Resume
Relevant Experience
Linux System Administrator — Clarkson University
Jan 2024 – Nov 2026 · Potsdam, NY
- Led the move to Rocky Linux 9 and maintained the Puppet environment that configures the Linux servers
- Migrated the virtualization environment from VxRail to an 8-node Proxmox VE and Ceph cluster
- Brought a 153-switch Juniper fleet under Ansible baseline management, with offline compliance checks
- Top contributor to Nagios monitoring for about 840 hosts: Linux and Windows servers, network gear, and UPSes
- Maintained high-availability, critical systems as part of a 24/7 on-call rotation
Cyber Engineer T2 — CACI Inc.
Nov 2018 – Jul 2023 · Rome, NY
- Built, secured, and automated in-house cloud environments for customers as part of a small agile team
- Deployed ESXi and KVM hypervisor clusters and managed segmented Juniper, HPE, Force10, and Cisco networks
- Automated the deployment and setup of RHEL and Ubuntu guests
Education
B.S. in Network and Computer Security — SUNY Polytechnic Institute
Aug 2013 – May 2017 · Utica, NY
- GPA: 3.47 overall, 3.72 in major; minor in Computer Information Systems
- Performed research on hypervisors, ARM devices, and Linux system benchmarks for capstone and independent study
- Worked part-time for the Computer Science department, then ran its networks for a year after graduating
Key Projects
VxRail to Proxmox VE Migration — Clarkson University
- Sized the move from VxRail to Proxmox VE and documented the migration process
- Built a NAS to stage the source VMs, since vSAN could not be used as a migration source
- Moved every VM onto the new 8-node Proxmox VE and Ceph cluster during a university break
- Set per-OS VM baselines for Windows drivers, SCSI and CPU options, and storage, for uptime
- Coordinated with the Windows, networking, and administration teams to finish with no service downtime
Rocky Linux 9 Puppet Conversion — Clarkson University
Jan 2024 – Oct 2026
- Led the Rocky Linux 9 migration, with the Linux fleet configured by a Puppet 7 codebase
- Top committer to that codebase, with more than half of its commits and per-server data for 187 servers
- Deployed changes to production automatically through r10k, Hiera, and GitLab CI on every push
- Wrote Puppet modules for HAProxy, break-glass access, network scanning, Ollama, and NVIDIA GPU drivers
- Maintained the fleet's automated patching module, writing nearly all of its changes
Customer Environment Automation — CACI Inc.
- Top contributor to SaltStack code for multiple customer environments, applied to production every night
- Automated RHEL, CentOS, and Ubuntu baselines: SSH, CA trust, central logging, and Zabbix monitoring
- Ran the internal certificate authority as SaltStack code, trusted on every host, plus Let's Encrypt
- Built central logging on Graylog and Elasticsearch, with separate feeds for web, proxy, and DNS servers
- Templated Apache reverse proxies and split-horizon BIND DNS; ran MinIO and Guacamole with LDAP sign-in on Docker
- Rolled out OpenVAS vulnerability scanning with chat alerts, Snort intrusion detection, and RADIUS
- Ported configuration from SaltStack to Ansible, with roles for Linux, FreeBSD, OpenBSD, and Cisco devices
Home Lab — Personal Network
- Two Proxmox VE clusters (9 nodes, 4.5 TB RAM), Proxmox Backup Server, TrueNAS Scale, and Juniper EX switching
- Self-hosted GitLab CI, a fleet-wide Wazuh SIEM, Zabbix, BIND and Pi-hole DNS, and Docker Swarm services
- 30 hosts managed by OpenVox (Puppet) through GitLab CI and r10k; VMs built and enrolled by OpenTofu
- 3-node bare-metal Docker Swarm on an FRR OpenFabric 10 Gb mesh, with GlusterFS and a keepalived/Traefik VIP
- Local LLMs (Gemma, Granite, Qwen) on vLLM and Ollama, including a vision model for camera hazard detection
Technical Skills
Software Skills
- Ansible — Proxmox/Ceph cluster automation, Juniper switch baselines, and porting a SaltStack codebase to Ansible
- SaltStack — Built customer environments from scratch with SaltStack, using agent and agentless methods
- Puppet — Top committer to a Puppet codebase for 187 Rocky Linux 9 servers; run OpenVox with r10k and CI at home
- Other — ZFS, Ceph, Terraform/OpenTofu, Kubernetes, Docker
Operating Systems
- Linux — Debian, Ubuntu, and RHEL/Rocky, with automated installs and configuration management at work and home
- Windows — Windows Server and Desktop, Hyper-V, and Windows VM driver baselines for a Proxmox migration
- BSD — FreeBSD storage servers at several jobs and personally for years; OpenBSD automated via SaltStack and Ansible
- Other — Proxmox; XenServer/XCP-NG; ESXi/VMware
Network Devices
- Cisco — Cisco routers and switches in a personal lab since high school; Cisco device roles in an Ansible codebase
- HPE — HPE switches running both ArubaOS and Comware
- Juniper — Ansible baselines and compliance checks for a 153-switch fleet at work; an EX4550 Virtual Chassis at home
- Others — Dell/Force10, MikroTik, Netgear, Cumulus, OPNsense, pfSense, OpenWrt
Hardware
- Servers — Almost a decade of building, racking, and maintaining physical servers at work and at home
- ARM — A 150+ core lab of ARM, RISC-V, and x86 single-board computers, built to test mass deployment
- Cameras — Axis, UniFi, and Reolink IP and PTZ cameras on an open-source NVR with GPU object detection