle (SDLC).

    • Onboard engineers new to the project.

    • Mentor junior developers on software development best practices.

    • Advocate for security first and test driven development practices.

    • SELinux security policy development.

    • RPM SPEC file development.

    • Develop end-to-end CI/CD deployment process for virtual and hardware environments.

    • Deploy HPC environments using Warewulf and Slurm.

    • Write and deploy automated security software to sanitize HPC compute nodes.

    • Develop secure base OS image for solution and compute images.

    • Write test requirements and test scripts for Integration and Acceptance testing.

    • Took part in internal research project for an experimental secure multi-tenant platform-agnostic variant of solution.

  • DevOps Engineer, Crunchy Data Solutions

    Feb, 2022 - Jan, 20241 year 10 months

    I was brought onto the team to help automate Operations processes, with a focus on assisting the build team in transitioning to container-based builds on the way to building in GitLab instead of Jenkins. My expertise was often utilized to drill down into difficult engineering scenarios to discover if and how we can make something work or work around limitations.

    • Accelerated company development, testing, and production lifecycles by engineering container solutions for enterprise applications ( jenkins and jenkins-agents, bugzilla, CrunchyData postgresql, maestro, grafana, prometheus, graylog, testlink, hashi-vault).

    • Performed Static and Dynamic (Grey and White box) code analysis (SAST / DAST) for production changes.

    • Collaborated with developers, packaging team and operations staff to deploy and manage code changes.

    • Maintained base images for Community (postgresql) and Production software builds.

    • Improved product security posture by analyzing vulnerability scan results and remediating vulnerabilities.

    • Modernized company QA workflows by updating Python 2 testing scripts to Python 3.

    • Maintained automated identification and reporting of PostgreSQL bugs to a self-hosted instance of Bugzilla for Common Criteria compliance.

    • Designed and developed Ansible playbooks to automate the deployment of applications.

    • Automated the deployment, maintenance, and auditing of both cloud and on-prem infrastructure by managing Terraform states.

    • Wrote automated test scripts in Python using Selenium to run through systems operability verification tests (SOVT).

    • Develop and maintain containers for SOVT testing for all versions of Ubuntu and Debian dating from Ubuntu 16 and Debian Jessie, as well as RHEL-based enterprise Linux distributions going back to version 7.

    • Implemented continuous integration and deployment practices to enhance reliability

    • Monitored and maintained infrastructure hosted on-premises and in the cloud (AWS, GCP, OpenShift), triaging and performing break-fix as necessary.

    • Ensured availability of company resources by participating in on-call rotation.

  • Software Test Engineer, Crunchy Data Solutions

    Nov, 2020 - Feb, 20221 year 3 months

    My primary focus on this team was development of test processes for evolving Crunchy MLS product.

    • Worked on a developmental project to add SELinux categorization to PostgreSQL.

    • Developed github actions and supporting container for testing for PGAudit/SetUser(https://github.com/pgaudit/set_user) postgresql extension.

    • Involved in all phases of software development lifecycle (SDLC) to ensure that known regressions are avoided and requirements met to streamline the later testing phases.

    • Collaborated with developers to ensure software functionality aligned with requirements and to determine the root cause of issues and provided code fixes as pull requests.

    • Design test plan and test matrices for software components and overall system.

    • Utilized automation tools and scripting languages such as Selenium, Python, SoapUI to carry out tests and improve overall efficiency.

    • Developed and deployed mock infrastructure for supporting software development and testing.

    • Conducted Static Analysis (SAST) and Dynamic (Black, Grey and Whitebox) Analysis (DAST) of MLS product SELinux policy to ensure coverage and process constraint matched stated requirements and goals. Provided policy fixes as pull requests.

  • Security Engineer, Owl Cyber Defense / Tresys Technology

    Nov, 2016 - Nov, 20204 years

    I joined Tresys (later Owl) to leverage my Linux expertise and be trained on SELinux policy development by the industry leaders in the technology. As a SELinux policy developer my knowledge and understanding of Linux security best practices was expanded drastically. I transitioned into a device analysis role towards the end of my tenure.

    • Penetration testing and security analysis of stand-alone and connected systems.

    • SELinux policy development for custom operating systems built on MFoCS / MFoCS II platform.

    • Blackbox security analysis customer supplied devices.

    • Investigate and perform analysis of browser plugin-based vulnerabilities.

    • Network Traffic analysis with a focus on device detection and fingerprinting.

    • Management of a secure lab environment, including backup and inventory management.

    • SELinux development for a bidirectional, multistage CDS platform.

    • Develop secure implementation for large file transmission using XD Bridge.

    • Aid customers in secure development and design of CDS platforms including SELinux policy development, debugging, systems integration and implementation.

    • Designed and implemented SELinux policy distribution for Enterprise Systems.

    • Developed SELinux policy for Linux Containers (LXC) based platforms.

    • Designed secure data transfer solution for high performance computing environment.

    • Manual and automated testing of several CDS for XD Bridge, XD Guardian, and XD Air.

    • Created and executed test cases based on product requirements and design.

    • Researched and implemented test configuration to verify new filters.

    • Investigated and troubleshot functionalities and testing environment for feature verification.

    • Documented and tracked issues identified in testing.

  • Systems Administrator, Oceaneering

    May, 2014 - Sep, 20162 years 4 months

    I was part of an international team that provided support for company hardware assets. My primary focus on the team was as a Linux subject matter expert.

    • Oversaw and managed secure configuration and lifecycles of global Linux servers.

    • Served as subject matter expert and point of contact for all enterprise Linux servers.

    • Provided incident response services for enterprise datacenters and physical hardware issues.

    • Facilitated enterprise recovery capabilities through management of backup infrastructure, including Symantec BackupEXEC and HP LiveVault systems.

    • Built access controls for systems serving ITAR sensitive data.

  • I/T Specialist, Oceaneering

    Oct, 2012 - May, 20141 year 7 months

    Provided in-house technical support for ITAR constrained business units.

    • Managed access permissions and data for ITAR sensitive assets in Novell NetWare Environment.

    • Recognized for achieving highest customer service satisfaction rating in the company.

    • Developed new process for deployment of remote location infrastructure.

    • Supported merging of global enterprise networks of Oceaneering and acquired Frog AGV systems (Utrecht, NL).

    • Plan and purchase computer equipment in coordination with business units

    • Facilitated availability of enterprise systems by providing Tier 1-3 product support for enterprise workstations.

  • Senior Technical Advisor, Staples

    Nov, 2010 - Oct, 20121 year 11 months

    My primary task was to manage a team of technicians providing consumer and business technical support.

    • Managed PII and asset security for customer devices.

    • Performed forensics and data recovery for customer devices.

    • Served as anti-malware specialist for Technician Team.

    • Lead a team of technicians to solve a wide variety of issues.

    • Streamlined and implemented processes to increase efficiency and quality of service.

    • Improved team customer service and satisfaction ratings by identifying and leveraging teachable moments and lessons learned.

    • Delivered week over week budget goals.

    • Coordinated and delivered business to business sales with Staples Business Advisor staff.

Skills

Skills

  • DevSecOps

    rpmbuild / SPEC

    SELinux

    Ansible

    Terraform

    HCL

    Bash

    Python

    Docker/Podman

    Gitlab Pipelines

    GitHub Actions

    Jenkins

    Selenium

    pytest

  • System Engineering

    Linux

    Terraform

    GitLab CI/CD

    OpenShift

    ESXI/VCenter

    RedFin

    Ansible

    Hashi Vault

    HCL

    Packer

  • System Administration

    Linux

    GitHub

    GitLab

    OpenShift

    GCP

    AWS

    Nagios

    Icinga

    Prometheus

    CloudFlare

    FreeIPA

    HubSpot

    AWX

Certificates

Certificates

  • Linux+, CompTIA

    Issued on:

  • Sec+, CompTIA

    Issued on: