about

summary

Lead DevOps Engineer at Deloitte Technology US with 8+ years scaling Azure platforms and 12+ years in regulated environments. Core contributor to a multi-year data center migration to Azure, AWS, and GCP; builds the CI/CD pipelines, infrastructure-as-code, and platform automation behind mission-critical tax applications. Hands-on ownership of the security and governance layer: least-privilege RBAC and Entra ID across hundreds of subscriptions, policy-as-code with Azure Policy, Key Vault-backed secrets, and network segmentation.

I'm a Lead DevOps Engineer at Deloitte Technology US (DT-US) with 8+ years of experience scaling cloud platforms. I'm on the iCMS Tax DevOps Team, which provides Azure DevOps and cloud platform engineering support for Deloitte's Tax Service Line: the applications the firm uses for tax preparation, compliance, accounting, and filing on behalf of its clients.

Before that I was on the iCMS POP DevOps Team, where I was a core contributor to a multi-year data center migration that moved Deloitte's on-premises infrastructure to Microsoft Azure, AWS, and GCP. Much of my focus there was getting teams out of reactive firefighting and into platform-driven engineering, with security and governance built into every layer.

Security has been part of the day job for years, without a security title: least-privilege RBAC and Entra ID across hundreds of subscriptions, policy-as-code with Azure Policy, Key Vault-backed secrets, and network segmentation with NSGs and private endpoints, all in a regulated environment where the data is tax data. I run my own network the same way: a pfSense router with Suricata IDS/IPS inspecting traffic at gigabit line rate, DNS-level filtering with pfBlockerNG, and zero-trust remote access over WireGuard. Building and operating controls is half of security engineering. The other half is validating that they work, and that is where I'm headed.

experience

Lead DevOps Engineer, Deloitte Technology US (DT-US), iCMS Tax DevOps Team

Oct 2025 - Present · Remote (Hermitage, TN)

Senior engineer providing Azure DevOps and platform engineering for Deloitte's tax applications. Click to expand.

▾

• Embed DevSecOps controls (secret scanning, policy-as-code with Azure Policy, least-privilege RBAC, secrets management via Key Vault, and security gates) directly into Azure DevOps and GitHub Actions pipelines.
• Operate under Deloitte's standards for client data integrity and regulatory compliance, with security and governance designed in from the start.
• Provision and manage Azure environments end-to-end (resource group design, networking with NSGs and private endpoints, identity through Entra ID and RBAC, and platform observability).
• Provide Azure DevOps and platform engineering support as a senior engineer for Deloitte's Tax Service Line: the firm's tax preparation, compliance, accounting, and filing applications used to serve clients at scale.
• Build Azure CI/CD pipelines, infrastructure-as-code (Bicep, ARM, Terraform), and release engineering practices that keep mission-critical tax applications running reliably and securely.
• Work with developers and operations to keep Azure platform strategy in step with delivery pace, and scale infrastructure as the compliance workloads get more demanding.

AzureBicepARMTerraform DevSecOpsCI/CDKey Vault Azure PolicyEntra IDRBAC

Lead Systems Administrator, Deloitte Technology US (DT-US), iCMS POP DevOps Team

Jun 2022 - Oct 2025 · Remote (Hermitage, TN)

Core contributor on a multi-year data center migration to Azure, AWS, and GCP. Hundreds of subscriptions. Click to expand.

▾

• Partnered with security and compliance teams to apply DevSecOps controls (IAM, threat and vulnerability management, Key Vault-backed secrets, Azure Policy, and least-privilege RBAC) across new cloud workloads.
• Designed and operated Azure environments at scale (hundreds of subscriptions), including resource group strategy, network segmentation with NSGs and private endpoints, and identity via Entra ID and RBAC.
• Worked as a senior engineer on the iCMS POP DevOps team (6 to 15 engineers) on Azure adoption, platform automation, and reliability across the workloads the team supported.
• Core contributor to a multi-year data center migration moving Deloitte's on-premises infrastructure to a multi-cloud footprint across Azure, AWS, and GCP, including workload assessment, network and identity planning, lift-and-shift execution, and post-migration optimization.
• Replaced manual server provisioning, patching, and configuration management with PowerShell, ARM/Bicep, and Azure DevOps pipelines, moving day-to-day operations toward a cloud-first, automation-driven model.
• Implemented production observability with Dynatrace and Azure Monitor, giving the team end-to-end visibility into application performance and infrastructure health across cloud and on-prem workloads during the migration.
• Designed for resilience: high availability architecture across availability zones, automated patch management, and documented disaster recovery procedures for cloud-resident workloads.
• Practiced SRE fundamentals (incident management, blameless post-mortems, root-cause remediation) and reduced repeat incidents by fixing underlying causes instead of patching symptoms.
• Mentored junior systems administrators on Azure, PowerShell, and migration tooling, so the team's cloud skills grew alongside the data center exit.

Multi-cloudData center migrationAzureAWSGCP DynatraceSREPowerShellBicep Disaster RecoveryHigh Availability

Senior Systems Administrator, Deloitte Technology US (DT-US), iCMS POP DevOps Team

Feb 2018 - Jun 2022 · Hermitage, TN

Windows Server, Active Directory, Group Policy, PowerShell automation. Earliest cloud-adoption work. Click to expand.

▾

• Owned incident response and change management for production systems supporting tax compliance workflows, with hands-on involvement in critical-period readiness for regulatory deadlines.
• Administered Windows Server, Active Directory, and supporting infrastructure for the iCMS POP DevOps team's portfolio, and kept the platforms the team supported highly available.
• Maintained core platform services (DNS, Group Policy, file and print services, monitoring, and backup) across geographically distributed environments.
• Built PowerShell automation for routine operational tasks (user provisioning, server build-outs, patch deployment, health checks), which removed a lot of manual work and standardized workflows that had been ad hoc.
• Contributed to the iCMS POP DevOps team's early cloud adoption (initial Azure IaaS workloads, hybrid networking, Entra ID integration) ahead of the full multi-cloud migration that followed.
• Worked with networking, application, and service-desk teams to triage issues that crossed team lines, and was often the person who turned an ambiguous incident into a clear remediation plan.
• Promoted to Lead Systems Administrator in 2022 after taking on wider scope, platform ownership, and technical leadership.

Windows ServerActive DirectoryGroup PolicyDNS PowerShellHybrid networkingIncident response

Operations Supervisor, FedEx Supply Chain (CFS L2/L3)

Apr 2015 - Feb 2018 · Lebanon, TN

Promoted to supervise two parallel production lines at FedEx Supply Chain's Lebanon facility, Dell's contracted partner for custom system configurations, OEM solutions, and white-labeling across the US. Up to 35 technicians across both lines. Click to expand.

▾

• Contributed to the practices, documentation, and routine audits that kept the facility's ISO 9001 quality management certification in good standing. The whole facility ran on ISO 9001, and the daily SOP and 5S work was how that showed up on the floor.
• Built and enforced SOPs, Job Safety Analyses, and 5S standards across both lines, and owned compliance with OSHA, MSDS, and Dell's exacting customer-specific build requirements.
• Operated in a regulated, customer-data-sensitive environment. Every unit that left the line had to match Dell's exact customer order, down to the BIOS settings, the white-label branding, and the cosmetic inspection. The end customer set the accuracy bar.
• Promoted from floor lead to supervise two parallel production lines at FedEx Supply Chain's Lebanon facility, which was Dell's contracted partner for custom system configurations, OEM solutions, and white-labeling across the United States. Line 2 (8 to 10 warehouse associates handling labeling, custom boxing, and laser etching) and Line 3 (15 to 25 technicians performing custom imaging, system configuration, BIOS work, and custom builds on Dell tablets, notebooks, desktops, workstations, servers, and printers).
• Owned people leadership across the combined team: hiring, onboarding, performance management, weekly one-on-ones, and the day-to-day coaching that turns a group of operators into a production team that does not need to be micromanaged.
• Owned daily production scheduling, throughput planning, and shift handoffs across both lines. Worked directly with operations managers on staffing, capacity, and escalation paths, and coordinated with Dell stakeholders to hit committed volume targets without sacrificing build quality or customization accuracy.
• Drove process improvements across both lines: identified bottlenecks in the imaging and build workflows, reorganized station layouts and equipment positioning, and reduced rework on cosmetic defects.

People leadershipOperations managementProduction schedulingISO 9001 OSHA / MSDS compliance5SJob Safety AnalysisPerformance management Inventory controlDell EMR / CFS workflowsOEM solutionsWhite-labeling BIOS configurationCustom imagingCross-functional coordination

Lead EMR Tech, FedEx Supply Chain (CFS L3)

Jan 2014 - Apr 2015 · Lebanon, TN

Hands-on technical lead on CFS Line 3 at FedEx Supply Chain's Lebanon facility, Dell's national hub for custom configurations, OEM solutions, and white-labeling. 15 technicians, supervisor's right hand for the technical work. Click to expand.

▾

• Operated within the facility's ISO 9001 quality management framework. Followed the certified procedures, documented repair actions in production logs, and maintained a clean, 5S-compliant workspace, including on the heaviest production days.
• On-the-floor technical lead for CFS Line 3 at FedEx Supply Chain's Lebanon facility, which was Dell's national hub for custom system configurations, OEM solutions, and white-labeling. Any custom build, OEM job, or white-label imaging order for the US market flowed through Line 3 before shipping to the end customer.
• Performed full-stack hardware work on Dell tablets, notebooks, desktops, workstations, servers, and printers: teardowns, parts replacement, BIOS-level diagnostics, and choosing the most cost-effective repair path.
• Ran custom imaging workflows, system configuration, and the burn process end-to-end. Evaluated units that failed burn and dispositioned them between recovery grades (retail, wholesale, sort-and-settle) based on the most cost-effective recovery path.
• Operated automated etching machines, performed cosmetic inspections and repairs, and used Dell's password-reset utility to unlock BIOS-locked units. Reviewed etched graphics for defects and routed bad output back through the support chain.
• Supervisor's escalation point for 15 technicians on the line. Handled hardware and software issues, daily station prioritization, and on-the-spot calls when production hit a snag.
• Trained burn techs on failure-type identification and routing procedures. Cross-trained tenured teammates across stations so the line stayed productive when staffing shifted. Onboarded and mentored new technicians coming into the role.

Dell hardwareBIOS / UEFISystem imagingHardware troubleshooting Automated etchingISO 9001OSHA / MSDS compliance EMR / CFS production workflowsOEM customizationWhite-labeling Burn processRecovery grade dispositioningOn-the-job training

projects

skills

certifications

Azure Fundamentals ↗

Microsoft · AZ-900 · active

Azure AI Fundamentals ↗

Microsoft · AI-900 · active

contact