Nate Tom

Senior DevSecOps and platform engineer with 10 years of experience delivering secure, scalable cloud infrastructure, automation, and modern application delivery capabilities. Hands-on expertise spans AWS, Kubernetes, Amazon EKS, GitOps, CI/CD, infrastructure as code, platform security, monitoring, and cloud governance. Experienced in building resilient platforms, automating operational controls, troubleshooting production systems, and improving developer workflows across regulated, commerce, logistics, and education environments.

Collaborates effectively across engineering, infrastructure, and cybersecurity teams while applying DevSecOps and SRE practices to cloud modernization initiatives.

Senior DevSecOps Engineer at KPMG (2024-09 – 2026-05)

• Designed secure AWS Cloud Engineering patterns for regulated consulting clients, combining Cloud Infrastructure Management, IAM, and Cloud Governance controls to standardize resilient landing zones and reduce configuration drift.
• Administered Amazon EKS clusters and led Kubernetes Administration across production platform services, tuning node capacity, workload policies, and upgrade procedures to improve availability for government-oriented client environments.
• Built CI/CD Pipeline Development standards with GitHub Actions and GitHub Repositories, adding automated validation, artifact promotion, and approval gates that strengthened repeatable delivery across distributed engineering teams.
• Implemented GitOps delivery with ArgoCD, defining declarative application synchronization, rollback practices, and environment promotion controls that improved deployment consistency across secure AWS platform workloads.
• Automated Infrastructure as Code with Terraform and AWS CloudFormation, creating reusable modules for networks, compute, security boundaries, and AWS RDS resources while enforcing reviewable change management for regulated programs.
• Integrated HashiCorp Vault and Keycloak with platform authentication flows, centralizing secrets, service credentials, and access controls while supporting least-privilege security requirements across cloud-native consulting solutions.
• Applied Kyverno Policy as Code to Kubernetes workloads, enforcing image, namespace, resource, and security standards that advanced Platform Security and reduced manual governance checks within controlled client environments.
• Implemented ACK Controller patterns for Kubernetes-managed AWS resources, enabling declarative service provisioning while aligning Infrastructure Automation with GitOps workflows and auditable platform engineering practices.
• Established Platform Monitoring with CloudWatch dashboards, alerts, and service telemetry, applying SRE practices to detect saturation, investigate latency, and improve reliability objectives for business-critical cloud services.
• Led Incident Response and Root Cause Analysis for platform disruptions, correlating Kubernetes, AWS, and application signals to isolate failure modes, document corrective actions, and prevent recurrence across client environments.

Platform Engineer at YETI (2019-04 – 2024-09)

• Engineered AWS platform services for a high-volume consumer products business, applying DevOps Engineering and Cloud Infrastructure Management practices to support scalable digital commerce, internal applications, and seasonal demand.
• Built and operated Amazon EKS environments with Docker-based workloads, strengthening Kubernetes Administration through deployment standards, resource controls, health checks, and repeatable operational procedures for commerce services.
• Developed CI/CD Pipeline Development workflows using GitHub Repositories and GitHub Actions, automating builds, tests, security checks, and environment promotions to shorten release cycles for customer-facing digital platforms.
• Introduced GitOps practices with ArgoCD for declarative Kubernetes delivery, improving traceability and rollback while aligning application configuration with reviewed repository changes across development and production environments.
• Created Terraform and AWS CloudFormation modules for Infrastructure as Code, automating VPC, compute, IAM, and AWS RDS provisioning to improve consistency and accelerate environment creation for retail technology teams.
• Integrated HashiCorp Vault and Keycloak into cloud services to strengthen Platform Security, secrets handling, and identity controls, reducing embedded credentials and supporting governed access across shared engineering platforms.

Cloud Engineer at NFI Industries (2017-07 – 2019-04)

• Supported AWS Cloud Engineering for transportation and logistics systems, provisioning resilient cloud resources and applying Cloud Infrastructure Management practices to improve availability for shipment, warehouse, and integration workloads.
• Containerized internal services with Docker and supported Kubernetes Administration for logistics applications, standardizing deployment configuration, health checks, and resource settings to improve portability across shared environments.
• Built CI/CD Pipeline Development automation for integration services, connecting GitHub Repositories to build, test, and deployment stages while improving release repeatability for applications supporting freight and warehouse operations.
• Implemented Infrastructure Automation with Terraform and AWS CloudFormation, codifying networks, compute, IAM, and AWS RDS components to reduce manual provisioning and create consistent environments for logistics engineering teams.
• Adopted early GitOps patterns by storing deployment configuration with application code and using reviewed repository changes to control releases, improving auditability and operational consistency for transportation technology services.
• Strengthened Platform Monitoring with CloudWatch alarms and centralized logs, supporting Incident Response and Root Cause Analysis for service failures that affected data exchange among warehouse, carrier, and customer systems.

Junior DevOps Engineer at Edmentum (2016-08 – 2017-07)

• Supported cloud-hosted education applications by assisting with AWS Cloud Engineering tasks, environment configuration, and Cloud Infrastructure Management procedures that improved consistency across development and test systems.
• Created Infrastructure Automation scripts and reusable AWS CloudFormation templates for application environments, reducing manual setup effort and introducing Infrastructure as Code practices for education technology delivery teams.
• Built foundational CI/CD Pipeline Development jobs that automated application builds, unit tests, and deployments, helping developers release learning platform updates more consistently across shared nonproduction environments.
• Packaged application components with Docker and assisted with Kubernetes Administration experiments, documenting container configuration, service dependencies, and deployment steps for teams modernizing education software delivery.
• Supported IAM access reviews and Platform Security tasks by validating permissions, rotating credentials, and documenting least-privilege procedures that protected student-facing services and internal education technology resources.

Bachelor's Degree in Computer Science – Miami University