Shannon Merriwether

shannon@ingeniousconsulting.com

 

OBJECTIVE
 

AWS Cloud Architect seeking to drive an organization’s I.T. Business by producing higher ROI, maximizing value by utilizing automation technologies for deployment, CI/CD/CM, and migrations.

SUMMARY

20+ Years “Hands on the keyboards” in various senior level technical roles

Excellent leadership, written/oral communication, collaboration, strategic planning skills

Senior Admin of Windows/Unix, Networking, DB, Storage, DR, Security, Virtualization

SME leading architecture of AWS automated deployments, CM, CI/CD environments

SME technical issues (Physical hardware, OS, Network, Storage, DB, Web, Cloud)

SME Virtualization, containers (VMWare, EC2, Docker, Elastic Beanstalk)

SME for enterprise infrastructure in datacenter security, performance, monitoring

Testing the full SDLC of cloud enabled platforms; from development to delivery

Architecture of private, public, and hybrid cloud application fabric

Cross-functional collaboration with departmental that support multi-tiered applications

Consultant for application developers, product management, SaaS DevOps

Expert in architecting secure multi-tier, mutli-tenanted cloud fabrics environments

Expertise architecting globally distributed applications requiring data sensitive workloads

 

Advanced knowledge of Automating distributed AWS deployments

SME EC2 API’s Tools (Amazon SDK’s for .NET, AWS CodeDeploy

EC2 - Architecture deployments (Clusters, container instances, agents)

Configuration automation (shell, PowerShell, .NET, JSON, python)

Configuration management (CloudFormation, Puppet, CA Release Automation)

CD/CI integration using Jenkins, Git for software application versioning

Automation of application containers and AWS resources

(Elastic Beanstalk, CloudFormation, CodeDeploy, Lambada)

Automated deployment and configuration of multi-tier NodeJS applications

Experience architecting and migrating complex, multi-tier AWS applications

Experience leading HA/fault-tolerant, web, cloud deployments

Deployment of multiple instances with redundant cloud software stacks

Strong Linux administration skills in a cloud environment (Ubuntu, RedHat, SuSE)

Automation scripting in shell, Python 2.7-3.4, Powershell 2-4, JSON, yaml, node.js

 

Architecture of performance/space optimized AWS service offerings based on ROI

Automation of AWS deployments, configuration, management of instances

Architecture/configuration of monitoring (Events, Tag Instances, Reports, Limits)

Automated deployment of Amazon Machine Images (AMI’s) Amazon Linux

Automated deployment of RHEL, Ubuntu, CentOS, Windows Server 2008/2012 R2

Setup of image instance families gen purpose (compute, GPU, memory, storage) optimized

Configuration of instance types/t-shirt sizes - t1 micro, t2, t3, m4, c3, g2, r3, etc…

Creation of bundle tasks for AWS AMI instances

Design and creation multi-tenanted environments for Elastic Block Storage Volumes

Design of EBS Buckets, configuration of EBS Snapshots (encrypted/non-encrypted)

Configuration of AWS KMS Key ID , KMS Key Alias;

Design and implementation of AWS Key Management Solutions

Configuration of Security Groups, VPC’s , subnets, public IPS’s, IAM roles

Configuration of Elastic IP’s,  Key Pairs, LB’s, Network interfaces

Advanced Network Security, Application Security, Perimeter Security solutions

AutoScaling for Launch Configurations , Management of Auto Scaling groups

CloudWatch monitoring for instances for autoscaling/elastic event triggers

 

EC 2Container service (Deployment, scaling docker containers)

Applications, services, batch processing

ELB - Elastic Load balancing architect, configuration

RDS  - MySQL, Oracle, MS-SQL Server, Amazon Aurora, DynamoDB (NoSQL)

Configuration/troubleshooting of Elasticache in-memory caching and Elastisearch

S3 - Automated deployment, configuration, management of storage device settings

EBS Volumes, instance store volumes

Storage and content delivery using Storage Gateway for DR

Glacier for data archiving/backup

 

 

PROFESSIONAL EXPERIENCE

INGENIOUS CONSULTING SERVICES - Cloud & Security Architect (2/11 - Present)

Client - CA Technologies - Cloud Architect - SaaS DevOps - Santa Clara, CA (2/15 to 7/15)

Hired as Strategic lead Cloud Software/Hardware Architecture

Cloud Fabric/Application Deployment Automation, Infrastructure Configuration Management

SME: Automated deployments CI/CD, Monitoring, Scheduling, Orchestration (Puppet, Jenkins)

Consultant Private, public, and hybrid cloud solutions design, HA deployment (AWS, Azure)

Consultant : IDS/IPS,  XML Gateways, NextGen Firewall/Router, Host Based, Reverse Proxy

SME: Network Topology, LB, SOAP/REST APIs, Distributed Web Services, Mobile Commerce

Deployment of technology for YAML based deployment of blueprint configurations (Cloudify)

Automation of systems, network, DB, web installations via Scripting, APIs (Python, PS)

Private, public, and hybrid cloud solutions design, deployment (AWS, Azure)

Architecture and Design for automated installations using various vendor provided APIs

Deployments of virtual environments for development (Oracle VirtualBox, Vagrant, VMWare)

Design of cloud fabric/provider configurations using Juju charms/charm bundles (AWS, Azure)

Architecture of solutions that include Java SDK, Python, Ruby, Ruby Gems, JSON, .NET

Architecture of API based implementations for AWS (PowerShell, Java, Python,

Installation of Python 2.7, 2.8, 3.4 and python virtual environment with puppet (pip, pyvenv)

Config of Puppet Manifest files environment components (site.pp, init.pp, lamp.pp, python.pp)

Creation of resource definitions & custom puppet modules (Puppet Enterprise v3.x)

Configuring Hiera 1.8 data hierarchy, writing data sources, incorporating Hiera data into Puppet

Architecture, Deployment, configuration for VMWare ESXi 5.5, Client, ESX Hosts/DC’s

Automated installations of Ubuntu 14.04, Windows 2012, RHEL, MySQL, Apache2, Tomcat

Architecture and design of Docker containers docker registry and applications

Software Repository and CI/CD Tools: Jenkins Maven, Puppet, Github

Setup, configuration, management for repositories (Push, pulls, forking software, unit testing)

Connectivity/Updates: Git, wget, apt-get, yum, putty, sftp, https, ssh, telnet, curl, RDP

 

Client - United Health Group - Security Consultant – TVM – Remote - (4/14 to 12/14)

 

Hired short term to help with Security Architecture and DevOps deployment automation

SME Automated deployments, configurations, Monitoring, Scheduling, Orchestration services

DevOps environment automated deployment support for O/S, Middleware, Virtualization

Design of O/S, Network, Database, Middleware, Virtualization, Storage, HA security solutions

Network traffic Security for encryption, SSL offloading, Traffic Acceleration,  HA Proxy

SME Automated deployments, configuration, Monitoring, Scheduling, Orchestration services

SME - Static/Dynamic Code, Penetration Testing, Cloud Application Security Tools

Strategic Lead and SME for Infrastructure Security Tools Maintenance, Upgrades, Installations

HP Fortify, CloudScan, Web Inspect 10.3, Administration, Patching, Upgrades, Maintenance

BurpSuite reverse proxy network vulnerability monitoring with HP WebInspectDB WI Sensors

HP AMP Administration, RulePack/RuleSet Upgrades, Configuring AMP/Web Inspect Sensors

Troubleshooting of failed penetration testing jobs, fail static/dynamic code analysis jobs

Troubleshooting, Administration, Support for Kali BackTrack on Red Hat Enterprise Linux

Support for tools used in secure coding and penetration testing, static/dynamic analysis

             

Client- County of San Mateo - Technical PM - ISD - Redwood City, CA (6/14 to 9/14)

 

Hired as a short term for Architecture, PM, Office365 /Azure migration to Cloud

Solutions Architecture, design, IAM implementation for Office365 Cloud SaaS migration

Installation, Administration, and DevOps Engineering for Microsoft Azure/ SaaS Cloud

POCs Use Cases of automated configurations (Lab QA, DEV, testing, environments)

Architecture of Microsoft Azure Framework, Infrastructure, Dev & Test, Web, Mobile

Application Services (Caching, IAM, Service Bus, Media, Web Sites, HPC, Analytics)

Data/DB Services (SQL Database, HD Insight, Table, Blob Storage, Hadoop, MongoDB)

Infrastructure Services (Virtual Machines, Virtual Network, VPN, Traffic Manager, CDN)

Custom Application Security solutions for Azure Web Application security (AD/SSL).

Java, php, node.js, python scripting for automation of virtual infrastructure configuration

 

Client - Allianz/FFIC - Security Architect - EA -  Novato, CA (10/13 to 12/13)

 

Hired as a short-term resource to help mitigate infrastructure security assessments

Architectural Governance Oversight, Review, Approval, Change Control

Design of Blueprints, RoadMaps, Reference Architectures, Design Patterns

Consulting on Authentication, Directory Services, Authorization, SSO, AD, LDAP

Consulting on OIM/OAM, ODS, TAM, TDS, TIS, oAuth, SAML, WS-Federation

SME for Data privacy & Security (Data-In-Motion, Data-At-Rest, Data access/protection)

Architectural Governance Oversight, Review, Approval, Change Control

Design of Blueprints, RoadMaps, Reference Architectures, Design Patterns, workflows

Manual Testing of Server ,Web, application, and DB application security

.NET/Java Coding, Debugging, SQL scripting, Java scripting, HTML, XML

Installation configuration and support of telemetry services IAAS, PAAS, SAAS

 

Client - Cisco Web-Ex  - Security Architect - InfoSec - Santa Clara, CA (6/13 to 10/13)

Hired to document and provide expertise on Cisco InfoSec policy

Strategic Infrastructure Security Architecture Lead; Systems Hardening consultant.

Design, Installation, Administration, DevOps Engineering for OpenStack IaaS Cloud fabric.

Architecture for OpenStack compute environments as cloud computing Fabric controller (Nova)

Design and Architecture for Networking connectivity core services neutron-api (Neutron)

Design and Architecture of User Roles, Tenants, Objects/Groups  (Keystone)

Design of secure OpenStack Authentication Encryption (SSLv3 or /TLS v1.1+, FIPS-140-2)

Directory Server/Domain/Web Authentication (LDAP, AD, SSO, SAML, OAuth)

Identity Service Architecture and Design for API End-Point URLs, Services (Keystone)

Design and Architecture for Block and Object Storage (Cinder/Swift)

Integration of Message Queueing services  and Message Server (RabbitMQ, Apache Qpid)

Design and Architecture for glance-api and glance-registry Image Services (Glance)

Custom Design and configuration of Dashboard and Views (Horizon) 

Custom Architecture, Configuration, performance tuning of Telemetry services (Ceilometer)

Architecture, Design, Administration, and performance tuning for Orchestration services (Heat)

Architecture, Design, Configuration, and Administration for DataBase Service (Trove)

Configuration and troubleshooting of DB Controllers/Nodes

Installation/upgrades of OpenStack Packages (RDO Repository, Python SDK, MySQL, Apache)

Installation of OpenStack Command Clients with pip/yum (Windows, Ubuntu, RHEL, CentOS)

Software patching and configuration for cloud infrastructure (OS, Application, Middleware)

Configuration/support for REST-ful APIs (HTTP, methods, URIs, media types, response codes)

Automated configuration, deployment, monitoring services (Puppet, PowerShell, python)

Design, Administration, Performance tuning of VMWare, Hyper-V, KVM virtual infrastructure

Administration of user/service accounts for OpenStack, Python Services, and Database services

 

Client- Dell  - Solutions Architect - Professional Services - San Mateo, CA (1/13 to 5/13)

             

Hired for a short-term project to manage Dell’s DC,  migrate network, server, storage 

Verifying router, switch, firewall security configurations ,VLANs (Cisco, Juniper, F5)

Architecture, administration SourceFire 3D v5.1 HA, FireAMP, FirePower, FireSight, Snort

Setup of pcap, SourceFire Real-time Network Analysis (RNA), OS Fingerprinting (p0f, snortfp)

Configuration  SourceFire estream for channel event collection of sensor data to (Front/Back)

Configuration of barnyard unified log reader, binary log alerts, FireAMP endpoint anti-malware

Config of FirePower/Sourcefire NGFW DC Ed. w/FireSight Passive IDS mode/Inline policy

Installation and configuration of preprocessors, detection engines, rules as a dynamic plug-in

Installation configuration, troubleshooting (Kiwi Syslog server,Snort Rules Engine,  DAQ v2.9)

Integration of SourceFire with SIEM/Network  products (Symantec, Solarwinds)

Integration of SourceFire with network (Cisco, Netscreen, CheckPoint, IPTables & IP Chains)

Configuration for REST-ful APIs using HTTP, methods, URIs, media types, response codes

Automated configuration, deployment, monitoring, of VM’s (Puppet, PowerShell, python, shell)

Design, Administration, and Performance tuning of VMWare, Hyper-V, KVM infrastructure

Administration of user and service accounts for Azure, Python Services, and Database services

 

Client - AIG - Solutions Architect - SAFG- Woodland Hills, CA (5/12 to 10/12)

Hired short term for DataCenter Migration of Servers, Database, Storage, Web

Configuration of messaging protocols (HTTP/HTTPS, JMS, FTP) Message Broker

Administration of XML parsing DataPower SOA integration appliances

Configuration of HTTPS/SSL encryption, firewall filtering, and digital signatures

Architectural design of Enterprise Service Bus (SOA) architectures

Multi-protocol gateways, Service Proxys, XML firewalls, WAF’s, XSL Accelerator (Proxy(s))

Hands-on break-fix support related to architectural design and systems integration.

Installation, configuration, and troubleshooting of WebSphere Message Broker

Configuration of MQ Publish, Publish/Subscribe Services for Message Broker

Administration of WebSphere Message Broker Explorer, services, agents, nodes

Configuration XML, SOAP/XML protocols/services for MQ, Message Broker, admin console

Creating new message broker services and message flows with Message Broker toolkit

Administration and configuration of Message Broker Message Sets and Message Flows

Troubleshooting Message Broker Message Sets running as a thread within an execution group

MQSI commands interface configuration, administration, troubleshooting, and support

Installation, configuration, troubleshooting, and support of WebSphere Application Server 7

Creating customized WAS profiles for automating configuration testing (Profile Manager tool)

Logical and physical architectural systems and database design of ESB/SOA for Web services

Design of cloud computing, hosted web applications, IaaS, PaaS, and SaaS environments.

 

Client - ATT Mobility - Systems Architect- Mobile Engineering - Remote- (4/12 to 5/12)

Hired as s short-term consultant for Virtualization, SAN, Network, Web applications

Principal DataCenter Infrastructure Architect, Security, and Systems Administrator

Security consultant to support AT&T’s mobile development, security, and testing environment

SME specializing in Cloud based Systems Virtualization, SAN, Network, Web applications

Building, designing, and supporting the CSO Network Based Security infrastructure.

Integrating event reporting and alerts with automated scheduling of resources.

Security on Mobile devices to include laptops, smartphones and mobile handsets.

Security System Engineering for mobile iOS and Android, SAN, storage devices

Red Hat Enterprise Linux (5&6) automated installation, configuration, and monitoring

Unix systems support for (Windows 2008 Server, Solaris, Red Hat Linux)

Support for IBM Blade Center H, Oracle Sun servers, EMC, Dell, Cisco, Brocade

Installation and configuration for remote access (RSA, Fortinet, Cisco VPN)

 

Client - IBM - Systems Architect - GTS - Remote - (10/11 to 12/11)

Hired as a short-term SA/SME for roll-out of tools for Systems Infrastructure Security

Security IAM, Change Control Systems, Auditing for Compliance, Exception Policy Reporting

Responsible for creating detailed technical implementation process for change control/QA

Responsible for Systems Health Checking, vulnerability scanning, End-Point Monitoring

O/S installations, service packs, maintenance packs, updates, server patching

Windows 2008 R2 (Hyper-V)server builds, configuration, troubleshooting, and support

Installation and support of VMware vCenter, VMWare storage and network configuration

SME VMware ESX 4 Server/ESX4i/5i build automation, configuration, hardening, monitoring

 

Ameriprise  - Lead Storage  - Hosting Infrastructure Services – (6/10 to 2/11)

             

Hired as a Strategic IT Solutions Architect (Virtualization, Storage, DB, Infrastructure)

Lead IT Architect and facilitator for JAD sessions, Systems Integrations, Kickoffs, and Uplifts

I.T.  Implementation SME for Compute, Storage, Messaging & Collaboration,  IT Portfolios

Architectural Governance, Bill of Materials Reviewer, Change control Reviewer/Approver

Server, Network, Storage, Datacenter space, Capacity planning for E.A. Portfolios

Consulting & Implementation Identity Access Management SDLC & User Revalidation

Architecture Directory Services (Authentication, Authorization, Access), SSO, RBAC

Primary contact for Vendor hosted environments (IBM, CSC, HP, Rackspace)

Primary technical solution approver for vendors (VMWare, Oracle, IBM, Microsoft, Symantec)

Designed\Approved HA designs (Clusters, Shared F/S, VM’s, JVM’s, and Grid Computing)

SME (X86/X64 hardware, O/S, Virtualization, Web Application Servers, Storage)

SME consultant for Business Continuation, Application Recovery, DR, HA configurations

VMWare VSphere/ESXi architectural design consulting\performance troubleshooting

Microsoft MSCS, IBM AIX HACMP, RHCS, and Veritas Cluster Server design/support

Oracle performance tuning (ADDM, AWR, SQL (Advisor, tuning statements, indexes, Profiler))

 

PC Convenience                Director - Technical Sales Operations  - (09/09 to 06/10)

Thomson Reuters              Sr. Systems Engineer - Global Automation Ops - (4/09 to 7/09)

IBM Global Services        Systems Architect - Global Unix Eng -  (10/06 to 04/09)

Digital River         Systems Architect – IT Infrastructure - (10/05 to 10/06)

US Bank                             Midrange Engineer - Midrange Services  - (7/05 to 10/05)

Wells Fargo       Applications Architect - Retirement Benefits (01/04 to 7/05)

Symantec         Sr. Technical Engineer - Database Engineering  - (10/01 to 01/04)

Ban-Koe Systems              DBA -  IT Delivery & Professional Services (01/01 to 06/01)

Target Corporation          Level II Help Desk Analyst  -  PC Support    (01/00 to 12/00)

IBM Global Services        Network Engineer - Global Delivery Services - 6/99 to 12/00

Carlson Wagonlit Travel       Sr. Business Analyst  - Infrastructure Services  - (5/97 to 5/98)

EDUCATION

National American UniversityBachelor's of Science, Management Information Systems (8/01)

Concentration in RDBMS, emphasis in programming and development methods

 

Brown CollegeAssociate’s of Applied Science, Information Technology (4/97)

Concentration in Business Administration, emphasis in I.T.