AWS Cloud Engineering · DevSecOps · FinOps
I build AWS platforms that scale securely — and stay accountable.
Senior Cloud Engineer with 9+ years designing, automating, and governing enterprise infrastructure across multi-account AWS Organizations.
A dual lens: hands-on architect and client-facing technical lead. Terraform IaC, CI/CD, and security built in from the ground up — the same proactive discipline that once caught a ~$1M cloud overcharge before the billing cycle closed.
What I do
Multi-Account AWS Architecture
Landing zones with AWS Organizations, IAM Identity Center, and Service Control Policies — secure, centrally governed, cross-account by design.
BInfrastructure as Code & CI/CD
Terraform, CloudFormation, and AWS CDK with GitOps. Reusable, auditable modules and automated pipelines that make deployments repeatable.
CCloud Security & Compliance
Security Hub, GuardDuty, and AWS Config conformance packs deployed org-wide, with DevSecOps baked into delivery — aligned to NIST CSF, CIS Benchmarks, and SOC 2.
DFinOps & Cost Optimization
Usage analysis, anomaly detection, and right-sizing that turn cloud spend into a managed line item — including a ~$1M overcharge caught early.
Selected work
~$1M Overcharge, Prevented
↗Proactively monitored an enterprise customer's usage, detected an unimplemented cost-control feature, and alerted them before the billing cycle closed — protecting roughly a million dollars in cloud budget.
AWS IoT Architecture Foundation
↗A foundational AWS pattern for IoT device data: IoT Core ingestion, a raw-archive/cleanup fork through Lambda, DynamoDB and Streams, Athena and Glue for querying, and Cognito-gated dashboards in QuickSight.
Learning Management System
↗Support internal Totara-based LMS hosted on EC2, with dev and production fully isolated by subnet, firewalled, and VPN-gated — plus the multi-account landing-zone roadmap to take it further.
Writing
I write and publish my own media outlet, PassionWaves Media — cloud engineering write-ups, travel journals, food guides, and public-speaking notes, all in one place. Here's a preview of what's over there.
Certifications
Education
Technology Management
University of Arizona · 2025 – Present
Information Systems
Neumont University · 2014 – 2017
12 Certifications
Across AWS, Google Cloud, Azure & HashiCorp
Beyond the cloud
Interests
Notable achievements
Toolkit
AWS Services
Infrastructure as Code
DevSecOps & CI/CD
Security & Compliance
Monitoring & Ops
Languages & Platforms
Let's build cloud infrastructure that scales.
Open to Senior AWS Cloud Engineer and DevOps roles where deep technical execution meets real stakeholder impact.