Resume

I specialize in Kubernetes platform engineering, AWS, and security automation. My work is leading infrastructure transformations that make delivery faster, cut costs, and make security a default rather than an afterthought. The human side matters just as much: I coach the existing team to co-own the change so it outlasts any single engineer.

This page is a high-level portfolio. For the full story, a conversation beats a bullet list. Reach out on LinkedIn.

Experience

#

1. Velocity Global

   2025 - Present

   Senior Staff Cloud Infrastructure Engineer, Remote

   Led a company-wide shift from a Lambda-centric stack to Kubernetes, GitOps, and Infrastructure as Code. The organization had almost no container usage before this. I drove adoption by upskilling the existing infrastructure team to co-own the platform, rolled out ArgoCD and Terraform as standard practice, and stood up zero-trust network access (ZTNA) and just-in-time production access to eliminate standing privileges.
2. 1Password

   2024 - 2025

   Senior Staff Security Engineer, Vancouver, BC

   Enabled 1Password to adopt Kubernetes and containers across AWS and GCP with a secure-by-default framework. I led the migration from Lacework to Wiz for cloud security posture management, which put visibility for both clouds under one platform. I also automated continuous CIS benchmark and Terraform IaC scanning to catch weak configurations before they reached production.
3. Ticketmaster

   2016 - 2024

   Principal / Lead / Senior Systems Engineer, Remote

   Grew from deploying Ticketmaster's first production Kubernetes cluster to leading technical strategy for a fleet of 50+ clusters that ran most of the company's containerized workloads. I wrote the company's first Kubernetes controller, saved over $1M/year in licensing by moving off a commercial Kubernetes distribution, and mentored a distributed team that supported 50+ engineering teams. I also introduced Prometheus-based self-service monitoring and contributed to several open-source projects in Go.
4. Amazon Web Services

   2014 - 2016

   Systems Engineer, EC2 Networking, Seattle, WA

   On the EC2 Networking engineering org, I was the go-to VPC subject-matter expert and handled substrate-level networking escalations. I built self-service diagnostic tooling that let AWS Support run privileged networking tests via a simple API, which cut the engineering team's escalation load.
5. Oracle & earlier

   2009 - 2014

   Systems, Virtualization & Network Security roles

   Built a foundation in Unix/Linux systems, virtualization, and network security across roles at Oracle, Softtek (GE Treasury), and the Universidad de Colima: Solaris and SPARC, private-cloud automation, Juniper firewalls, and university-wide infrastructure.

Speaking

#

• AWS re:Invent 2019: How Ticketmaster Runs Kubernetes for 80% Less Without Managing VMs (Session CON308-S), co-delivered with Spot.io. Watch
• KubeCon EU 2017 (Berlin): Kubernetes Controllers: Managing Complex Software with Software, co-presented with Josh Wood of CoreOS on adopting and operating the Kubernetes operator pattern in production. Watch

What I work with

#

Kubernetes AWS / EKS Terraform ArgoCD / GitOps Helm Go Karpenter Prometheus Kubernetes Controllers Platform Engineering Cloud Security / CSPM Zero Trust / JIT Access AWS Networking Cost Optimization Technical Leadership

Get in touch

#

I’m always happy to talk cloud-native infrastructure, platform engineering, and security. The best way to reach me is on LinkedIn.