IAM DevSecOps Engineer - Royal Caribbean Cruises Ltd. - Miami, FL
(2022-03)
- Led modernization of the enterprise IAM platform from ForgeRock 6.5 to 7.5, securing authentication for 100,000+ guests, crew members, and travel agents across Royal Caribbean's global fleet.
- Architected and owned all deployments using Ansible automation, eliminating manual configuration drift and reducing deployment time across a fleet of distributed IAM nodes.
- Deployed and maintained a Prometheus observability stack with node exporters and Splunk log forwarding, enabling real-time audit logging and alerting across production IAM infrastructure.
- Automated SSL/TLS certificate lifecycle management using KeyFactor and Ansible API orchestration, eliminating manual cert-rotation risk across all IAM endpoints.
- Provided 24/7 PagerDuty on-call support for P1/P2/P3 escalations as sole engineer accountable for guest and crew authentication uptime during off-hours incidents.
- Acted as de-facto DevOps Manager and SRE specialist in the absence of a dedicated role, managing project timelines, unblocking development teams, and authoring comprehensive runbooks.
- Hosted internal knowledge-transfer sessions to upskill senior and lead engineers on Ansible automation patterns, IAM architecture, and deployment best practices.
- Leveraged AI-assisted development tooling (GitHub Copilot) to accelerate delivery of complex automation scripts and configuration templates.
DevOps / Network Security Solutions Architect (Consultant) - Padron Cigars - Miami, FL
(2022-01)
- Redesigned full LAN and DMZ network architecture using Proxmox virtualization, implementing an Active Directory domain controller, Ansible automation server, Docker with Portainer, Apache web server, Cloudflare WAF, and reverse proxy, all aligned to cybersecurity best practices.
- Coordinated an enterprise penetration-testing engagement with CISA, acting as primary technical point of contact and supervising senior and mid-level engineers throughout the remediation cycle.
- Established site-to-site VPN between domestic and international company campuses using SonicWall TZ600, securing inter-campus traffic and centralizing security management.
- Implemented a Proxmox Backup Server for automated backup and restore of all virtualized infrastructure, ensuring business continuity and disaster-recovery readiness.
DevOps Engineer - KeyBank - Miami, FL
(2021-10 - 2022-01)
- Migrated software projects from legacy infrastructure to Google Cloud Platform (GCP) using GitLab Enterprise and Terraform, coordinating with distributed development teams via Microsoft Teams and Atlassian.
- Upgraded and modernized CI/CD pipelines by migrating automation jobs from Jenkins to GitLab CI/CD, rewriting YAML pipeline definitions to improve reliability and build speed.
- Managed Break-The-Glass (BTG) net-group access controls and retired deprecated applications from active CI/CD workflows, reducing pipeline complexity and attack surface.
- Participated in Agile ceremonies and provided cross-team technical support during cloud migration sprints.
DevSecOps Engineer - Systek - Miami, FL
(2021-03 - 2021-10)
- Built a full-stack web application (Django/Python REST API + JavaScript client) to manage on-site virtual guard kiosk assets, deployed using Jenkins CI/CD with GitHub integration.
- Designed a custom plug-and-play DMZ module using Proxmox virtualization on a PowerEdge R370 server, implementing pfsense for physical network segmentation and firewall routing.
- Integrated a SIEM/SOAR pipeline using Snort and Splunk for deep packet inspection, real-time log collection, and automated incident response across the DMZ.
- Secured inter-service communication using JWT authentication tokens and unified all assets onto a Tailscale VPN mesh network.
- Conducted early-stage Docker and Kubernetes experimentation, writing Dockerfiles and running containerized NGINX (Alpine) workloads, laying groundwork for later container orchestration work.
DevOps Engineer - Tritan Software Corporation - Miami, FL
(2020-08 - 2021-02)
- Maintained and deployed testing and staging environments using Jenkins CI/CD pipelines integrated with GitLab for automated build, compile, and artifact generation.
- Administered SQL and MongoDB databases including credential management, configuration updates, and data migrations across multiple product families.
- Automated ETL data-processing tasks using Linux cron jobs (PHP), ensuring reliable scheduled data transformation and movement across systems.
- Collaborated with product managers, QA, and software developers using Jira to define test cases, track releases, and deliver clean software artifacts.
IT / Web Developer - Systek - Miami, FL
(2018-12 - 2020-04)
- Led development and deployment of the company website (JavaScript + HTML) while beginning the organization's cloud-infrastructure transition using virtualization technology.
- Implemented a cloud backup solution using Backblaze B2 and enforced network security best practices, securing SFTP (990) and HTTPS (443) while eliminating vulnerable protocols such as Telnet (23).
PI Systems Engineering Intern - TQS Integration Ltd. - Boston, MA
(2019-07 - 2019-09)
- Gained hands-on experience with OSIsoft PI systems — configuring PI Interfaces, PI Data Archives, OPC DA standards, and Asset Framework for industrial IoT data pipelines.
- Configured Windows Server VMs using VMware vSphere to host PI Server instances, implemented data buffering for outage resilience, and created PI ProcessBook flow diagrams.
