AWS DevSecOps & Cloud Engineer

CARINE AMMONS

AWS CLOUD ENGINEER DEVSECOPS ENGINEER

+1-360-***-**** *************@*****.***

PROFESSIONAL SUMMARY

A highly accomplished and self-motivated AWS Cloud Engineer and DevSecOps professional with over 8 years of comprehensive experience architecting, deploying, and managing secure, scalable, and highly available cloud solutions on AWS and Microsoft Azure. Expertise lies in bridging the gap between development and operations through DevSecOps practices, automating infrastructure, implementing robust security and compliance guardrails, and optimizing cloud spend. Proficient in leveraging a broad spectrum of cloud technologies, including serverless architectures, containerization, CI/CD pipelines, and configuration management to drive operational excellence and accelerate application delivery.

CORE COMPETENCIES & TECHNOLOGIES

Cloud Platforms: Amazon Web Services (AWS), Microsoft Azure

DevOps & CI/CD: Jenkins, AWS Code Pipeline, AWS Code Commit, Git, GitHub, Bitbucket, Jira

Infrastructure as Code (IaC): AWS CloudFormation, Terraform, Ansible

Containerization & Orchestration: Docker, Kubernetes (EKS, AKS), AWS Fargate, Amazon ECR, Docker Swarm

Security & Identity: AWS IAM, AWS Organizations, AWS Control Tower, AWS Security Hub, AWS GuardDuty, AWS Shield, AWS KMS, AWS WAF, Security+, Azure AD, MFA, Conditional Access

Monitoring & Logging: AWS CloudWatch, AWS CloudTrail, AWS Config, AWS Trusted Advisor, Splunk, New Relic

Operating Systems: Linux (Ubuntu, CentOS, RHEL), Windows Server

Scripting & Languages: Bash, Python

Networking: AWS VPC, VPN, Direct Connect, Route53, ELB, CloudFront, Transit Gateway, NACLs, Security Groups

Databases: Amazon RDS, Oracle Database Administration

PROFESSIONAL EXPERIENCE

USCIS AWS DEVSECOPS ENGINEER

DECEMBER 2022 – PRESENT

·Spearheaded the development and maintenance of on-call schedules, integrating Splunk On-Call to streamline incident communication and ensure rapid resolution of critical system events, achieving a significant reduction in mean time to resolve (MTTR).

·Engineered automated workflows for incident escalations using AWS Lambda and Amazon SNS, enhancing team efficiency by minimizing manual response times and improving overall incident resolution processes.

·Designed and implemented event-driven, serverless architectures leveraging AWS Lambda, Amazon SNS, and Amazon CloudWatch Logs for real-time message processing, data transformation, and notification delivery across multiple internal systems.

·Mentored junior DevOps and application engineers, providing technical leadership on DevSecOps best practices, CI/CD optimization, and automation strategies.

·Managed and optimized organizational AWS accounts, implementing robust governance and resource-sharing models using AWS Organizations and Service Control Policies (SCPs).

·Supported and enhanced CI/CD pipelines and associated tooling for development and production environments, ensuring seamless application deployment and integration with Jenkins, GitHub, and AWS CodePipeline.

·Conducted regular performance tuning and troubleshooting of the Splunk platform, integrating new data sources to enhance centralized log monitoring and security analytics capabilities.

IZZY TAX AWS INFRASTRUCTURE ENGINEER / DEVSECOPS

AUGUST 2020 – DECEMBER 2022

·Architected and deployed secure, cost-optimized, and fault-tolerant AWS infrastructures, including multi-tier VPC designs, public/private subnets, NAT Gateways, and security groups for Dev, Stage, and QA environments.

·Implemented comprehensive cloud security best practices, including IAM role-based access control, MFA enforcement, automated access key rotation, S3 bucket policies with logging and versioning, and network ACL configurations.

·Reduced cloud expenditure by 30% through strategic implementation of Reserved Instances, EC2 right-sizing, S3 Lifecycle Policies, and Auto Scaling groups.

·Built and maintained robust CI/CD pipelines using Jenkins, integrated with GitHub and AWS CodeDeploy, to automate application deployments and infrastructure changes.

·Deployed and managed containerized applications using Docker and orchestrated workloads on Kubernetes, streamlining development and deployment consistency.

·Managed hybrid identity solutions, implementing identity federation with FreeIPA to enable seamless single sign-on (SSO) for users across multiple services.

·Deployed and managed Windows and Linux virtual machines on Microsoft Azure, configuring Availability Sets and integrating with Azure Active Directory for enhanced high availability and identity management.

ULRIX MOTORS LLC AWS SOLUTION ARCHITECT

DECEMBER 2017 – AUGUST 2020

·Led a large-scale migration project, successfully transitioning 100+ workloads from on-premises to a multi-cloud environment (AWS and Azure) and migrating 10,000+ user mailboxes to Office 365.

·Designed and deployed a well-architected, multi-account AWS environment using AWS Control Tower, implementing preventive/detective guardrails, centralized logging, and automated account provisioning via Account Factory and Lambda.

·Developed and enforced tagging strategies and compliance policies using AWS Config Rules and Service Control Policies (SCPs) to ensure governance and cost allocation across the organization.

·Automated the creation of Golden AMIs and implemented a centralized patch management solution using AWS Systems Manager Patch Manager, enhancing security and reducing configuration drift.

·Architected highly available and scalable solutions leveraging Elastic Load Balancing (ELB), Auto Scaling groups, Amazon RDS for databases, and Route 53 for DNS management with failover routing.

·Modernized legacy applications by containerizing them with Docker and implementing serverless architectures using AWS Lambda, API Gateway, and Amazon SNS.

·Developed Infrastructure as Code (IaC) templates using AWS CloudFormation and migration runbooks (LLDs) detailing network sizing, instance types, and resource tagging for various application migrations.

TIDEWATER MARINE INTERNATIONAL LINUX ADMINISTRATOR

DECEMBER 2014 – DECEMBER 2017

·Maintained 99.99% uptime for critical Linux server infrastructure, proactively monitoring system performance, resources, and logs to reduce incident response time by 20%.

·Streamlined user and group management, automating account provisioning and enforcing stringent file permissions to enhance security and reduce access provisioning time by 40%.

·Developed custom Bash scripts to automate routine system administration tasks and deployment processes, reducing deployment time by 50% and eliminating manual errors.

·Performed daily system monitoring and troubleshooting, ensuring 99.95% availability of server resources and minimizing unplanned downtime by 15% through early issue identification.

EDUCATION

Washington State University Bachelor of Science in Data Analytics, Minor in Business Administration March 2023

University of Buea Bachelor of Social Science (B.Sc.) in Women, Gender Studies, Sociology and Anthropology October 2010

CERTIFICATIONS

·AWS Certified Solutions Architect – Associate

·Terraform Associate

·Microsoft Certified: DevOps Engineer Expert (AZ-400)

·CompTIA Security+

·Professional Scrum Master I (PSM I)

·Oracle Database Administrator Certified Associate

Contact this candidate