Professional Summary
I am an emerging DevSecOps Engineer with hands on experience building secure, cloud infrastructure on AWS, EKS, and GitLab CI/CD pipelines. I have demonstrated the ability to integrate security gates (SAST, container scanning, policy enforcement) from commit to production. I hold an active DoD Interim Secret and DHS Suitability clearances from work at The MITRE Corporation's National Cybersecurity Center of Excellence (NCCoE). I hold both CompTIA Security+ and AWS Certified Cloud Practitioner certifications.
Professional Experience
MITRE Corporation — DevOps Engineering Intern
May 2025 – Present
DOD – Interim Secret Clearance. DHS Suitability
- Architected and deployed event driven AWS workflows using TypeScript CDK, defining Lambda functions triggered via EventBridge rules to automate EC2 instance tagging across four environments, replacing error prone manual processes.
- Built serverless API integrations using AWS Lambda and API Gateway, handling request routing and downstream microservice orchestration across isolated environments.
- Provisioned reusable AWS Budget constructs with TypeScript CDK variable monthly targets, multi threshold alerts, version controlled and peer reviewed via GitLab merge requests, enabling consistent cost governance at scale.
- Configured Horizontal Pod Autoscaler in EKS and validated scaling behavior under simulated load, confirming CPU/memory thresholds triggered correctly, ensuring system availability and preventing resource exhaustion.
- Designed and maintained GitLab CI/CD pipelines with security gates (SonarQube SAST, Trivy container scanning) enforcing compliance before any artifact reached staging.
- Wrote Python integration tests with pytest against REST microservice APIs, validating endpoint behavior across service boundaries.
California State University Chancellor's Office — IT Support Assistant
July 2024 – September 2025
- Managed Active Directory user lifecycle for staff, faculty, and student workers across Windows 10 endpoints provisioning and deprovisioning accounts with role based group assignments controlling access to file shares, applications, and network printing.
- Automated user onboarding and offboarding via Bash scripts, reducing provisioning time from 15 minutes to under 5 minutes and eliminating manual errors; maintained script documentation and updated SOPs to reflect current provisioning procedures.
California State University Long Beach — Desktop Support Assistant
October 2023 – October 2024
- Troubleshot network connectivity, application, and OS level issues on Windows 10 systems, performing basic configuration changes and documenting resolution steps to contribute to the team knowledge base.
- Enforced access control and security compliance during hardware deployments and software installations, ensuring endpoints met organizational security policies prior to returning to users.
Projects
- Provisioned AWS infrastructure using Terraform — VPC (10.0.0.0/16), private/public subnet tiers, NAT Gateway, IAM roles with least privilege, EKS cluster, S3 remote state with DynamoDB locking, eliminating manual console provisioning entirely.
- Built a staged GitLab CI/CD pipeline enforcing security gates before any artifact is produced: pytest unit/integration tests → Trivy SAST/vulnerability scan → Kyverno Kubernetes manifest policy validation → Docker build → AWS ECR.
- Deployed two Python FastAPI microservices to EKS using Helm, communicating via Kubernetes DNS service discovery, with nodes isolated in private subnets; transitioned outbound routing from NAT to VPC Endpoints for cost savings.
- Configured end to end observability using Prometheus (metrics scraping via FastAPI instrumentator), Loki + Promtail for log aggregation, and Grafana dashboards tracking latency, health, and resource utilization across the cluster.
- Deployed static resume site to a private S3 origin with global delivery via CloudFront CDN, custom domain through Route 53, HTTPS via ACM, and WAF filtering inbound traffic against OWASP Top 10 rules before reaching the edge.
- Integrated an AI powered resume chatbot using a serverless backend — API Gateway receives browser requests, invokes a Python Lambda function that securely retrieves an Anthropic API key from environment variables and proxies messages to Claude, keeping credentials server side and out of the client.
- Introduced a feature branch workflow with merge requests, isolating new feature development from main and leveraging the existing CI/CD pipeline to validate builds on the feature branch before merging.
- Eliminated static AWS credentials entirely by configuring OIDC federation between GitLab and AWS STS AssumeRole, granting the pipeline a scoped IAM role dynamically per run with no long lived secrets stored in GitLab.
- Performed DAST against the live CloudFront URL using OWASP ZAP, surfacing 8 findings including missing security headers and server version disclosure remediated by configuring a CloudFront Response Headers Policy.
- Designed and implemented a custom async port/service scanner (Python asyncio) with concurrent connection handling, timeout management, and rate limiting, deployed initially on EC2 via Ansible with cron scheduling and flat file output as a deliberate legacy baseline.
- Built a custom service fingerprinting engine parsing raw banner responses into identified software and version, feeding a CVE correlation and scoring engine blending CVSS severity, exploit availability signal, and network exposure to rank findings beyond static severity alone.
- Integrated AIpowered capabilities modeled on Tenable ExposureAI: natural language query translation over scan findings via Claude API, per finding AI generated remediation guidance with CVE specific context, and AI enhanced prioritization narrowing actionable critical findings.
- Modernized the platform from manual VM deployment to containerized microservices on EKS via Docker and Helm, migrating scan history from local flat files to RDS PostgreSQL, replacing cron with EventBridge/SQS job queuing, and introducing Terraform for all infrastructure.
- Built a GitLab CI/CD pipeline with pytest (scanner, fingerprint, and scoring logic must pass), Checkov IaC scanning, Trivy container scanning on API and worker images, and OIDC federation to AWS, alongside Prometheus/Grafana dashboards tracking scan throughput, finding trends, and SQS queue health.
Education & Certifications
California State University, Long Beach
Bachelor of Science in Computer Science
Technical Skills
- Cloud & Infrastructure: AWS (EKS, EC2, S3, Lambda, VPC, IAM, Security Hub)
- Programming/Scripting: Python, Bash, Terraform
- Container & Orchestration: EKS, Docker
- CI/CD: GitLab CI/CD, SonarQube, Trivy, JFrog
- Observability: Prometheus, Grafana, CloudWatch
Leadership & Activities
- NCL + CrowdStrike Mentorship Program Mentee — Fall 2025
- Initiated re-establishment of the Cybersecurity Club at CSULB
- Former Division I Scholarship Athlete — Middle Tennessee State University