Skills

Self-Hosted DevOps Platform A home lab run like a small platform team: Proxmox, four K3s clusters (one public on DigitalOcean), Jenkins pipelines as code, Ansible, Terraform and AWS-backed secrets. Automated Multi-Site Deployment Jenkins pipelines that build Wagtail CMS sites into container images, push them to Amazon ECR and roll them out to K3s on DigitalOcean behind nginx and Let's Encrypt. Containerized Infrastructure Toolchain A dozen containerized ops toolkits, one per cluster and platform, that fetch credentials from AWS Secrets Manager at runtime, publish to ECR and plug into Jenkins. Browser-Based Remote Desktop Streaming A containerized Linux desktop streamed to the browser over WebRTC with in-band audio, built and smoke-tested by Jenkins, deployed by Ansible and published behind zero-trust access. Reusable AWS Terraform Library A library of 57 AWS Terraform modules with shared conventions and secure defaults, so a client environment is assembled from pinned, reviewed modules instead of hand-written resources. AWS Curriculum, 2026 Edition A 29-module hands-on AWS curriculum rewritten for AWS as it is in 2026, with ten new modules, per-module exam objectives and lab costs, and a linting pipeline on every pull request. Web Page Change Alerts A watcher that turns pages with no feed or API into email alerts: it reduces each page to comparable lines, diffs them against the last run and mails only real changes, sent from a DKIM-signed SES domain built with Terraform. Self-Hosted File Browser Browser-based access to a 10TB NFS estate, running on Kubernetes behind TLS with credentials in AWS Secrets Manager.

Self-Hosted DevOps Platform A home lab run like a small platform team: Proxmox, four K3s clusters (one public on DigitalOcean), Jenkins pipelines as code, Ansible, Terraform and AWS-backed secrets. Containerized Infrastructure Toolchain A dozen containerized ops toolkits, one per cluster and platform, that fetch credentials from AWS Secrets Manager at runtime, publish to ECR and plug into Jenkins. Reusable AWS Terraform Library A library of 57 AWS Terraform modules with shared conventions and secure defaults, so a client environment is assembled from pinned, reviewed modules instead of hand-written resources. AWS Curriculum, 2026 Edition A 29-module hands-on AWS curriculum rewritten for AWS as it is in 2026, with ten new modules, per-module exam objectives and lab costs, and a linting pipeline on every pull request. Web Page Change Alerts A watcher that turns pages with no feed or API into email alerts: it reduces each page to comparable lines, diffs them against the last run and mails only real changes, sent from a DKIM-signed SES domain built with Terraform. Self-Hosted File Browser Browser-based access to a 10TB NFS estate, running on Kubernetes behind TLS with credentials in AWS Secrets Manager.

Containerized Infrastructure Toolchain A dozen containerized ops toolkits, one per cluster and platform, that fetch credentials from AWS Secrets Manager at runtime, publish to ECR and plug into Jenkins. Browser-Based Remote Desktop Streaming A containerized Linux desktop streamed to the browser over WebRTC with in-band audio, built and smoke-tested by Jenkins, deployed by Ansible and published behind zero-trust access.

Self-Hosted DevOps Platform A home lab run like a small platform team: Proxmox, four K3s clusters (one public on DigitalOcean), Jenkins pipelines as code, Ansible, Terraform and AWS-backed secrets. Automated Multi-Site Deployment Jenkins pipelines that build Wagtail CMS sites into container images, push them to Amazon ECR and roll them out to K3s on DigitalOcean behind nginx and Let's Encrypt. Browser-Based Remote Desktop Streaming A containerized Linux desktop streamed to the browser over WebRTC with in-band audio, built and smoke-tested by Jenkins, deployed by Ansible and published behind zero-trust access. Reusable AWS Terraform Library A library of 57 AWS Terraform modules with shared conventions and secure defaults, so a client environment is assembled from pinned, reviewed modules instead of hand-written resources. Web Page Change Alerts A watcher that turns pages with no feed or API into email alerts: it reduces each page to comparable lines, diffs them against the last run and mails only real changes, sent from a DKIM-signed SES domain built with Terraform. Self-Hosted File Browser Browser-based access to a 10TB NFS estate, running on Kubernetes behind TLS with credentials in AWS Secrets Manager.

Site Reliability Engineer, Cornerstone OnDemand Jul 2025 - Sep 2026 Lead DevOps Engineer, Healthbucks Jan 2023 - Jul 2023

Self-Hosted DevOps Platform A home lab run like a small platform team: Proxmox, four K3s clusters (one public on DigitalOcean), Jenkins pipelines as code, Ansible, Terraform and AWS-backed secrets. Containerized Infrastructure Toolchain A dozen containerized ops toolkits, one per cluster and platform, that fetch credentials from AWS Secrets Manager at runtime, publish to ECR and plug into Jenkins.

Automated Multi-Site Deployment Jenkins pipelines that build Wagtail CMS sites into container images, push them to Amazon ECR and roll them out to K3s on DigitalOcean behind nginx and Let's Encrypt. Media Ingestion & Curation Pipeline A web form queues downloads, Jenkins runs containerized fetch-and-tag jobs with automatic retry queues, and a PostgreSQL catalog syncs curated metadata back to Plex. Automated Internet Radio Station A personal 24/7 streaming station on the home network: scheduled genre shows, text-to-speech DJs and play-history-aware playlists driven by PostgreSQL. Real-Time Telemetry Analytics Pipeline Binary UDP telemetry decoded into InfluxDB and Grafana, with an hourly Jenkins job that builds a permanent PostgreSQL record and publishes analysis to Confluence.

Self-Hosted DevOps Platform A home lab run like a small platform team: Proxmox, four K3s clusters (one public on DigitalOcean), Jenkins pipelines as code, Ansible, Terraform and AWS-backed secrets. Automated Multi-Site Deployment Jenkins pipelines that build Wagtail CMS sites into container images, push them to Amazon ECR and roll them out to K3s on DigitalOcean behind nginx and Let's Encrypt. Observability & Alerting Platform Phone-first monitoring: Prometheus and blackbox probes, Loki logging with per-host heartbeats, and Alertmanager routing Nagios-style alerts to self-hosted ntfy topics. Media Ingestion & Curation Pipeline A web form queues downloads, Jenkins runs containerized fetch-and-tag jobs with automatic retry queues, and a PostgreSQL catalog syncs curated metadata back to Plex. Automated Internet Radio Station A personal 24/7 streaming station on the home network: scheduled genre shows, text-to-speech DJs and play-history-aware playlists driven by PostgreSQL. Real-Time Telemetry Analytics Pipeline Binary UDP telemetry decoded into InfluxDB and Grafana, with an hourly Jenkins job that builds a permanent PostgreSQL record and publishes analysis to Confluence. Browser-Based Remote Desktop Streaming A containerized Linux desktop streamed to the browser over WebRTC with in-band audio, built and smoke-tested by Jenkins, deployed by Ansible and published behind zero-trust access. Web Page Change Alerts A watcher that turns pages with no feed or API into email alerts: it reduces each page to comparable lines, diffs them against the last run and mails only real changes, sent from a DKIM-signed SES domain built with Terraform. Self-Hosted File Browser Browser-based access to a 10TB NFS estate, running on Kubernetes behind TLS with credentials in AWS Secrets Manager.

Self-Hosted DevOps Platform A home lab run like a small platform team: Proxmox, four K3s clusters (one public on DigitalOcean), Jenkins pipelines as code, Ansible, Terraform and AWS-backed secrets. Observability & Alerting Platform Phone-first monitoring: Prometheus and blackbox probes, Loki logging with per-host heartbeats, and Alertmanager routing Nagios-style alerts to self-hosted ntfy topics. Automated Internet Radio Station A personal 24/7 streaming station on the home network: scheduled genre shows, text-to-speech DJs and play-history-aware playlists driven by PostgreSQL. Containerized Infrastructure Toolchain A dozen containerized ops toolkits, one per cluster and platform, that fetch credentials from AWS Secrets Manager at runtime, publish to ECR and plug into Jenkins. Browser-Based Remote Desktop Streaming A containerized Linux desktop streamed to the browser over WebRTC with in-band audio, built and smoke-tested by Jenkins, deployed by Ansible and published behind zero-trust access.

AWS Curriculum, 2026 Edition A 29-module hands-on AWS curriculum rewritten for AWS as it is in 2026, with ten new modules, per-module exam objectives and lab costs, and a linting pipeline on every pull request.

DevOps Engineer, Auris Robotics Oct 2019 - May 2020

Automated Multi-Site Deployment Jenkins pipelines that build Wagtail CMS sites into container images, push them to Amazon ECR and roll them out to K3s on DigitalOcean behind nginx and Let's Encrypt. Media Ingestion & Curation Pipeline A web form queues downloads, Jenkins runs containerized fetch-and-tag jobs with automatic retry queues, and a PostgreSQL catalog syncs curated metadata back to Plex. Containerized Infrastructure Toolchain A dozen containerized ops toolkits, one per cluster and platform, that fetch credentials from AWS Secrets Manager at runtime, publish to ECR and plug into Jenkins. Real-Time Telemetry Analytics Pipeline Binary UDP telemetry decoded into InfluxDB and Grafana, with an hourly Jenkins job that builds a permanent PostgreSQL record and publishes analysis to Confluence. Browser-Based Remote Desktop Streaming A containerized Linux desktop streamed to the browser over WebRTC with in-band audio, built and smoke-tested by Jenkins, deployed by Ansible and published behind zero-trust access. Self-Hosted File Browser Browser-based access to a 10TB NFS estate, running on Kubernetes behind TLS with credentials in AWS Secrets Manager.

Self-Hosted DevOps Platform A home lab run like a small platform team: Proxmox, four K3s clusters (one public on DigitalOcean), Jenkins pipelines as code, Ansible, Terraform and AWS-backed secrets. Automated Multi-Site Deployment Jenkins pipelines that build Wagtail CMS sites into container images, push them to Amazon ECR and roll them out to K3s on DigitalOcean behind nginx and Let's Encrypt. Observability & Alerting Platform Phone-first monitoring: Prometheus and blackbox probes, Loki logging with per-host heartbeats, and Alertmanager routing Nagios-style alerts to self-hosted ntfy topics. Containerized Infrastructure Toolchain A dozen containerized ops toolkits, one per cluster and platform, that fetch credentials from AWS Secrets Manager at runtime, publish to ECR and plug into Jenkins. Reusable AWS Terraform Library A library of 57 AWS Terraform modules with shared conventions and secure defaults, so a client environment is assembled from pinned, reviewed modules instead of hand-written resources. AWS Curriculum, 2026 Edition A 29-module hands-on AWS curriculum rewritten for AWS as it is in 2026, with ten new modules, per-module exam objectives and lab costs, and a linting pipeline on every pull request. Self-Hosted File Browser Browser-based access to a 10TB NFS estate, running on Kubernetes behind TLS with credentials in AWS Secrets Manager.

Observability & Alerting Platform Phone-first monitoring: Prometheus and blackbox probes, Loki logging with per-host heartbeats, and Alertmanager routing Nagios-style alerts to self-hosted ntfy topics.

Reusable AWS Terraform Library A library of 57 AWS Terraform modules with shared conventions and secure defaults, so a client environment is assembled from pinned, reviewed modules instead of hand-written resources. AWS Curriculum, 2026 Edition A 29-module hands-on AWS curriculum rewritten for AWS as it is in 2026, with ten new modules, per-module exam objectives and lab costs, and a linting pipeline on every pull request.

Self-Hosted DevOps Platform A home lab run like a small platform team: Proxmox, four K3s clusters (one public on DigitalOcean), Jenkins pipelines as code, Ansible, Terraform and AWS-backed secrets. Automated Multi-Site Deployment Jenkins pipelines that build Wagtail CMS sites into container images, push them to Amazon ECR and roll them out to K3s on DigitalOcean behind nginx and Let's Encrypt. Self-Hosted File Browser Browser-based access to a 10TB NFS estate, running on Kubernetes behind TLS with credentials in AWS Secrets Manager.

Site Reliability Engineer, Cornerstone OnDemand Jul 2025 - Sep 2026

Observability & Alerting Platform Phone-first monitoring: Prometheus and blackbox probes, Loki logging with per-host heartbeats, and Alertmanager routing Nagios-style alerts to self-hosted ntfy topics.

Observability & Alerting Platform Phone-first monitoring: Prometheus and blackbox probes, Loki logging with per-host heartbeats, and Alertmanager routing Nagios-style alerts to self-hosted ntfy topics. Real-Time Telemetry Analytics Pipeline Binary UDP telemetry decoded into InfluxDB and Grafana, with an hourly Jenkins job that builds a permanent PostgreSQL record and publishes analysis to Confluence.

Site Reliability Engineer, Cornerstone OnDemand Jul 2025 - Sep 2026

Reusable AWS Terraform Library A library of 57 AWS Terraform modules with shared conventions and secure defaults, so a client environment is assembled from pinned, reviewed modules instead of hand-written resources. AWS Curriculum, 2026 Edition A 29-module hands-on AWS curriculum rewritten for AWS as it is in 2026, with ten new modules, per-module exam objectives and lab costs, and a linting pipeline on every pull request.

Observability & Alerting Platform Phone-first monitoring: Prometheus and blackbox probes, Loki logging with per-host heartbeats, and Alertmanager routing Nagios-style alerts to self-hosted ntfy topics.

DevOps Engineer, Stitcher Jul 2018 - Jul 2019

Site Reliability Engineer, Cornerstone OnDemand Jul 2025 - Sep 2026

Media Ingestion & Curation Pipeline A web form queues downloads, Jenkins runs containerized fetch-and-tag jobs with automatic retry queues, and a PostgreSQL catalog syncs curated metadata back to Plex. Automated Internet Radio Station A personal 24/7 streaming station on the home network: scheduled genre shows, text-to-speech DJs and play-history-aware playlists driven by PostgreSQL. Real-Time Telemetry Analytics Pipeline Binary UDP telemetry decoded into InfluxDB and Grafana, with an hourly Jenkins job that builds a permanent PostgreSQL record and publishes analysis to Confluence. Web Page Change Alerts A watcher that turns pages with no feed or API into email alerts: it reduces each page to comparable lines, diffs them against the last run and mails only real changes, sent from a DKIM-signed SES domain built with Terraform.

Containerized Infrastructure Toolchain A dozen containerized ops toolkits, one per cluster and platform, that fetch credentials from AWS Secrets Manager at runtime, publish to ECR and plug into Jenkins.

Site Reliability Engineer, IT Renew Jul 2019 - Oct 2019

Automated Multi-Site Deployment Jenkins pipelines that build Wagtail CMS sites into container images, push them to Amazon ECR and roll them out to K3s on DigitalOcean behind nginx and Let's Encrypt.

Reusable AWS Terraform Library A library of 57 AWS Terraform modules with shared conventions and secure defaults, so a client environment is assembled from pinned, reviewed modules instead of hand-written resources. AWS Curriculum, 2026 Edition A 29-module hands-on AWS curriculum rewritten for AWS as it is in 2026, with ten new modules, per-module exam objectives and lab costs, and a linting pipeline on every pull request. Web Page Change Alerts A watcher that turns pages with no feed or API into email alerts: it reduces each page to comparable lines, diffs them against the last run and mails only real changes, sent from a DKIM-signed SES domain built with Terraform.

Containerized Infrastructure Toolchain A dozen containerized ops toolkits, one per cluster and platform, that fetch credentials from AWS Secrets Manager at runtime, publish to ECR and plug into Jenkins. Reusable AWS Terraform Library A library of 57 AWS Terraform modules with shared conventions and secure defaults, so a client environment is assembled from pinned, reviewed modules instead of hand-written resources. Self-Hosted File Browser Browser-based access to a 10TB NFS estate, running on Kubernetes behind TLS with credentials in AWS Secrets Manager.

Lead DevOps Engineer, Healthbucks Jan 2023 - Jul 2023