Principle Cloud Architect/Team Lead
Morgan Franklin, Feb 2020 to present:

 

• Setup and managed SSO from Azure AD to AWS, created permission sets, roles, etc

• Expert AWS knowledge - Designed, built and managed large server farms in AWS Cloud.

• IAM Identity Center setup of custom perm sets for SSO.

• Landing Zone, Control Tower, AWS Organizations, OU’s, custom Service Control Policies (SCP’s).

• S3 buckets, replication, auto-archive, bucket policies and cross account role setup.

• Setup PowerShell scripts run by task sched for automation between servers and configurations.

• Implementation of Lambda functions and EventBridge using Python.

• AWS IAM design, Zero Trust implementation and management based on least privilege access.

• Setup BASH scripts to automate the setup of HTTP services and YUM updates for Linux servers.

• Provisioned and managed physical and virtual FortiGate firewalls.

• AWS Security Groups/NACLS.

• Infrastructure as code using Terraform, Python/BOTO3/Lambda

• Provisioned Direct Connect

• Switching and routing technologies in physical and virtual environments.

• Security controls and tools for cloud monitoring – CrowdStrike and Prisma.

• Zero Trust technologies, CIEM, EDR, ZTNA

• Databricks administration.

• Web Application Firewall (WAF) setup and management with end-to-end encryption.

• Designed, migrated and support over 50 AWS enterprise sites, including:

  • VPC setup, Transit GTW, NAT and INET GTW, VPC peering, VPC Mirroring.

  • Route 53 DNS management.

  • LB setup and management across Availability zones.

  • Security group and NACL management.

  • Write Lambda functions using Python.

  • AWS RDS SQL setup, management, SQL DB replication to RDS using DMS.

  • SES and SNS setup and management.

  • IAM management, creating custom roles, creating users and detailed access to services.

  • VPN setup and management, configured both AWS and on-prem firewalls such as Cisco ASA & Firepower and Fortigate.

  • IP subnetting/network design/IP CIDR, AWS Global Accelerator, BYOIP.

  • Infrastructure as code using Terraform, CloudFormation, Python/BOTO3 and Lambda

  • EC2 builds and management, scaling up, scaling down, snapshot, restores, create golden images (AMI’s).

  • Layer 3 network routing and subnetting.

  • AD connector to external AD on customer prem and Azure.

  • AWS Directory service with trust relationship to AD on customer premise and Azure.

  • SSO and MFA setup for AWS access.

  • Elastic Container Service (ECS) and Elastic Container Registry (ECR).

  • Experience in working and delivering small, medium and enterprise end-to-end projects.

 

 

 

Lead engineer and Cloud Architect

BrightRay Consulting 1 year contract 2019
Managed AWS and on-prem platforms for clients
 

• Work in Cloud/DevOps Departments, primarily involved in migrating AWS and various other cloud platforms.

• Advancing cloud integration and ops, driving DevOps capability to improve velocity, resiliency and efficiencies.

• VMWare ESXi versions 4, 5, 6 including vSphere and vMotion, VirtualBox, Vagrant, HyperV

• Routing, VLAN and CIDR configurations

• Infrastructure: Cisco, Dell and HP switches, Fortigate and Palo Alto firewalls

• Designed, migrated and support AWS enterprise sites, including:

  • VPC setup, Transit GTW, NAT and INET GTW, VPC peering, VPC Mirroring.

  • Infrastructure as code using CloudFormation

  • Route 53 DNS management.

  • LB setup and management across Availability zones.

  • Security group and NACL management.

  • AWS RDS SQL setup, management, SQL DB replication to RDS using DMS.

  • SES and SNS setup and management.

  • IAM management, creating custom roles, creating users and detailed access to services.

  • VPN and Transit GTW setup and management, configured both AWS and on-premise firewalls such as Fortigate and Sonicwall

​

 

Cloud and Manager Infrastructure Engineer

Zylomed a subsidiary of Nuance Communications, November 2014 to November 2018
 

• Joined Zylomed as part of an acquisition of RezZiliant to lead the technology, client base and financial transition.

• Setup and managed the AWS environment for migration of servers from multiple datacenters to AWS.

• VPC setup, subnets, elastic IP’s, NAT GTW, DNS and routing management

• Daily infrastructure management - FortiGate firewalls, Cisco ASA firewalls, Cisco routers, & Dell Switches.

• Designed, implemented and provided oversight for the Severity Incident Response team.

• Server infrastructure setup and management experience in IIS, VMWare DNS, DHCP, AD, SMTP and FTP.

• Built and managed various a 24x7x365 NOC's to monitor and respond to issues using monitoring tools such as CloudWatch, Redgate, SolarWinds, ExtraHop, WhatsUp and SevOne.

• AWS and Azure cloud management, design and migrations.

• Managed the knowledge transfer, technology migration, employee transitions and vendor contracts.

• Infrastructure: Cisco, Dell and HP switches, Fortigate, Palo Alto and Cisco firewalls

• Transitioned multiple onshore and offshore development teams from Waterfall to Agile development.

• Routing, VLAN and CIDR configurations

• Design, implement and deploy various VPN’s for site to site and on-premise to AWS.

​

Senior Network Architect/Lead Engineer

RezZiliant, January 1999 to November 2014
 

• RezZiliant was a Healthcare based information technology company that grew to 180 employees/ contractors in a few short years and was acquired by two separate companies. Access Northeast in 2010 and Nuance Communications in November 2014. During the acquisition I worked with both companies to transfer technology and clients with a 93% retention rate. RezZiliant provided MSP, colocation, system integration, application development and cloud services for over 400 customers. RezZiliant owned two HIPAA compliant data centers that provided 24x7x365 uptime and services and also offered a HIPAA compliant Web-Based document management and voice management platform.

• Designed, built, oversaw the Information Technology enterprise, consisting of 180+ users.

• Participated in senior level thought leadership meetings and was lead advisor on the technical aspects and potential hurdles of new hardware implementation.

• Configured, built and supported VMware ESXi Versions 4, 5 using HP servers and HP and Dell SAN arrays.

• Managed the image builds, resource allocations, image moves and backups for disaster recovery.

• Provided outsourced helpdesk, disaster-recovery, managed backups & app support for Fortune 1000 companies.

• Configured/Managed customer networks using OSPF/BGP4/RIP protocols, redundancy & firewall /security needs.

• Infrastructure WAN and LAN design and configuration.

 

Started in Information Technology in 1997
Helpdesk, network cabling, Website design, etc
​