Data-driven, results-focused Site Reliability Engineer with 8+ years of experience architecting and operating secure, scalable software systems on AWS.
Experienced leading complex infrastructure and backend engineering projects in regulated industries with sensitive data, with deep expertise in reliability, performance, cloud security, and compliance (SOC 2, HIPAA, HITRUST).
6x AWS certified, including Security and both Professional certs (Solutions Architect, DevOps Engineer).
• Migrated our API from long-lived EC2 instances to immutable Docker containers deployed to ECS via GitHub Actions CI/CD, reducing scale-out and deployment times by 50% and eliminating a failure mode where unhealthy EC2 instances prevented rolling back in-place deployments.
• Reduced multiple API endpoints’ p95 response times by 80% and increased throughput by 50% without additional compute by introducing DTOs to prevent API overfetching, optimizing database queries, and smoothing traffic spikes using rate-limited client polling with randomized jitter.
• Identified and fixed multiple critical-severity vulnerabilities, and led initiatives with engineering/security leadership alignment to ensure we align to SOC 2 Type II security requirements in preparation for future HITRUST audits.
• Led self-hosted architecture and deployment for an open-source Mirth Connect application cluster, enabling external health system partnerships via EHR integrations for clinical data. Avoided $100k/yr in enterprise licensing cost by implementing alternatives to the vendor’s paid high-availability plugin.
• Led multiple outage/availability and security incidents - including drafting/releasing necessary hotfixes, root cause analysis, coordination/collaboration with external parties, documenting incident timelines, and conducting retrospectives/post-mortems.
• Led a project consolidating 7 backend, frontend, and npm package repos into a single monorepo with a trunk-based development git branching strategy. Resulted in 80% lower effort to deploy code to production, eliminated many merge conflicts, guaranteed consistent code versions promoted through environments, and eliminated repo context switching for developers during PR reviews.
• Optimized unit/integration tests to run ~80% faster (15min → 3.5min) locally and in CI via removing unnecessary integration test DB truncates and parallelizing test jobs in GitHub Actions. Implemented automation for QA-defined Playwright E2E tests on critical path user flows on each merged PR.
• Rolled out Codex and Claude with HIPAA compliance, including automated PR reviews that provided fast initial feedback on all PRs within 5 minutes, also providing references for human code reviews.
• Implemented automated tooling, scripts, and documented processes to simplify developer setup of our API, web, and DB, resulting in a <30min local environment setup time for new engineers.
• Refactored asynchronous task architecture using Terraform, SQS, ECS, and Python (Celery) resulting in 100-400% throughput increases, 50% cost reduction, and 50% lower average queue message age.
• Proactively load-tested APIs ahead of the largest product launch for the company to identify failure modes and poor-performing endpoints. Refactored endpoints and tuned infrastructure sizing/scaling to result in a 50-300% increase in throughput, which successfully supported millions of daily API requests from 200k+ users during the launch while meeting all SLOs.
• Architected and implemented a high-throughput one-time password authentication flow using Amazon Cognito Custom Authentication and AWS Lambda triggers to support 3x auth concurrency requirements ahead of a large product launch. Also implemented external SAML SSO integrations.
• Identified and eliminated $100k/year in unnecessary AWS spend through leveraging RDS Aurora Serverless V2, ECS Fargate Spot, and API scaling improvements.
• Migrated CI/CD pipelines from Travis CI to GitHub Actions, reducing build/deploy times by 50%, costs by 50%, and automating all previously manual deployments of frontend Vue.js repos.
• Implemented observability architecture via automated API integration tests, Sentry tracing, CloudWatch metrics/alarms with PagerDuty, resulting in 100% SLA compliance and lower incident MTTR.
• Led implementations for critical SOC 2 Type II, HIPAA, and HITRUST audits to enable sales partnerships/contracts with large healthcare organizations, brokers, and benefits administrators.
• Led infrastructure, security, and CI/CD initiatives for a 25-person healthtech startup, including managing one direct report and contributing to technology strategy and roadmap.
• Automated mobile app deployment pipelines using Fastlane and GitHub Actions, reducing deployment times by 50% and eliminating manual developer Xcode mobile app build processes.
• Led SSO, MFA, MDM, and EDR implementation and led a successful SOC 2 Type II external audit.
• Led end-to-end AWS migration from DigitalOcean for a telehealth startup client, ensuring SOC 2 compliance and full cutover completed within a 6-week timeframe.
• Developed AWS account automation supporting 100+ AWS accounts using AWS permissions boundaries and automated multi-account networking for a large healthcare technology client, using CloudFormation, CodePipeline, Python, and Service Catalog across 100+ AWS accounts.
• Advised a large public biotech client on IAM security, deploying Azure AD MFA with Conditional Access, and deployed automated identification/remediation of stale accounts, saving $200k/year in licensing.
• Led cloud modernization projects using Azure Automation and Office 365 security tools.
• Managed IT systems infrastructure supporting 90 employees across five locations in the US. Led multiple internal projects including PowerShell IAM automation, Exchange Online migration, and implementing SIEM dashboards.
• Automated, Cost-optimized, secure, and serverless frontend and backend AWS architecture using: CodePipeline, Lambda, S3, DynamoDB, Route53, Cognito, EventBridge, SNS
• Web application displays vehicle telemetry data (charge and odometer) using Chart.js
• Links: AWS Architecture Diagram, Location Heatmap (AWS Glue, Athena, QuickSight)
I enjoy most of my time outdoors - you can find me playing beach volleyball at Manhattan Beach on most summer days, or taking trips to new outdoors destinations and National Parks.
When indoors, I enjoy espresso, reading, cooking, and working on/reading about cars.
I enjoy conversations about technology, cars, travel, investing, books, psychology, and philosophy.