About
Platform Engineering Leader · DevSecOps · Cloud · AI
I’m a platform and infrastructure engineer with 12+ years of experience building the systems that ship software at scale. I currently work at Palo Alto Networks as Manager of DevOps Engineering, leading a team of 8 that owns the security toolchain, policy enforcement, and org-wide security posture strategy. Before moving into management, I architected an enterprise DevSecOps platform there supporting 2,000+ developers. I spent the years before that at CyberArk, most recently as Staff DevOps Engineer, leading teams and driving platform modernization across cloud and on-prem environments.
What I Do#
I specialize in the full lifecycle of platform engineering: designing cloud infrastructure, building CI/CD pipelines, ensuring compliance, and extracting performance out of complex distributed systems.
Outside of work, I run a homelab (Kubernetes via Talos/K3s, Proxmox, Gitea CI, TrueNAS, Kanidm, OPNsense) and volunteer as Fundraising Team Lead for the European Speedrunner Assembly.
Skills#
- Cloud & Containerization: AWS (GovCloud), EKS, Kubernetes, Docker
- Infrastructure as Code: Terraform, Pulumi, Ansible
- CI/CD & DevSecOps: Jenkins, GitHub Enterprise, ArgoCD, GitOps, Shift-Left Security, Software Supply Chain Security
- Security & Compliance: FedRAMP, Semgrep, Twistlock, Snyk, Gitleaks, OPA, Renovatebot, SBOM
- Internal Developer Platform: Port.io, Security Scorecards, IDP Architecture, DevEx
- Observability & Languages: Grafana, Prometheus, Datadog, Python, Go, Shell
Highlights#
- Architected an enterprise DevSecOps platform supporting 2,000+ developers at Palo Alto Networks, sustaining 99.9% platform availability
- Secure CI/CD pipeline adoption from 30% to 95% in six months by leading GitHub Enterprise adoption with status checks and branch protections
- Over 95% automated security coverage across all repositories, cutting policy violations by 60% through shift-left practices
- ~20x throughput improvement on an automated artifact migration system (25 → ~500 artifacts/min)
- Reduced SaaS deployment time from ~90 minutes to 25 minutes; improved release success rate from ~50% to ~80%
- FedRAMP High compliance — built and maintained compliant delivery pipelines in AWS GovCloud
- AI in production — engineered prompt tooling with AWS Bedrock, including a knowledge base layer to reduce hallucinations and token burn
- Led engineering teams of up to 9, including CyberArk’s highest-performing team in the department and my current 8-person team at Palo Alto Networks
Earlier#
Manager of Systems Administration at RadNet (2012–2022) — progressed from IT Support to Systems Administrator to Manager over 10 years, managed a team of 5, and introduced GitLab CI/CD, AWX automation, and infrastructure-as-code practices supporting imaging centers nationwide.
Certifications#
AWS Certified Solutions Architect – Associate — valid through March 2027. Verify on Credly.