E-8 · Veteran · DevOps
Veteran DevOps Engineer. Built production municipal systems and a full serverless AWS portfolio with Terraform.
U.S. Army Master Sergeant (E-8) who now ships AWS, Terraform, and serverless systems — including townofwiley.gov and the BusBuddy tooling that cut school-transport errors 30%.
Wiley, Colorado 719-640-2230 bigessfour@gmail.com LinkedIn
Live serverless portfolio — private S3, CloudFront OAC, visitor API, and GitHub Actions with no long-lived AWS keys.
Architecture →Live townofwiley.gov — Angular on Amplify with AppSync CMS and serverless backends for a real municipality.
Live site →School fleet and route tooling that cut operational errors 30% for a 12-person transportation team.
Source →Mobile-first inventory for a local retailer — UPC scan, reorder alerts, and Lambda sales forecast.
Live app →Municipal finance workspace on Amplify with a thin API and Syncfusion UI.
Source →Local-first clerk knowledge tracker for small-town offices.
Source →React + Flask + Ollama behind an ALB. Demo stack powered down for cost.
Source →Multilingual assistant on LangChain + Amazon Bedrock.
Source →Deep RL demo — an orange cube learns free throws with PPO.
Source →4 credentials
Taking my past experiences, developing new tech skills to bring meaningful tools to existing problems
Projects
Four pieces a hiring manager can verify in a minute — production impact first, then the rest behind a disclosure.
Production municipal website for Wiley, Colorado — Angular SPA hosted on AWS Amplify with Amplify Studio / AppSync CMS, bilingual EN/ES, document hub, NWS weather proxy, severe-weather alert signup, contact-update workflows, SES email alias routing, and Paystar payment integration scaffold.
Modern school transportation management — fleet, routes, and student assignment with Syncfusion WPF UI. Continues the Wiley School District ops story that delivered a measurable 30% reduction in transportation errors.
Mobile-first inventory optimization PWA for a Wiley retailer — camera UPC scanning, stock alerts, offline-friendly sync, and a Lambda-based sales forecast (weekday patterns + local events) with optional SageMaker Canvas path.
This site — glassmorphism UI, live visitor counter, IaC-managed infrastructure, and CI/CD deployment pipeline. Built with context-first agent workflows and automated quality gates before every production release.
Municipal finance workspace with Syncfusion UI, Aurora PostgreSQL, thin API on App Runner, Cognito auth, and QuickBooks import.
Local-first clerk knowledge tracker for small Colorado municipalities — deadlines and documents on Synology/NAS with optional local Ollama.
Full-stack AI chat behind an ALB with private-subnet Auto Scaling Groups. Demo stack is powered down for cost; IaC stays in the repo.
Multilingual AI assistant from Code Platoon week 13 — LangChain on Amazon Bedrock with CLI and Streamlit entry points.
Deep-reinforcement-learning demo — an orange cube learns free throws with Unity ML-Agents PPO.
Experience
Education
Colorado State University, Fort Collins, CO
Associate-level: Management (24 SH), Health Sciences (21 SH), Logistics (18 SH)
Vocational: Motor Transport (15 SH), Supply Chain (12 SH)
Skills
Visual Studio, GitHub, Microsoft Access/Excel (VBA/Pivot), SharePoint, Flask, React, Amazon SageMaker & Bedrock consoles
Google Data Analytics Professional Certificate — SQL, Tableau, Python, Excel / Sheets, stakeholder dashboards. Verify on Credly →
Terraform, GitHub Actions, Kubernetes, SageMaker, Bedrock RAG/agents, prompt evaluation. Curriculum →
Context-first agent workflows, human review before merge, CI quality gates, and secrets injected at deploy — never committed. Contributor setup →
Architecture
Private S3 + CloudFront OAC, custom domain, security headers, and a serverless visitor counter (API Gateway + Lambda + DynamoDB) — all Terraform, deployed with GitHub Actions OIDC. Diagram and runbook: infra ARCHITECTURE.md · build story · CRC spec.
GET /visitors endpoint with CORS for the resume site
CRC steps 7–9
visitor_counter.tf →Lambda execution logs with 14-day retention
Ops / observability
visitor_counter.tf →Documented protections from AWS security guidance. Paid services (WAF, Shield Advanced, GuardDuty) are intentionally not used. No account IDs, role ARNs, or alert emails are published here.
Managed DDoS protection at the CloudFront and Route 53 edge — included for all AWS customers.
AWS docs →All four block-public settings, SSE-S3 (AES256), versioning, and bucket-owner enforced ownership.
AWS docs → storage.tf →Origin Access Control for private S3 reads plus DenyInsecureTransport on the bucket policy.
AWS docs → cdn.tf →CloudFront policy adds HSTS, XSS protection, frame deny, and referrer policy on every response.
AWS docs → cdn.tf →CI/CD uses short-lived STS credentials — no long-lived AWS access keys in GitHub.
AWS docs → bootstrap/main.tf →IAM trust policy allows only the infra and frontend repos on the main branch to assume the deploy role.
AWS docs → bootstrap/main.tf →HTTP API stage rate and burst limits return 429 when traffic exceeds configured thresholds.
AWS docs → visitor_counter.tf →Visitor API accepts browser requests only from production site origins (plus localhost for local dev).
AWS docs → visitor_counter.tf →Execution role grants DynamoDB GetItem and UpdateItem on the visitor counter table only.
AWS docs → visitor_counter.tf →Reserved concurrency limits parallel executions to reduce runaway cost during abuse.
AWS docs → visitor_counter.tf →External-access analyzer monitors for unintended public or cross-account resource access.
AWS docs → security.tf →Monthly cost budget notifies the account owner on forecast and actual spend — alert email set in private tfvars only.
AWS docs → budgets.tf →Standard Lambda metrics trigger alarms on errors and unusually high daily invocations.
AWS docs → security.tf →GitHub supply chain: branch protection, secret scanning, Dependabot, and manual approval on infra prod deploys (repo settings). Secrets and license keys are injected at deploy — never committed to source control.
Remote state storage for infrastructure versioning
CRC step 12
bootstrap/main.tf →Terraform state locking — prevents concurrent applies
CRC step 12
bootstrap/main.tf →GitHub Actions federation — no long-lived AWS keys in CI
CRC steps 14–15
bootstrap/main.tf →Scoped permissions for Terraform apply and S3 deploy
CRC steps 14–15
bootstrap/main.tf →js/config.js
Credentials
Amazon Web Services Training and Certification
Verify credential →
Amazon Web Services Training and Certification
Verify credential →
Coursera · Google
Verify credential →
Code Platoon · Echo Platoon cohort
View aico-echo curriculum →
U.S. Department of Veterans Affairs · Chapter 31
Learn about VR&E →The Manufacturing Institute · 25+ Foundational Badges
Open Map My Future →Recognition
Contact
Wiley, Colorado