About
Hi, I'm David.
I'm a Lead Platform and DevSecOps Engineer focused on modernizing CI/CD pipelines and scaling cloud infrastructure for regulated, high-stakes environments. My recent work centers on migrating legacy stateful systems to modern Kubernetes microservices and building heavy automation with Python and enterprise Terraform. I use AI engineering co-pilots to cut manual toil and accelerate deployment cycles for my teams.
240+
Repositories managed
100+
Kubernetes namespaces
383+
Production deployments
Skills
Cloud & Infrastructure
AWS (EC2, EKS, IAM, Auto Scaling, Parameter Store, CloudWatch, S3, Lambda, VPC), Azure DevOps
Container & Orchestration
Kubernetes (EKS, RBAC), Docker, Helm, Rancher
Infrastructure as Code
Terraform, Ansible, Puppet, Packer
CI/CD & Automation
Harness, Jenkins, GitHub, Bitbucket, TeamCity, Octopus Deploy, Git, Artifactory, Maven
API & Traffic
Kong API Gateway, REST API integration, Postman, SoapUI, load balancer management
Security & Compliance
HashiCorp Vault, Checkmarx SAST, SonarQube, JKS, SOX / PCI DSS compliance, Wazuh SIEM
Monitoring
New Relic, CloudWatch
Languages & Scripting
Python, Bash, PowerShell, C#, ASP.NET, ASP.NET Core, Java, JavaScript, TypeScript, YAML
Platforms
Linux (AlmaLinux OS migrations), Windows Server, macOS, IIS, WebLogic, bare metal and virtualized infrastructure
Project Management & Documentation
Jira, Confluence, Azure Boards
Experience
- Owned platform engineering across two teams simultaneously, provisioning and maintaining infrastructure across 240+ repositories and 100+ Kubernetes namespaces in a Fortune 500 financial services environment.
- Migrated 34 repositories from Bitbucket onto the organization’s established Harness CI/CD pipeline template, configuring CODEOWNERS and input sets for each one and confirming every pipeline ran successfully before cutover.
- Owned release management end-to-end for 10 Sontiq applications, orchestrating 383 Blue/Green production cutovers through Azure DevOps and AWS Auto Scaling Groups for zero-downtime deployments.
- Managed the technical integration of Sontiq’s legacy infrastructure into the TransUnion enterprise ecosystem following the acquisition, modernizing legacy AWS and IIS configurations and rebuilding production environments for internal administration tools.
- Coordinated 98 PostgreSQL schema migrations using the expand-and-contract pattern across application and database deployment teams for zero-downtime releases, executing the scripts directly against production and staging databases and debugging any query that came back incorrect.
- Owned a biweekly patching cycle, building Python automation to handle Git operations and update JKS truststore certificates and JDK packages across foundational base image repositories, completing 72 patching cycles and cutting cycle time from weeks to hours.
- Brought Zulu OpenJDK 17 and 27 online across six layered base image repositories underneath a large Java application, copying and configuring each repository’s existing file structure and debugging the issues that surfaced within a normal two-week patching cycle.
- Deployed the AlmaLinux servers behind an enterprise-wide operating system migration off legacy bare metal and virtualized infrastructure.
- Diagnosed a Terraform-provisioned server that came up completely empty, tracing the failure to two distinct AMI resolution issues across Linux and Windows and correcting both to resolve the organization’s golden AMI.
- Found a shared certificate directory owned by root while application containers ran under a restricted service account, causing silent TLS failures with no errors in application logs, then corrected the base image ownership and a consuming application’s configuration to resolve it.
- Owned PR approvals as the primary gatekeeper for a partner engineering team in India, enforcing SonarQube and Checkmarx SAST quality gates that blocked deployments carrying Critical, High, or Medium vulnerabilities.
- Deployed 272 Kong API Gateways across AWS environments to route microservice traffic, managing load balancers and Auto Scaling Groups to keep services available and resilient.
- Served as the primary incident responder for 300+ major production incidents, decoding Java stack traces and JVM failures alongside New Relic and CloudWatch.
- Diagnosed a JKS trust store certificate issue causing silent Kubernetes deployment failures across the org, and coordinated the fix through changes to the application’s repo and its Helm chart.
- Coordinated 388 SOX compliance approvals across 1,060 Agile stories and tasks in a regulated financial services environment.
- Used an internal AI coding assistant to iteratively parse a multi-year Jira export of assigned tickets, converging on a reconciled count of 384 Change Request tickets across the full tenure.
- Coached engineering teams on CI/CD pipeline design, cloud migration, and DevOps best practices across the organization.
- Designed and delivered cloud migration training, accelerating team readiness and reducing operational risk during AWS transitions.
- Mentored engineers on Kubernetes, automation, and cloud-native operations, building internal platform capability.
- Partnered with Agile, Security, and SRE teams to redesign deployment workflows and improve cross-functional delivery.
- Built CI/CD pipelines from scratch using TeamCity and Octopus Deploy, establishing the team’s release engineering foundation.
- Automated deployment processes using PowerShell, eliminating manual steps and reducing release cycle time.
- Diagnosed and resolved application errors for ASP.NET MVC web applications, reducing downtime and improving system reliability.
Education
Bachelor of Science, Information Technology
Georgia Southern University, 2020 · Networking & Database Management
Certifications
- AWS Cloud Practitioner
- AWS Solutions Architect Professional (SAP-C02), in progress
Open to new opportunities
Lead / Senior Platform Engineer, SRE, and DevSecOps roles · Gainesville, GA · open to remote
Get in touch