Senior Infrastructure DevOps Engineer at Freddie Mac

Led cloud automation and platform engineering initiatives to modernize infrastructure and CI/CD pipelines for secure, compliant, and scalable application delivery across regulated enterprise environments. Designed and deployed a multi-account AWS Landing Zone with guardrails, tagging, and budgets; engineered a hub-and-spoke network using Transit Gateway, PrivateLink, and VPC Lattice to extend hybrid DNS and on-prem links for secure communication. Automated provisioning of EC2, RDS, S3, and Route 53 with modular Terraform, integrating tagging, encryption, autoscaling, and account baselines for governed multi-account growth. Developed Ansible roles to provision hardened Linux environments, converge middleware, and manage patch lifecycles via SSM Agent, with remediation tracking in ServiceNow. Migrated legacy Java EE apps to containerized Spring Boot on EKS, externalizing configs and integrating with RDS/Aurora PostgreSQL for hardened baselines. Implemented DynamoDB with GSIs and Kinesis

Senior Cloud DevOps Engineer at Capital One

Drove large-scale modernization by establishing a secure AWS Landing Zone Accelerator with Organizations and delegated admin roles, ensuring consistent account provisioning, guardrails, and centralized logging. Built modular AWS infrastructure with Terraform/CloudFormation, integrating with GitHub and Jenkins for reproducible, policy-driven deployments. Created Boto3 automation modules to manage EC2 snapshot lifecycles, S3 retention, and Lambda/Step Functions via EventBridge, embedding compliance checks into CI/CD pipelines. Standardized configuration management with Puppet Enterprise, enforcing baseline hardening across Linux/Windows nodes and surfacing policy status via dashboards. Orchestrated end-to-end provisioning by binding Terraform with Puppet-agent bootstrapping via user-data and SSM for automatic enrollment and validation. Configured ASG, ALB/NLB, CloudFront, SQS/SNS, CloudWatch, and Kinesis for high-throughput workloads with centralized visibility via CloudTrail Lake and Op

DevOps Engineer at CarMax

Automated cloud infrastructure and CI/CD pipelines for web and microservice applications, ensuring secure, scalable, and resilient deployments through configuration management and container orchestration. Built Azure AKS clusters with Terraform, implementing node pool isolation, Network Policies, and PodSecurityContext; integrated with Azure DevOps Pipelines for zero-downtime releases via Helm/Kustomize. Automated VM provisioning, image updates, and patch orchestration using Terraform and Azure Automation Accounts, incorporating tagging and managed identities. Developed Chef Automate/Infra pipelines to standardize configurations across Linux/Windows and achieve immutable-node convergence, complemented by Chef InSpec for policy compliance. Implemented Puppet Enterprise integration for unified dashboards and policy enforcement, and automated enrollment via Terraform user-data/SSM bootstrap. Configured monitoring with Azure Monitor, Application Insights, and Log Analytics; built policy en

DevOps/Build & Release Engineer at IQVIA

Supported end-to-end DevOps and Build & Release engineering for global life sciences platforms, delivering automated cloud deployments and CI/CD pipelines in AWS and Linux environments. Built and maintained CloudFormation/Terraform-based infrastructure; integrated with Jenkins and Git for automated builds, tests, and deployments. Developed ELK stack-based centralized logging for security auditing and production visibility. Tuned Snowflake and Talend ETL workflows, optimizing data processing performance and reliability. Implemented patch management, monitoring, and issue resolution processes; enhanced Jira/Confluence-based governance for release management. Delivered Looker dashboards and release metrics to leadership, enabling traceability and regulatory compliance across environments.