Owner, Principal Consultant
2025—Shrug PW Consulting · Bedford, MA
- Architect and deploy bare metal, containerized, and cloud infrastructure for clients across defense, education, and enterprise sectors.
- Design and build standardized Linux system images (Ubuntu, RHEL, Rocky) and deployment pipelines using Ansible, Puppet, and custom automation tooling.
- Lead complex infrastructure migrations and disaster recovery efforts, including crisis response and system restoration for time-critical environments.
- Build custom monitoring, alerting, and observability solutions delivering actionable insights while reducing alert fatigue.
- Design and deploy production network infrastructure including routing, firewalls, VLANs, wireless, and fiber connectivity for multi-site organizations.
- Develop provisioning documentation, runbooks, and support procedures for client handoff and knowledge transfer.
- Provide open source strategy consulting and technical governance for organizations adopting or contributing to FOSS ecosystems.
Senior Infrastructure Engineer
2021–2025Ctrl IQ (CIQ) · Remote
- Performed formally-sponsored contributions to Rocky Linux and RESF infrastructure, bridging company goals and upstream project sustainability.
- Led cross-functional efforts to scale CIQ’s build and release infrastructure for RHEL-derivative products based on Rocky.
- Designed and maintained hybrid CI/CD pipelines for open and closed-source systems, integrating GitLab, Koji, and internal build/test runners.
- Championed upstream-first development practices, ensuring internal engineering work could be contributed back cleanly to RESF when appropriate.
- Provided technical leadership and emergency response across CIQ’s internal infrastructure stack — networking, packaging, on-call rotation.
- Advised CIQ leadership on open source community dynamics, trust-building, and governance best practices.
Director, Infrastructure
2020—Rocky Enterprise Software Foundation (RESF) — Rocky Linux · Remote (Volunteer)
- Co-founded and lead infrastructure for the open source rebuild of CentOS Linux (Rocky Linux), coordinating a global team of more than thirty volunteers.
- Design and operate hybrid infrastructure spanning public cloud and physical data centers for global mirror distribution, CI/CD pipelines, and release engineering workflows.
- Build and maintain scalable public-facing services — Koji builders, HTTP/RSYNC pools, mirrorlist, and signing infrastructure — supporting 3 billion+ requests/month and 1+ PB/month of traffic.
- Develop and maintain Peridot, the open source build system powering Rocky Linux and CIQ’s RHEL-derivative product lifecycle, for scalable, reproducible, secure builds.
- Build and maintain a cryptographic enclave for UEFI Secure Boot signing, enabling trusted boot for Rocky Linux and downstream derivatives.
- Architect secure-by-default systems and enforce best practices in CI/CD, credential management, artifact signing, and endpoint access control.
- Lead incident response and coordinate recovery for critical infrastructure outages across multiple time zones and providers.
- Manage infrastructure sponsorships and partner relationships for long-term project sustainability and cost-effective operations.
Founding Board Member
2020—Rocky Enterprise Software Foundation (RESF) · Remote (Volunteer)
- Established the RESF to support community-driven governance, infrastructure, and lifecycle planning for Rocky Linux and other open source projects.
- Represent technical community perspectives on the RESF Advisory Board and help shape project direction and policy.
- Advise on growth, sustainability, and alignment between corporate partners and community goals.
Contributor and Packager
2020—The Fedora Project · Remote (Volunteer)
- Maintain and test packages in EPEL and Fedora branches.
- Contributed to the Fedora RISC-V SIG, supporting alt-arch enablement and early ecosystem work.
- Participated in Fedora CommOps, helping shape community engagement strategies and project visibility.
- Advocate for upstream-first workflows and maintain contributor-friendly build/test automation.
DevOps Engineer, Senior Network Engineer
2015–2021KAYAK Software Corporation · Concord, MA
- Managed production and corporate networks across two data centers and 14+ global offices.
- Re-architected core switching to a modern spine/leaf fabric using BigSwitch Cloud Fabric (OpenDaylight).
- Replaced aging Juniper gear and unstable edge routers; improved interconnects with private links and a Boston POP for AWS Direct Connect.
- Designed and implemented a PII “bubble” to segment sensitive workloads from general production traffic.
- Led CDN modernization using Fastly + Varnish; built traffic shaping and A/B testing config.
- Maintained RADIUS and SAML-based MFA proxies for secure access to network gear.
- Owned alerting/on-call infrastructure; migrated incident workflows from PagerDuty to OpsGenie.
- Introduced Apache Airflow for analytics engineering, improving billing/reporting pipelines.