Summary

I design and run production systems on AWS, serverless first, and I am just as at home in the network beneath them: VPC architecture, site to site VPN, routing, and firewall policy. A growing share of my recent work is containerized, packaging services with Docker and orchestrating them on Kubernetes for freelance clients. Backing that is a B.S. in Cloud & Network Engineering and ten certifications, among them the AWS Solutions Architect and CloudOps Associate credentials with CompTIA Network+ and Security+. What I enjoy is owning a system end to end and keeping it secure and cheap to run, with enough logging that I can tell what it is doing when something breaks.

Certifications

AWS Certified Solutions Architect – Associate·AWS Certified CloudOps Engineer – Associate·AWS Certified Cloud Practitioner·HashiCorp Terraform Associate·CompTIA A+·Network+·Security+·Cloud+·LPI Linux Essentials·ITIL Foundation

Technical Skills

AWS

Lambda·API Gateway·EC2·S3·DynamoDB·CloudFront·Cognito·IAM·VPC·Site-to-Site VPN·CloudWatch·WAF·ECS/Fargate·AppSync·Bedrock·Rekognition·IoT Core·SES·EventBridge·Secrets Manager

Networking

Hybrid cloud architecture·route-based IPsec Site-to-Site VPN (IKEv2, NAT-Traversal)·VLANs / 802.1Q trunking·zone-based firewalls·NAT / DNAT·DHCP·routing·subnetting

Containers

Docker·Kubernetes·container orchestration·containerized microservices

IaC & CI/CD

AWS CDK (C#, TypeScript)·Terraform·GitHub Actions·OIDC federation·AWS Amplify

Languages

C#/.NET·TypeScript·Python·C++·PowerShell·SQL

Tools

Linux·Windows Server / Active Directory·VMware / Hyper-V·GNS3·VyOS·Open vSwitch·Wireshark·Git / GitHub·SolidWorks PDM (administration and add-ins)

Experience

• Design, build, and operate production AWS systems for four clients across manufacturing, distribution, and professional services, owning each engagement from architecture through deployment and ongoing support.
• Built ERP integration and automation platforms on Fulcrum Pro: webhook ingestion through API Gateway and Lambda into DynamoDB, EventBridge-scheduled reconciliation jobs, and automated SES notifications routed to client sales teams.
• Designed an asynchronous processing pipeline pairing a thin Lambda API with an ECS Fargate worker, moving long-running cost-reconciliation work off Lambda once it outgrew the execution model.
• Containerize client services with Docker and orchestrate them on Kubernetes; provision every engagement as code with CDK and Terraform in isolated per-client AWS accounts, deployed through GitHub Actions with keyless OIDC federation.

• Designed and deployed an event-driven IoT pipeline (Monday.com webhook → AWS Lambda → DynamoDB → AWS IoT Core → ESP32 devices) pushing real-time job alerts to physical indicators at the machines, surfacing status for operators away from their screens.
• Led a MySQL → DynamoDB migration with a DynamoDB Streams rollup pipeline and EventBridge-scheduled sync for fast analytics reads; removed an unneeded NAT Gateway (~$32/mo) by relocating the on-prem-bound job, after weighing the networking and maintenance trade-offs.
• Built a real-time WebSocket dashboard (API Gateway WebSockets + DynamoDB) centralizing Monday.com time-tracking into one live view for five managers, replacing manual metric-pulling.
• Engineered a SolidWorks file-viewing pipeline (Windows conversion worker + AWS Lambda + CDK, multi-table DynamoDB) powering a browser-based 3D model review app that needs no desktop CAD license.
• Sole architect and owner of the company’s AWS environment, provisioning and operating the entire footprint as code with CDK and answering for its cost, security, and reliability.

Projects

Education

B.S. Cloud & Network Engineering (AWS track) — Western Governors University · coursework complete; conferring 2026