I design and ship serverless systems and hybrid cloud networks on AWS from the Terraform or CDK (your choice) that stands them up to the VPCs, routing, and firewall policy underneath.
I also love talking cloud tech and providing consultations for businesses looking to leverage AWS effectively. The well-architected framework is the guide by which I live my cloud life.
A segmented on-prem site (GNS3 — VyOS router/firewall, three VLANs over 802.1Q, a screened DMZ) bridged to an AWS VPC over a route-based IPsec site-to-site VPN — IKEv2 with NAT-Traversal through a NAT'd customer gateway. The tunnel is deliberately scoped so only the engineering subnet can cross. Cloud side fully provisioned with Terraform.
A domain-decomposed serverless API: 9 bounded-context Lambdas behind a single HTTP API, a single-table DynamoDB design with GSIs driven by access patterns, Cognito identity (social OAuth + post-confirmation triggers), and managed AI wired in as first-class components — Bedrock for generation, Rekognition for moderation. Entirely CDK infrastructure-as-code.
A real-time multiplayer board game over AWS AppSync (GraphQL + WebSocket subscriptions), with Cognito auth, per-time-control Elo ratings, and a WAF + DynamoDB throughput caps + Budgets cost/abuse guardrail layer. CDK end to end.
A fully serverless site on AWS with keyless GitHub Actions + OIDC CI/CD deploying CDK infrastructure — no stored credentials. Public reads are served as static JSON from CloudFront's edge, so visitor loads never hit a Lambda.
I came into cloud the long way. Through a decade in manufacturing engineering, where I taught myself AWS by shipping systems the business actually depended on.
Along the way I earned a B.S. in Cloud & Network Engineering and ten certifications. But the part I care about is what I built with them: an IoT automation pipeline that put real-time status on the shop floor, a MySQL → DynamoDB migration, a keyless OIDC CI/CD pipeline, and a hybrid-cloud network bridged to AWS over IPsec (through double-NAT) provisioned end to end with Terraform.
I love the whole stack of a system: the Terraform that stands it up, the VPC and routing underneath, the firewall rules that keep it secure, and the code on top. Network fundamentals and cloud architecture aren't two skills to me. On the contrary, they're the same problem at different layers.
The site itself is static, but I added this guestbook for some AWS flavor. Every signature runs through a Lambda behind API Gateway and lands in DynamoDB. In other words, the demo is the résumé. Join the (future) millions of others and say hi!
Open to remote cloud, network, and infrastructure engineering roles. The fastest way to reach me is email.