Senior DevSecOps and Technical Lead with strong Linux background and a focus on Application Security and experience with penetration testing

Specialties: Automation/Orchestration (Ansible, Puppet, Chef, Terraform, etc.), Backend Development (Python,Ruby, Go), Cloud Native Platforms (Kubernetes), Web Application Security, Reverse Engineering, WebApplication Pentesting


Staff DevOps Engineer


January 2024 - Present
  • DevOps Engineer for Core Services Team

Senior Platform Engineer / Technical Lead

Petabloc Cloud Consulting

March 2022 - October 2023
  • Led a team of 3-5 engineers to deliver various platform improvements for clients
  • Re-architected client's AWS organization to match their need for a more mature production environment
  • Assisted with SOC2 Type II audit
  • Designed and implemented new security practices for startup client
  • Took part in internal mentorship program, mentored several junior engineers in various technologies
  • Led a project to lift-and-shift a client's out-of-date Kubernetes environment, used this as an opportunity to re-conceptualize their current environment

SecOps Specialist

Scotiabank (Scotia Digital)

February 2017 - March 2022
  • Helped launch DevSecOps practice within Canadian Digital Banking Unit
  • Assisted in the launch of Scotiabank's brand new mobile banking app
  • Built automated DevSecOps Jenkins pipelines for SAST and DAST platforms (HPE Fortify & WebInspect Enterprise) as well as for Open Source Compliance (Blackduck) and Mobile App Security Testing for both iOS and Android (NowSecure)
  • Built out and ran Whitebox pentesting practice for Digital Factory applications
  • Built deployment pipeline for ScotiaOnline environment, cross-train ScotiaOnline developer team in CI/CD and Git
  • Ran office-wide CTF (Capture-the-Flag) ethical hacking tournament to raise awareness of common security issues.

DevOps Engineer (SD Elements)

Security Compass

January 2015 - February 2017
  • Supported development/deployment of Django/ReactJS-based Secure SDLC web appliance used by major banks, Fortune 500s
  • Assisted clients with deployment and integration issues
  • Developed/maintained internal vSphere lab environment and wrote custom tools to manage/auto-provision virtual machines in the lab.
  • Developed production log monitoring system based on Graylog2 + Elastic Filebeat
  • Assisted in maintenance of production SaaS environment (actioning alerts, assisting with system/app upgrades, planning maintenance windows).
  • Assisted in development/deployment of new infrastructure (puppet) code for various components within SD Elements production SaaS environment.
  • Migrated CI environment from Jenkins to Gitlab CI.
  • Developed elastic CI runner environment using Gitlab CI + Docker Machine.
  • Assisted Security Compass’ Advisory team in conducting routine penetration tests on the SD Elements application itself.

Technical Systems Analyst (Contract)

Royal Bank of Canada

July 2014 - November 2014
  • Assisted in migration from Nagios XI/Groundwork-based monitoring system to centralized Zabbix solution.
  • Adapted current custom check scripts to work with Zabbix API.
  • Provided new Zabbix-friendly, all-in-one method for obtaining metrics from heterogeneous (DB2, Oracle, MySQL, Sybase) database environments.

Systems Admin (Unix Infrastructure Team)

LoyaltyOne, Inc.

September 2012 - June 2014
  • Worked with key stakeholders from various lines of business, was the point-of-contact/SME for several high-visibility projects including several POCs for various Big Data applications.
  • Assisted in revamping and further automating our provisioning/decommissioning process through the use of tools such as Puppet, mCollective, IBM Urban Code Deploy and Red Hat Cloudforms.
  • Assisted in developing a unified environment and application monitoring system using Nagios, Graphite and Dashing.
  • Ongoing responsibilities included ongoing support for ETL/Data Warehousing teams, infrastructure planning and implementation, assistance with OS, database and application patching, process documentation and knowledge transfer, monthly on-call pager and ticket support, and various sundry systems administration tasks for the many teams within LoyaltyOne’s IT department.

Linux System Administrator (Contract)

Decisioning Solutions

October 2011 - April 2012
  • Aided in migrating ageing Solaris 9/10 data warehouse platform to CentOS.
  • Implemented monitoring system for VMWare ESXi 5.1 and JBoss 7 Application Servers using Zabbix alongside custom python-based VMWare-to-Zabbix API middleware.
  • Performed successful POC and upgrade from JBoss 4 to JBoss 7.
  • Designed automated environment provisioning process using puppet/mCollective.
  • Ongoing responsibilities included security patching and various sundry requests from development teams.

Linux System Administrator (Contract)

Primary Support Systems

March 2011 - May 2011
  • Responsible for providing infrastructure services and support to SMBs across the Greater Toronto Area in the form of hosted mail/groupware, VDI, VPN, and web hosting among other services.
  • Developed a new internal documentation system
  • Helped establish new internal security policies
  • Designed and implemented a Zimbra-based groupware solution as well as a new XenServer-based virtualization platform

Linux System Administrator (Contract)

The Debono Group

March 2010 - September 2010
  • Built highly available custom Linux-based virtualization cluster from the ground up using OpenVZ + Heartbeat Implemented new security procedures and practices including monthly Nessus scans
  • Built highly available Debian/Ubuntu Linux-based Flash Media Servers as part of a video logging application Created custom video archive/backup solution in Python using AWS S3
  • Redesigned documentation system
  • Implemented IPSec VPN technology for remote administration of the network

Linux System Administrator (Contract)


September 2009 - December 2009
  • Developed HA web proxy cluster using SuSE Linux Enterprise Server, Heartbeat and Nginx
  • Assisted in infrastructure maintenance tasks (Security updates/patches, system maintenance)
  • Worked in conjunction with marketing staff on a large-scale Linux web server migration
  • Assisted in the construction of a Highly-Available Citrix XenServer Cluster for use in-house
  • Assisted in the implementation of an Oracle 12g RAC in both in-house lab as well as production environments.

Linux System Admin/Helpdesk Tech

HostForWeb, Inc.

April 2007 - September 2009
  • Off-Site System Administration of CentOS, RHEL, Fedora, Debian, and FreeBSD environments
  • Network and Server Security Hardening
  • Managed large-scale (approx. 150 physical hosts) CentOS/OpenVZ-based virtualization farm
  • Heavy use of Kayako SupportSuite as a client portal to company trouble ticket system
  • Provided user training and product updates.


Hashicorp Certified Terraform Associate

Obtained May 2022

AWS Certified Cloud Practitioner

Obtained January 2023