Security Automation & DevSecOps Engineer
Building the tooling that enforces security at scale — CI/CD validation pipelines, event-driven cloud automation, and telemetry-driven policy enforcement.
Quick Navigation
Core Competencies
AWS, automation, and security engineering — the technical depth behind pipelines that enforce security at scale
AWS
- Serverless: Lambda, Step Functions, SQS
- Identity: IAM permission boundaries, KMS with automated key rotation
- Networking: PrivateLink, VPC design, Route 53
- Platform: EC2/ASG/ALB, RDS, DMS, S3, Terraform
Automation & IaC
- CI/CD: GitLab CI/CD, GitHub Actions
- Scripting: Python, Bash, PowerShell, Ansible
- Integration: REST APIs (F5 XC, Dynatrace, ServiceNow)
- Architecture: Event-driven, serverless, unit testing
Security Engineering
- WAF: F5 Distributed Cloud policy design & enforcement
- Perimeter: External attack surface management, Zero Trust/ZTNA
- AppSec: SAST/SCA (Snyk, Trivy), IAM & access lifecycle
- Compliance: NIST SP 800-53, CIS, HIPAA, PCI-DSS, ITAR
Observability & Data
- Telemetry: Dynatrace Grail, CloudWatch, Datadog
- Databases: Oracle DBA, RAC, GoldenGate, PostgreSQL, MySQL
- Experience: Performance tuning, high-availability architecture
Professional Skills
Non-technical skills that shape how I work
Collaboration
Cross-functional teamwork, stakeholder engagement, and building consensus across technical and business teams.
Mentorship
Knowledge sharing, team development, and guiding junior professionals through complex technical challenges.
Communication
Technical writing, presentation skills, and translating complex concepts for diverse audiences.
Documentation
Process documentation, technical specifications, and maintaining comprehensive knowledge bases.
Multitasking
Managing multiple projects simultaneously while maintaining quality and meeting deadlines.
Process Management
Agile methodologies, ITIL practices, and implementing structured change management processes.
Toolkit
Technologies I work with daily
Professional Timeline
My journey in technology and security
Senior Security Engineer
EchoStar / Dish Network | Denver, CO
AWS Lambda
Step Functions
SQS
GitLab CI/CD
Python
Terraform
IAM
KMS
F5 Distributed Cloud
Dynatrace
ServiceNow
- Architected an event-driven firewall change automation platform on AWS Lambda, Step Functions, and SQS, replacing a 5-day manual triage and approval process with sub-15-minute automated execution — earning VP-level recognition across InfoSec, IT Ops, and Security Architecture.
- Built a GitLab CI validation pipeline that reviews every APIGEE gateway merge request across three repositories — linting nginx and JSON configs, enforcing a 19-field security questionnaire, and blocking merges on hard failures. Covered by 146 unit tests; the checks caught a live credential-leakage pattern and a whitespace defect that had caused a production deployment failure.
- Modernized a 2022 standalone Java validation web app into a CI-native Python tool requiring no separate infrastructure, integrating the ServiceNow REST API for support-group validation and running post-merge scan assignment and deployment notifications as pipeline stages.
- Built the perimeter security KPI pipeline: monthly automated collection of five posture metrics — WAF coverage, allowed-URL policy, GEO exposure, PCI Client-Side Defense coverage, and external attack surface — across ~317 F5 Distributed Cloud load balancers in 30 namespaces, rendered as an executive dashboard with trend lines.
- Designed an evidence-based WAF enforcement workflow that analyzes 30 days of Dynatrace security event logs per load balancer to produce SAFE / REVIEW / NOT_READY promotion verdicts before moving policies from alert-only to blocking, with automated post-change validation.
- Led response on a 13-hour production outage caused by a vendor F5 patch that silently tripped header-count limits — stayed on the F5 hypothesis through a multi-vendor bridge, drove the vendor to confirm and ship a fix, then led the VP-level retrospective and rewrote change procedures to prevent recurrence.
- Consolidated 17 ad-hoc scripts accumulated over 18 months into 7 purpose-built tools on a shared client layer. Every mutating operation defaults to dry-run, requires an explicit apply flag, and gates production behind a second flag; wrapped the toolchain in a Flask dashboard for teammates without local Python environments.
- Enforced least-privilege IAM boundaries, KMS encryption with automated key rotation, and private network topologies (PrivateLink, private SQS) across all automation workflows, maintaining zero public internet exposure.
Consulting & Project Engagements
Engagements across MSP and end-client environments, each scoped to a specific remediation or modernization effort.
Systems Engineer
RBS IT Solutions | Wichita, KS
MSP Management
PowerShell
Python
ConnectWise RMM
Proofpoint
Microsoft Purview
Huntress
SentinelOne
Acronis
- Managed and secured infrastructures for 75+ MSP clients (3,000+ endpoints) ensuring reliability, compliance, and business continuity.
- Automated hardware and security audits using PowerShell and Python scripts to identify vulnerabilities and improve lifecycle management, proactively eliminating 600+ deprecated devices from our attack surface.
- Led incident response and post-incident analysis using ConnectWise RMM, Proofpoint, and Microsoft Purview.
- Standardized backup, monitoring, and endpoint security with Huntress, SentinelOne, and Acronis enterprise solutions.
Systems Engineer
Leading Edge Technology Partners | Hutchinson, KS
Entra ID
SSO
Veeam
Synology
Hyper-V
VMware
- Implemented secure identity management and SSO using Entra ID across hybrid client infrastructures.
- Enhanced DR operations using Veeam and Synology solutions with tested recovery playbooks and automated reporting, reducing recovery time by 30%.
- Supported deployment and segmentation of virtualized environments using Hyper-V and VMware to strengthen system isolation.
IT Support Manager
Wichita Tech Services | Wichita, KS
NIST
CIS
HIPAA
ITAR
VMware
SonicWall
VeloCloud SD-WAN
RMM
Proofpoint
- Directed security and compliance programs for 25+ managed clients, including NIST/CIS auditing and HIPAA/ITAR implementation for over 1500 devices.
- Architected multi-tenant, high-availability environments using VMware, SonicWall, and VeloCloud SD-WAN solutions.
- Developed automated monitoring strategies integrating RMM tools and Proofpoint for proactive threat detection.
Infrastructure Administrator
Village Travel | Wichita, KS
Jira
NIST
CIS Controls
DR Policies
- Deployed Jira for incident tracking and asset management for 500+ assets, improving response time and audit visibility.
- Performed full NIST-based infrastructure audits to remediate security gaps and optimize resource utilization.
- Developed and enforced formalized DR policies aligned with CIS controls to strengthen resilience.
Database Administrator
Flint Hills Resources | Wichita, KS
Bash
PowerShell
SQL
AWS
RHEL
Neo4j
- Built automation for database monitoring and compliance reporting using Bash, PowerShell, and SQL.
- Consolidated servers into a multitenant architecture, reducing operational risk and attack surface by 10%.
- Migrated legacy databases to AWS-managed infrastructure to increase scalability and reduced licensing costs by $200k/year.
- Engineered highly available infrastructure by deploying and hardening Red Hat Linux (RHEL) servers on AWS to specifically support and host Neo4j databases.
Database Administrator
TDS Telecommunications | Remote
Oracle
SQL Server
GoldenGate
Oracle RAC
Python
Bash
- Led the upgrade of 400+ Oracle databases from 12c→19c, integrating encryption, audit logging, and patch automation.
- Maintained 400+ SQL/Oracle systems using GoldenGate replication and Oracle RAC to ensure data integrity and availability.
- Developed Python and Bash scripts to automate refresh processes, eliminating 10+ hours of manual work weekly.
Network Engineer Intern
TDS Telecommunications | Bend, OR
Python
R
Data Mining
Visualization
PNM
- Developed a regression model using Python to analyze PNM data and network efficiency to improve technician deployment strategies.
- Performed data mining and visualization in Python and R to identify access point inefficiencies and enhance user experience.
Technical Support Engineer
Sunriver Computer Services | Sunriver, OR
Network Setup
Firewall Administration
POS Technology
PCI DSS
Windows
- Provided technical support for 15–20 business clients including network setup, firewall administration, and software maintenance.
- Led the end-to-end overhaul of outdated POS technology, successfully transitioning to new systems that met all required PCI DSS regulatory mandates.
- Configured and maintained multi-site Windows environments with consistent uptime and security baselines.
Education & Certifications
Academic foundation and professional credentials
Bachelor of Science in Computer Science
Western Washington University
Jan 2014 - Jun 2017
Leadership & Activities:
- • Group Leader: Creators and Innovators Club for Girls (2015-2017) - Volunteer mentorship program focused on robotics and engineering for middle school girls, including Little Bits, Lego NXT Mindstorms, and Arduino programming.
- • Officer: Association for Women in Computing (2014-2017) - Coordinated outreach opportunities to promote diversity and empower women in Computer Science.
- • Scholarship Recipient: Computer Science and Mathematics Scholars Program (2014-2017) - High achieving women pursuing technology degrees.
Professional Certifications
Security & Cloud Focus
Earned credentials
Current:
CISSP (Certified Information Systems Security Professional)
Obtained November 2025
Technical Skills Validated:
AWS Cloud
Security Frameworks
Automation
DevSecOps
Compliance