about

summary

Lead DevOps Engineer at Deloitte Technology US with 8+ years scaling Azure platforms and 12+ years in regulated environments. Core contributor to a multi-year data center migration to Azure, AWS, and GCP; builds the CI/CD pipelines, infrastructure-as-code, and platform automation behind mission-critical tax applications. Hands-on ownership of the security and governance layer: least-privilege RBAC and Entra ID across hundreds of subscriptions, policy-as-code with Azure Policy, Key Vault-backed secrets, and network segmentation.

Lead DevOps Engineer at Deloitte Technology US (DT-US) with 8+ years of experience scaling cloud platforms. Currently on the iCMS Tax DevOps Team providing Azure DevOps and cloud platform engineering support for Deloitte's Tax Service Line: the firm's tax preparation, compliance, accounting, and filing applications used to deliver services to clients at scale.

Earlier, I worked on the iCMS POP DevOps Team, where I was a core contributor on a multi-year data center migration moving Deloitte's on-premises infrastructure to a multi-cloud footprint across Microsoft Azure, AWS, and GCP. Focused on moving teams from reactive firefighting to proactive, platform-driven engineering, with security and governance embedded at every layer.

The security work is not a side interest. It has been part of the day job for years, done without a security title: least-privilege RBAC and Entra ID across hundreds of subscriptions, policy-as-code with Azure Policy, Key Vault-backed secrets, and network segmentation with NSGs and private endpoints, all operated in a regulated environment where tax data raises the stakes. The same discipline extends to the network I run myself: a pfSense router with Suricata IDS/IPS inspecting traffic at gigabit line rate, DNS-level filtering with pfBlockerNG, and zero-trust remote access over WireGuard. Building and operating controls is one half of security engineering. Validating that they actually work is the other, and that is where I am headed.

experience

Lead DevOps Engineer, Deloitte Technology US (DT-US), iCMS Tax DevOps Team

Oct 2025 - Present · Remote (Hermitage, TN)

Senior engineer providing Azure DevOps and platform engineering for Deloitte's Tax application. Click to expand.

▾

• Embed DevSecOps controls (secret scanning, policy-as-code with Azure Policy, least-privilege RBAC, secrets management via Key Vault, and security gates) directly into Azure DevOps and GitHub Actions pipelines.
• Operate under Deloitte's rigorous standards for client data integrity and regulatory compliance, treating security and governance as first-class engineering concerns rather than late-stage afterthoughts.
• Provision and manage Azure environments end-to-end (resource group design, networking with NSGs and private endpoints, identity through Entra ID and RBAC, and platform observability).
• Provide Azure DevOps and platform engineering support as a senior engineer for Deloitte's Tax Service Line: the firm's tax preparation, compliance, accounting, and filing applications used to serve clients at scale.
• Build Azure CI/CD pipelines, infrastructure-as-code (Bicep, ARM, Terraform), and release engineering practices keeping mission-critical tax applications running reliably and securely.
• Partner with developers and operations to align Azure platform strategy with delivery velocity, scaling infrastructure alongside increasingly demanding compliance workloads.

AzureBicepARMTerraform DevSecOpsCI/CDKey Vault Azure PolicyEntra IDRBAC

Lead Systems Administrator, Deloitte Technology US (DT-US), iCMS POP DevOps Team

Jun 2022 - Oct 2025 · Remote (Hermitage, TN)

Core contributor on a multi-year data center migration to Azure, AWS, and GCP. Hundreds of subscriptions. Click to expand.

▾

• Partnered with security and compliance teams to apply DevSecOps controls (IAM, threat and vulnerability management, Key Vault-backed secrets, Azure Policy, and least-privilege RBAC) across new cloud workloads.
• Designed and operated Azure environments at scale (hundreds of subscriptions), including resource group strategy, network segmentation with NSGs and private endpoints, and identity via Entra ID and RBAC.
• Worked as a senior engineer on the iCMS POP DevOps team (6 to 15 engineers), contributing to Azure adoption, platform automation, and reliability across the team's portfolio of supported workloads.
• Core contributor to a multi-year data center migration moving Deloitte's on-premises infrastructure to a multi-cloud footprint across Azure, AWS, and GCP, including workload assessment, network and identity planning, lift-and-shift execution, and post-migration optimization.
• Replaced manual server provisioning, patching, and configuration management with PowerShell, ARM/Bicep, and Azure DevOps pipelines, moving day-to-day operations toward a cloud-first, automation-driven model.
• Implemented production observability with Dynatrace and Azure Monitor, giving the team end-to-end visibility into application performance and infrastructure health across cloud and on-prem workloads during the migration.
• Designed for resilience: high availability architecture across availability zones, automated patch management, and documented disaster recovery procedures for cloud-resident workloads.
• Practiced SRE fundamentals (incident management, blameless post-mortems, root-cause-driven remediation), reducing repeat incidents through systemic fixes rather than tactical patches.
• Mentored junior systems administrators on Azure, PowerShell, and migration tooling, raising the team's overall cloud fluency in parallel with the data center exit.

Multi-cloudData center migrationAzureAWSGCP DynatraceSREPowerShellBicep Disaster RecoveryHigh Availability

Senior Systems Administrator, Deloitte Technology US (DT-US), iCMS POP DevOps Team

Feb 2018 - Jun 2022 · Hermitage, TN

Windows Server, Active Directory, Group Policy, PowerShell automation. Earliest cloud-adoption work. Click to expand.

▾

• Owned incident response and change management for production systems supporting tax compliance workflows, with hands-on involvement in critical-period readiness for regulatory deadlines.
• Administered Windows Server, Active Directory, and supporting infrastructure for the CMS POP team's portfolio, ensuring high availability for the platforms the team supported.
• Maintained core platform services (DNS, Group Policy, file and print services, monitoring, and backup) across geographically distributed environments.
• Built PowerShell automation for routine operational tasks (user provisioning, server build-outs, patch deployment, health checks), eliminating significant manual toil and standardizing previously ad-hoc workflows.
• Contributed to early cloud-adoption efforts on the POP team (initial Azure IaaS workloads, hybrid networking, Entra ID integration), laying the groundwork for the full multi-cloud migration that followed.
• Collaborated with networking, application, and service-desk teams to triage cross-functional issues, often serving as the connective tissue that turned ambiguous incidents into clear remediation plans.
• Promoted to Lead Systems Administrator in 2022 in recognition of expanding scope, platform ownership, and technical leadership.

Windows ServerActive DirectoryGroup PolicyDNS PowerShellHybrid networkingIncident response

Operations Supervisor, FedEx Supply Chain (CFS L2/L3)

Apr 2015 - Feb 2018 · Lebanon, TN

Promoted to supervise two parallel production lines at FedEx Supply Chain's Lebanon facility, Dell's contracted partner for custom system configurations, OEM solutions, and white-labeling across the US. Up to 35 technicians across both lines. Click to expand.

▾

• Contributed to the practices, documentation, and routine audits that kept the facility's ISO 9001 quality management certification in good standing. ISO 9001 was the framework the whole facility operated within. The daily SOP and 5S work was how we lived it.
• Built and enforced SOPs, Job Safety Analyses, and 5S standards across both lines. Treated safety and consistency as defaults rather than afterthoughts. Owned compliance with OSHA, MSDS, and Dell's exacting customer-specific build requirements.
• Operated in a regulated, customer-data-sensitive environment. Every unit that left the line had to match Dell's exact customer order, down to the BIOS settings, the white-label branding, and the cosmetic inspection. The accuracy bar was set by the end customer, not by us.
• Promoted from floor lead to supervise two parallel production lines at FedEx Supply Chain's Lebanon facility, which served as Dell's contracted partner for custom system configurations, OEM solutions, and white-labeling across the United States. Line 2 (8 to 10 warehouse associates handling labeling, custom boxing, and laser etching) and Line 3 (15 to 25 technicians performing custom imaging, system configuration, BIOS work, and custom builds on Dell tablets, notebooks, desktops, workstations, servers, and printers).
• Owned people leadership across the combined team: hiring, onboarding, performance management, weekly one-on-ones, and the day-to-day coaching that turns a group of operators into a production team that does not need to be micromanaged.
• Owned daily production scheduling, throughput planning, and shift handoffs across both lines. Worked directly with operations managers on staffing, capacity, and escalation paths, and coordinated with Dell stakeholders to hit committed volume targets without sacrificing build quality or customization accuracy.
• Drove process improvements across both lines: identified bottlenecks in the imaging and build workflows, reorganized station layouts and equipment positioning, and reduced rework on cosmetic defects.

People leadershipOperations managementProduction schedulingISO 9001 OSHA / MSDS compliance5SJob Safety AnalysisPerformance management Inventory controlDell EMR / CFS workflowsOEM solutionsWhite-labeling BIOS configurationCustom imagingCross-functional coordination

Lead EMR Tech, FedEx Supply Chain (CFS L3)

Jan 2014 - Apr 2015 · Lebanon, TN

Hands-on technical lead on CFS Line 3 at FedEx Supply Chain's Lebanon facility, Dell's national hub for custom configurations, OEM solutions, and white-labeling. 15 technicians, supervisor's right hand for the technical work. Click to expand.

▾

• Operated within the facility's ISO 9001 quality management framework. Followed the certified procedures, documented repair actions in production logs, and maintained a clean, 5S-compliant workspace as a non-negotiable on the heaviest production days.
• Served as the on-the-floor technical lead for CFS Line 3 at FedEx Supply Chain's Lebanon facility, which functioned as Dell's national hub for custom system configurations, OEM solutions, and white-labeling. Any custom build, OEM job, or white-label imaging order for the US market flowed through Line 3 before shipping to the end customer.
• Performed full-stack hardware work on Dell tablets, notebooks, desktops, workstations, servers, and printers: teardowns, parts replacement, BIOS-level diagnostics, and cost-effective repair-path decisions across the full range of system types.
• Ran custom imaging workflows, system configuration, and the burn process end-to-end. Evaluated units failed in burn and dispositioned them between recovery grades (retail, wholesale, sort-and-settle) based on the most cost-effective recovery path.
• Operated automated etching machines, performed cosmetic inspections and repairs, and used Dell's password-reset utility to unlock BIOS-locked units. Reviewed etched graphics for defects and routed bad output back through the support chain.
• Served as the supervisor's escalation point for 15 technicians on the line. Handled hardware and software issues, daily station prioritization, and on-the-spot calls when production hit a snag.
• Trained burn techs on failure-type identification and routing procedures. Cross-trained tenured teammates across stations so the line stayed productive when staffing shifted. Onboarded and mentored new technicians coming into the role.

Dell hardwareBIOS / UEFISystem imagingHardware troubleshooting Automated etchingISO 9001OSHA / MSDS compliance EMR / CFS production workflowsOEM customizationWhite-labeling Burn processRecovery grade dispositioningOn-the-job training

projects

skills

certifications

Azure Fundamentals ↗

Microsoft · AZ-900 · active

Azure AI Fundamentals ↗

Microsoft · AI-900 · active

contact