Own AWS infrastructure, security posture, release engineering and AI/ML-augmented tooling for Workday's Content Tools platform estate.

• AI/ML infrastructure: designed a production ML inference system on AWS Bedrock (Claude), embedded directly in CI/CD — stage-scoped log capture, traceback extraction and named failure-pattern detection — live across 10+ production pipelines, cutting manual failure triage.
• MLOps: led the migration of ML workloads from Azure ML to AWS SageMaker — AWS DMS database migration, AWS Batch training jobs and SageMaker notebooks — owning networking, IAM, storage and compute; added OpenTelemetry tracing into Splunk plus model-latency and token-cost tracking.
• Platform engineering: designed and built a governed, self-service AWS environment from zero (VPN, IAM, PrivateLink, Route 53, ALB, identity integration) as sole technical owner from design through production handoff.
• Security: set CISA KEV-first, risk-based remediation strategy for an org-wide RBVM program across 3 platforms, closing ~15,000+ findings; host hygiene alone removed 350–400 findings per platform with no code change.
• IaC: led the CloudFormation → Terraform migration and introduced Checkov policy-as-code, moving security compliance from manual review to pipeline-enforced.
• Release engineering: own the release pipeline for 3 core platforms (RPM builds on Amazon Linux 2023, AMI packaging, EC2 rollout, ALB/CloudWatch, QA, production certification); sole owner of the Jenkins controller/agent fleet; closed 700+ infrastructure tickets.
• Decommissioned legacy content-management and data-warehouse systems and non-standard compute to reduce attack surface and recurring cost.

• Built and supported multiple EKS clusters and a global observability stack (Splunk + Datadog + Prometheus) with SLO/SLI alerting for high-availability FinTech workloads, reducing MTTR by 45%.
• Integrated Snyk, SonarQube and OWASP ZAP as shift-left controls in CI/CD, reducing production vulnerabilities by 40%.
• Owned EKS cluster operations — capacity planning, incident command and a runbook-driven on-call rotation.

• Delivered $120K in annual savings through Reserved Instance strategy and resource lifecycle automation across multi-region AWS.
• Authored CloudFormation templates enforcing security and compliance baselines across 10+ AWS regions and business units.
• Led the IAM governance program to meet enterprise SOC 2 and internal audit standards.
• Built self-healing infrastructure with AWS Lambda for automated compliance remediation.

• Architected and migrated 30+ enterprise applications to AWS with HA/DR configurations and zero-downtime cutovers.
• Spearheaded the Reserved Instance purchasing program, reducing cloud expenditure by 15% ($80K annually).
• Automated infrastructure provisioning with CloudFormation, Ansible and Terraform.
• Performed vulnerability assessments and security hardening, reducing security incidents by 50%.

• Provided L3 architectural support across hybrid environments (AWS, Hyper-V, VMware), managing 300+ EC2 instances across 8 enterprise accounts, monitored with CloudWatch and Zabbix.
• Developed health-check and remediation scripts that reduced application downtime and manual escalation; applied CIS benchmarks to improve security posture.

• Level 3 VMware Administrator managing virtualisation operations for enterprise clients.
• Ensured high availability of vSphere environments and supported cloud migration initiatives.

• Provided enterprise IaaS cloud automation using HP BSA Suite, VMware vSphere and vRealize Automation for self-service provisioning.
• Managed Windows & Linux provisioning, optimising infrastructure performance and security for healthcare systems (HIPAA-compliant).

• Windows/Linux environments and VMware vSphere administration.

• Enterprise technical support, Active Directory and network device administration.