Chief Program Engineer (IoT) Automation Architect

ALFREDO GUTIERREZ

Senior Cloud Automation & Ansible Platform Architect

San Jose, California *******.************@*****.*** PROFESSIONAL SUMMARY

Senior cloud automation and infrastructure architect with 28+ years of experience designing, modernizing, and operating enterprise Linux, cloud, networking, virtualization, and automation platforms. Deep expertise in Red Hat Ansible Automation Platform (AAP), OpenShift, AWS, Terraform, Python, and infrastructure as code, including multi-site disaster recovery, Automation Mesh, cloud network automation, and Tower/AWX-to-AAP migrations. Proven record of leading complex initiatives, building reusable automation frameworks, and delivering secure, scalable solutions across regulated and global environments. CORE TECHNICAL EXPERTISE

Automation & Platforms: Red Hat AAP 2.3-2.6, Ansible Tower/AWX, Automation Mesh, Event-Driven Ansible, Execution Environments, dynamic inventory, RBAC, ServiceNow Ansible Spoke Cloud & Infrastructure as Code: AWS, Azure, OCI, Terraform, Terraform Cloud, OpenShift, Kubernetes, Docker, Podman, VMware, OpenStack, multi-account and multi-region provisioning Development & Integration: Python, Flask, REST APIs, Jinja2, YAML/JSON, Bash/Shell, PowerShell/PowerCLI, GitHub, GitLab, Harness, CI/CD, HashiCorp Vault

Data, Middleware & Observability: PostgreSQL, MongoDB/DocumentDB, Oracle Database, WebLogic, APEX, ORDS, Prometheus, Grafana, Splunk/ELK

AI-Assisted Engineering: ChatGPT, Claude, Gemini, OpenAI API/tools, prompt engineering, code review and refactoring, troubleshooting, documentation, and workflow design PROFESSIONAL EXPERIENCE

Aquinas - Client: Marriott International

Senior Network Cloud DevOps Engineer (AAP)09/2024-03/2026

• Engineered a Palo Alto Prisma SD-WAN configuration-as-code framework using Python, Ansible, Jinja2, YAML, and Git to export, version, validate, import, and restore ION site and device configurations across multiple tenants.

• Built automated per-device configuration generation, parallel multi-tenant processing, serial-number replacement, rollback, and drift-detection capabilities, improving repeatability for device lifecycle and disaster-recovery operations.

• Integrated the Prisma SASE Python SDK with OAuth 2.0 and designed a comprehensive YAML schema for WAN/LAN interfaces, routing policies, NTP, SNMP, syslog, security zones, sites, and devices.

• Developed MICloudViz, a Flask-based cloud network visualization and diagnostics platform that queries DocumentDB/MongoDB and generates interactive SVG topology diagrams for AWS and AliCloud resources.

• Designed REST APIs and advanced filters for VPCs, subnets, route tables, ENIs, Route 53 hosted zones, IP-based route/subnet analysis, and DNS tracing; implemented CORS, TLS, authentication, retries, and Pandas-based transformations.

• Containerized and automated application deployment with Docker, shell scripting, environment-based configuration, and Kubernetes/EKS integration across development, performance, and production environments.

• Integrated AAP templates with Terraform Cloud and Harness pipelines to generate Terraform through Jinja2, manage workspaces and state, and orchestrate plan, apply, destroy, and post-provisioning workflows.

• Automated multi-account and multi-region EC2 provisioning with cross-account AWS STS role assumption, VPC/subnet discovery, ENI and security-group configuration, optional Elastic IP and S3 integration, and HashiCorp Vault-backed credentials.

• Designed an AWS IPAM subnet-provisioning framework with a custom Python/Ansible lookup plugin that detects available VPC address space, allocates CIDRs, and creates environment-aware subnets with validation for /22 through

/28 ranges.

• Supported Linux-based enterprise telemetry agents across multiple AWS regions, developed curl/nc/dig preflight and health-validation runbooks, and provided escalation support for DNS, firewall, egress, TLS, runtime, and registration issues.

Legendz Consulting

Senior Ansible Automation Architect - Fractional / Concurrent Consulting Engagements 08/2022-04/2026 Selected clients: Oncor, Yale, WWT, CDW, Mythics, Centene, BCBS, and Williams Sonoma

• Architected Red Hat AAP 2.6 on OpenShift 4.18 across Development, Performance, and Production environments, integrating external PostgreSQL and S3-compatible storage for Platform Gateway, Controller, Hub, and Event-Driven Ansible.

Alfredo Gutierrez Page 1

• Designed a multi-site active-passive disaster-recovery architecture across two data centers, including a scaled-down secondary AAP deployment, PostgreSQL streaming replication, and documented failover and failback procedures.

• Engineered an Automation Mesh topology with four primary Execution Nodes and one DR standby node, enabling team- and network-zone-based Instance Group routing for 20-30 teams and approximately 1,600 Linux hosts.

• Established PostgreSQL sizing and operations guidance covering 8 vCPU, 32 GB RAM, 500 GB-1 TB NVMe, 1,500+ IOPS, retention, vacuum/autovacuum, WAL/PITR, replication, and schema lifecycle management.

• Implemented AAP configuration as code with collections and APIs to provision organizations, credentials, projects, inventories, templates, Instance Groups, and RBAC consistently across environments; integrated telemetry with Prometheus, Grafana, and Splunk/ELK.

• Authored implementation runbooks for Kubernetes Secrets, AAP Custom Resources, OpenShift Operator lifecycle management, external database integration, scaling, monitoring, and Receptor mesh communications over TCP 27199.

• Architected AAP 2.5 containerized deployments on RHEL 9 and Linux-based DEV/Production topologies; configured LDAP, HashiCorp Vault, secure Git credentials, webhooks, custom Execution Environments, and cloud dynamic inventories.

• Led migrations from Ansible Tower 3.6.3 and AWX to AAP 2.3/2.4, modernizing inventories, credentials, projects, playbooks, roles, collections, workflows, and custom Execution Environments.

• Integrated AAP with ServiceNow Ansible Spoke and CMDB dynamic inventory, and built self-service Ansible/Terraform request workflows for governed AWS provisioning with standardized variables, tags, and credentials.

• Led a three-engineer team delivering reusable Linux patching, validation, VM provisioning, LEAPP upgrade, and remediation frameworks; modernized Puppet and shell automation into Ansible roles, collections, Jinja2 templates, and CI/CD pipelines.

• Engineered a six-role Ansible solution for unattended Oracle Database 19c, WebLogic 14.1.1, APEX 19.2, and ORDS deployment on Oracle Linux 8.8, including CDB/PDB provisioning, kernel tuning, TNS/listener configuration, WLST automation, and secure credential handling.

• Built VMware and network automation across vCenter, SRM, and Cisco UCS Central, including ESXi onboarding, distributed port groups, VLANs, uplink policies, PowerCLI-based SRM mappings, and Microsoft Teams notifications. Latitude 36 / Harvey Nash - Client: California State Compensation Insurance Fund Linux Ansible Architect Pleasanton, California 02/2019-08/2022

• Directed enterprise Ansible initiatives and AAP/Tower upgrades across development and production, including transition of the network automation environment to a highly available clustered architecture.

• Created Linux and network playbooks using Cisco NX-OS/IOS collections, Bash, and reusable roles to automate configuration, provisioning, validation, migration, and routine operations across hundreds of Red Hat systems.

• Replaced Satellite-driven patching with end-to-end Ansible Tower orchestration covering prechecks, DRD synchronization and activation, controlled reboots, package installation, postchecks, reporting, and maintenance-window sequencing.

• Developed RHEL 6/7/8 and HP-UX migration automation, VMware vRA/AWS provisioning workflows, Satellite re-registration, repository enablement, enterprise agent deployment, and host lifecycle operations.

• Automated security and compliance controls including SSH key management, auditd configuration, AD/Centrify integration, local-account evidence collection, and centralized authentication migrations.

• Delivered Ansible workshops, code reviews, reusable documentation, and operational reporting while partnering with DevOps, network, Linux/Unix, security, and application teams. Dulles Consulting - Client: Equinix

Senior OpenStack & Automation Engineer San Jose, California 06/2018-12/2018

• Built Ansible automation for OpenStack server post-configuration and supported validation of Cisco OpenStack/NFV infrastructure running on Cisco UCS.

• Automated Cisco ESC/NSO provisioning with Cobbler and Ansible, and created Jinja2 templates for bonded interfaces, VLANs, bridges, DNS, hostnames, services, and persistent kernel network tuning.

• Troubleshot Linux, OpenStack compute/network, and VMware ESXi 6.0-to-6.5 upgrade issues; added post-deployment validation, backup-aware configuration updates, and rollback safeguards.

• Collaborated with engineering and project-management teams to define repeatable runbooks, workflows, and documentation standards.

Alfredo Gutierrez Page 2

Embedded Resource Group - Cisco Systems

Lead Tier 3 Cloud Administration Engineer San Jose, California 02/2015-05/2018

• Delivered Tier 3 support for global private OpenStack cloud environments, diagnosing compute, networking, HAProxy, REST API, Heat orchestration, Docker deployment, and Linux/Windows guest issues.

• Used Ansible, Python utilities, ServiceNow, and BMC Remedy to improve incident/change workflows, service validation, problem resolution, and customer communication in a 24x7 environment.

• Led Scrum ceremonies, SLA review, hiring, scheduling, on-call operations, change approvals, documentation standards, mentoring, and technical training as part of a DevOps-oriented support model. SuneraTech

Senior Administration Architect / Remote Support 09/2014-12/2015

• Architected and supported Oracle engineered and virtualized platforms including Exadata, Exalogic, Oracle VM/OVS, Oracle Linux, ZFS, and Enterprise Manager 12c in data-center and cloud environments.

• Led Oracle VM Manager and Oracle VM 3.3.1 installations and provided senior Linux/Oracle platform administration for performance, availability, and lifecycle management. NTT DATA Inc.

Principal Consultant Santa Clara, California 11/2012-10/2014

• Led parallel infrastructure projects supporting mission-critical Linux, Windows, virtualization, Oracle, storage, and network platforms across two data centers and a 24x7 operating model.

• Built and administered Oracle VM and VMware vSphere environments, including multi-node clusters and 560+ Oracle Linux/Windows virtual machines; supported Oracle engineered systems, EM12c, ZFS, Vblock, EMC storage, and Cisco UCS.

• Designed centralized authentication by integrating Active Directory with Oracle Internet Directory/LDAP and deployed DNS, NFS, NTP, SMB, SMTP, SNMP, syslog, GPO, storage, SAN, and disaster-recovery capabilities.

• Managed Severity 1 escalations, customer migrations, site failover testing, platform lifecycle operations, and relationships with internal and external stakeholders. EARLIER EXPERIENCE

Altos Consulting / CGI - Client: California Franchise Tax Board Senior Systems Engineer 03/2012-06/2012 — VMware vSphere, Windows Server clustering, IBM BladeCenter, and EDI infrastructure architecture. ICTSI - Port of Portland Senior Systems Engineer 04/2011-12/2011 — Active Directory, GPO, DNS/DHCP, VMware ESXi, Windows Server, HP blade infrastructure, patching, and on-call operations. Save Mart Supermarkets Senior Systems Engineer 05/2007-04/2011 — Windows/Active Directory, VMware, SQL Server, Citrix/XenApp, blade infrastructure, payment and retail systems, and production support. Texas County & District Retirement System Systems Administrator 04/2004-05/2007 Institute of Technology Information Technology Manager 12/2001-04/2004 Petz Enterprises Technical Phone Support 12/1998-12/2001 EDUCATION & CERTIFICATIONS

Oracle Cloud Infrastructure 2023 Certified AI Foundations Associate Oracle University Certificate of Completion Modesto Institute of Technology 01/2002 Professional Development Linux Academy and advanced coursework in Linux, cloud, automation, and infrastructure technologies

Alfredo Gutierrez Page 3

Contact this candidate