DevOps Engineer / Cloud Engineer/ SRE / System Admin

MARCEL EHOUSSOU

Greeley, Colorado 301-***-**** *********@*****.***

DevSecOps Engineer AWS Kubernetes Terraform CI/CD

PROFESSIONAL SUMMARY

DevSecOps Engineer with 7+ years of experience designing, automating, and securing cloud infrastructure in AWS and Kubernetes environments. Proven expertise in Infrastructure as Code, CI/CD automation, and container orchestration. Strong focus on security, compliance, and system reliability supporting federal programs.

TECHNICAL SKILLS

Cloud: AWS (EC2, EKS, ECS, Lambda, RDS, S3, IAM, VPC, CloudWatch)

IaC: Terraform, Terragrunt, CloudFormation

CI/CD: Jenkins, Harness, GitHub Actions, Git

Containers: Docker, Kubernetes (EKS, Rancher, RKE2)

Config Mgmt: Ansible

Monitoring: Dynatrace, CloudWatch, Grafana, Sentry

Security: IAM, Vault, TLS hardening, vulnerability remediation

Scripting: Bash, Python, PowerShell

EXPERIENCE

DevOps Engineer – Lefant LLC

Client: Booz Allen Hamilton (Department of Veterans Affairs Project)

March 2023 – April 2026

• Contributed to AWS cloud infrastructure and DevSecOps initiatives for a Department of Veterans Affairs program.

• Deployed and maintained AWS infrastructure using Terraform, Terragrunt, and CloudFormation, improving deployment consistency and reducing manual provisioning efforts.

• Developed and maintained CI/CD pipelines using Jenkins to automate application deployments, infrastructure changes, and blue-green release strategies.

• Managed Kubernetes (EKS) environments, including Helm deployments, ArgoCD GitOps workflows, application onboarding, and production support.

• Implemented Infrastructure as Code (IaC) best practices through reusable Terraform modules, version control, peer reviews, and automated deployment pipelines.

• Led vulnerability remediation efforts by addressing Nessus findings, implementing TLS hardening, enforcing IMDSv2, updating container images, and applying security best practices across cloud environments.

• Automated server configuration, patch management, and operational tasks using Ansible, reducing manual administration overhead.

• Managed SSL/TLS certificate lifecycle operations, including certificate renewals, ACM integrations, and secure application communications for all environments.

• Deployed and maintained monitoring and observability solutions including Dynatrace, Grafana, and CloudWatch to improve operational visibility and incident response.

• Maintained AWS services including EC2, IAM, ALB, ACM, Route 53, CloudWatch, Lambda, and Systems Manager.

• Contributed to production support and on-call rotations, performed root-cause analysis and implemented preventive measures to improve system stability and availability.

DevSecOps Engineer – SIGMA Defense

May 2022 – March 2023

Built and maintained GitOps deployment pipelines with Argo CD, reducing manual deployment effort.

Managed Kubernetes deployments (RKE2, Rancher).

Automated Argo CD deployment and configuration in Kubernetes through Infrastructure as Code.

Automated AWS infrastructure with Terraform/Terragrunt

Developed automation scripts (Bash/Python)

DevOps Engineer – Primus Cloud Solutions

May 2021– May 2022

Automated AWS infrastructure using Terraform across all environments/services to improve consistency and provisioning speed.

Developed Ansible playbooks for configuration management covering hosts/services to standardize deployments and configurations.

Containerized applications using Docker and ECS for services to enable consistent runtime environments and simpler deployments.

Managed CI/CD pipelines in Jenkins for development teams to maintain reliable build-and-deploy workflows.

Integrated monitoring (CloudWatch, Splunk, Sentry)

Linux Systems Administrator – Trinitech Consulting

Aug 2018 – May 2021

Deployed and managed Linux systems, patching, and automation across servers/environments to improve platform reliability and security.

Performed vulnerability assessments.

Implemented AWS security controls (IAM, MFA, encryption) across AWS accounts to harden access controls and protect sensitive data.

EDUCATION

Bachelor – Networking & Telecommunications

A.A.S – Cybersecurity

CERTIFICATIONS

CompTIA Security+

AWS Solutions Architect – Associate

Contact this candidate