Core Infrastructure and Automation Engineer
Meta via TEK Systems - Fremont, CA
April 2022 - December 2023
In support of the Global Security Systems & Technology department, our team creates, manages, and automates Meta’s infrastructure for continuous integration and development of physical security infrastructure globally. Point of escalation for a dozen vital security services, the Technical Operations Center, and Global Security Operations Center
-
GLB’s, ACLs, SSLs, Database Administration, DaaS, DNS and Disaster Recovery
(both manually and through automation with PowerShell & Python) -
Infrastructure as Code with Terraform
-
Version Control through Git & Mercurial
-
Configuration and troubleshooting of Cisco and Juniper Devices
-
Administration of infrastructure to employ:
-
Physical Access Control Systems, Biometric Systems, Video Surveillance, Intercom Systems, IP Cameras, License Plate Recognition Cameras, and centralized monitoring
-
Assistant Data Chief, IT Operations Mid-level Manager
United States Marine Corps Reserve, 23D Marine Regiment San Bruno, CA —
Mar 2022 - October 2022
Above expectations of current military grade - lead and mentored team of 27 networkers, system administrators, and customer support technicians in the deployment of ad hoc infrastructure for military operations
Network Engineer & Low-Level Network Operations Manager
United States Marine Corps - Fort Pickett, Virginia (Full-Time)
Dec 2021 - Mar 2022
Navy and Marine Corps Achievement Medal - Professional achievement for leading a team of 18 Marines in the installation, maintenance, and sustainment of the IT and network infrastructure for 500 users used to process 10,000 Afghan refugees into the United States. Created and instructed over 40 hours of training to develop junior enlisted in their occupational specialties.
-
Satellite Communications – Starlink
-
Cisco network devices
Advanced Repair Agent
Geek Squad - Redwood City, CA (Full-Time)
August 2021 - Mar 2022
Provides a customer service experience to translate the intimidating world of technology to end users in a welcoming and informative environment.
-
Repairs phones, tablets, computers, TV, home theater systems, video game systems, smart home devices, speakers, cameras, and any other personal devices customers need to be serviced
-
Capable of working on all operating systems including OSX, Windows XP to Windows 11, Linux clients, Chrome OS and Android OS.
-
Specialized Apple and Samsung device repair. Multitask repairing 5 to 9 devices at any given time which can include software, hardware, malware & virus removal with proper documentation to pass unfinished work to other team members.
-
Problem-solving is dependent on troubleshooting steps, Google, and forums created through the Geek Squad community.
System Administrator
United States Marine Corps - Japan (Full-Time)
June 2019 - July 2020
Deployed full stack infrastructure builds in a variety of extreme climates (-10f to 125f)
-
Configuration of Cisco switching and routing, telephony, DHCP, TCP/IP, fiber and ethernet cabling, printer troubleshooting, help desk and electronics repair of client, servers, UPS, and networking equipment.
-
Experience with active directory administration, domain management, DNS, iDRAC, ESXi, VMware, Microsoft Server 2012/2016, VPN, Wireshark, SharePoint, & implementation of security technical guides
-
Tunneling, hardware encryption technologies
Asset Protection Specialist
Target - Sacramento, CA (Part-Time)
October 2018 - January 2019
Ensured the safety, physical security, and experience of all Target guests through the utilization of visual, video, and intercom systems.
Day Porter, Janitor, Security Gaurd
Hines Building Maintenance - San Francisco, CA (Full-Time)
Febraury 2018 - August 2019
Fulfilled ever-changing roles as a day porter, janitor, and security guard to maintain a variety of facilities. Primarily made responsible for the maintenance and upkeep of private schools in San Francisco.
RESUME
My career so far:
Senior Cybersecurity Engineer
Department of State via OnyxPoint/Improvix
Washington, DC • December 2023 – PRESENT
Lead security engineer for Department of State developer tools and internal AI applications across FedRAMPed AWS, GCP, and Azure commercial cloud environments – specifically self hosted GitLab, Jira, Confluence, and custom AI applications.
-
Achieved and maintained ATOs for self hosted GitLab, Jira, Confluence, and internal AI applications; continuous monitoring ensures uninterrupted Federal NIST 800-53 Rev 5 compliance for platforms serving over 160,000 personnel with global diplomatic reach.
-
Secured custom in house AI applications on AWS and guiding secure AI adoption.
-
Built continuous scanning pipelines, scaling for all projects using GitLab, reducing time to mitigation from days to minutes: demonstrated during the NPM Shai-Hulud attack.
-
Drove end to end security modernization across the full tech stack – re-architecting cloud services as Terraform IaC, migrating systems to EKS, and embedding DevSecOps controls at every layer of the development lifecycle.
-
Onboarded new teams by evaluating their security maturity, identifying gaps and collaborating directly with the engineers to mature their DevSecOps practices.
Core Infrastructure and Automation Engineer
Meta via TEK Systems - Fremont, CA
April 2022 - December 2023
In support of the Global Security Systems & Technology department, I created, managed, and automated Meta’s infrastructure for continuous integration and development of physical security infrastructure globally. I was the final point of escalation for a dozen vital security services, the Technical Operations Center, and Global Security Operations Center.
-
Infrastructure as Code with Terraform, automation and configuration management via Chef.
-
CI/CD and version control through Meta’s internal DevOps services: Sandcastle, Converter & Mercurial.
-
GLB’s, ACLs, SSLs, Database Administration, DaaS, DNS and Disaster Recovery, both manually and through automation with PowerShell & Python.
-
Configuration and troubleshooting of Cisco and Juniper Devices.
-
Administration of infrastructure to employ:
-
Physical Access Control Systems, Biometric Systems, Video Surveillance, Intercom Systems, IP Cameras, License Plate Recognition Cameras, and centralized monitoring.
-
Network Administrator
United States Marine Corps Forces Europe & Africa VIP Support Team Stuttgart, Germany —
October 2022 - August 2023
I supported the United States Marine Corps, US Europe Command, US Africa Command, and NATO forces operating in Europe and Africa, as our team specialized in supporting VIPs and deployed forces. I also received the Navy and Marine Corps Achievement Medal for aiding in a Turkey Humanitarian Mission.
CentOS PowerShell Bash Cisco Networking Vizio Process Optimization
-
MARFOREUR/AF Executive Staff Support – liaise with Defense Information Systems Agency and US EUCOM mobile and residence emplaced classified IT support systems, i.e., NSA’s Commercial Solutions for Classified Networks (CSFC) & Video Teleconference solutions.
-
Mobile Device Management – configured mobile phones, tablets & laptops with Microsoft Intune + CSFC
-
Network Services – Cisco & Juniper networking with hardware encryption devices, i.e. TACLANE-Micro KG-175D
Assistant Data Chief, IT Operations Mid-level Manager
United States Marine Corps Reserve, 23D Marine Regiment San Bruno, CA —
Mar 2022 - October 2022
Led and mentored 27 network engineers, system administrators, and technicians in deploying ad-hoc edge infrastructure across distributed operational environments, successfully transitioning them into civilian tech roles.
Network Engineer & Low-Level Network Operations Manager
Operation Allies Welcome, 23rd Marine Regiment Headquarters Company Blackstone, VA —
Dec 2021 - Mar 2022
Led 18 Marines in deploying and sustaining IT infrastructure supporting 500+ users in the processing of 10,000 Afghan refugees during Operation Allies Welcome, one of the largest domestic humanitarian operations in recent Marine Corps history.
-
Network Engineering – engineered a load balanced network topology across Starlink + Fiber using Cisco devices to sustain continuous uptime for five DoD & federal agencies and their humanitarian aid partners.
-
Wireless Network Management – resolved WiFi collision issues in the 2.4GHz spectrum by strategically mapping floor plans with RF detection tools and transitioning access points to the 5GHz band, optimizing network performance and enhancing user connectivity.
-
Leadership – developed and instructed 40+ hours of technical training to advance junior Marines in their occupational specialties, preparing them for successful careers in tech. I received the Navy and Marine Corps Achievement Medal for this effort.
Advanced Repair Agent
Geek Squad - Redwood City, CA (Full-Time)
August 2021 - Mar 2022
Provides a customer service experience to translate the intimidating world of technology to end users in a welcoming and informative environment.
-
Repairs phones, tablets, computers, TV, home theater systems, video game systems, smart home devices, speakers, cameras, and any other personal devices customers need to be serviced
-
Capable of working on all operating systems including OSX, Windows XP to Windows 11, Linux clients, Chrome OS and Android OS.
-
Specialized Apple and Samsung device repair. Multitask repairing 5 to 9 devices at any given time which can include software, hardware, malware & virus removal with proper documentation to pass unfinished work to other team members.
-
Problem-solving is dependent on troubleshooting steps, Google, and forums created through the Geek Squad community.
System Administrator
United States Marine Corps - Japan (Full-Time)
June 2019 - July 2020
Deployed with Unit Deployment Program 20-1, 1st Battalion 25th Marines, to ensure regional readiness in the South Pacific.
-
Help Desk – electronics repair (client systems, UPS), telephony support, end-user hardware and printer support
-
Server Management – Windows Server 2012/2016 administration, Active Directory administration & domain management, DNS, VMware / ESXi, iDRAC (remote server management), SharePoint, Security Technical Implementation Guides (STIGs)
-
Networking – Cisco switching & routing, DHCP / TCP-IP, Fiber and Ethernet cabling, VPN, Wireshark (packet analysis), Black Core Routing, Tunneling, hardware encryption technologies
Asset Protection Specialist
Target - Sacramento, CA (Part-Time)
October 2018 - January 2019
Ensured the safety, physical security, and experience of all Target guests through the utilization of visual, video, and intercom systems.
Day Porter, Janitor, Security Gaurd
Hines Building Maintenance - San Francisco, CA (Full-Time)
Febraury 2018 - August 2019
Fulfilled ever-changing roles as a day porter, janitor, and security guard to maintain a variety of facilities. Primarily made responsible for the maintenance and upkeep of private schools in San Francisco.