ISS8 Sr. Cloud Identity Engineer / Team LeadJanuary 2021 – Current
Department of Admin Services, EIS/DCS
Led identity migration duties during the COVID M365 push in the first months of employment at DCS. Developed automation tooling to migrate distribution lists from Active Directory to Exchange Online.
Built and maintained a hybrid Azure cloud identity sync infrastructure. Required maintaining a close vendor relationship for the managed service cloud identity sync portion (ADSS). Between the two services, they sync ~46k identities across 9 tenants, tracking ~450k records.
Develop tooling for identity observability and orchestration to aid in operating Enterprise sync infrastructure. This includes sidecar services to allow for administering legacy systems with modern DevOps practices and CI/CD pipelines for identity data quality tests and remediation.
Administer key platforms for the organization outside regular duties as part of a cross-functional team: GitHub Enterprise, 1Password Business.
Wrote numerous briefs for customers and internal staff, introducing technologies new to our Enterprise: modern authentication, MFA, Entra Hybrid-Join, Azure Table Storage, managed identities and workload identities.
Utilize clean-room development practices to ensure tooling can be safely shared with customers as a reference implementation to drive adoption of Cloud identity technologies in traditional VM and Linux container deployments.
Mentor team in DevOps practices, pushing to adopt Git as core tooling, pull-requests for peer review, GitHub Actions for production deployments, declarative config orchestration (PowerShell-DSC, Ansible) and managed key vault services for secret management. Using these skills, a teammate and I developed our first dependency-free Azure service integrations that underpin our orchestration services.
ISS8 Sr. Engineer / Team LeadSpring 2019 – Winter 2020
Oregon Health Authority, OIS/CSS
Started a division-wide network training program for field staff to improve inter-team collaboration and lower resolution time for network issues.
Modernized automation with internal PowerShell gallery, Jenkins for job scheduling and ELK for logging. All clients authenticate with federation protocols and jobs run as group-managed service accounts.
Led team adoption of SRE: project/support rotation, blameless postmortems, self-service, error budgets.
Automated Azure MFA rollout for all DHS/OHA users with state-issued iPhones (9,000+). Delegated administration tools to tier 1 support and automated future iPhone user enrollment.
Built and maintained our internal shared Hyper-V lab infrastructure, consisting of 8 hyper-converged VM host servers. It ran training lab and pre-production workloads for the OIS Infrastructure team as well as on-demand directory services for our internal development teams.
ISS8 Infrastructure EngineerSpring 2017 – Spring 2019
Oregon Health Authority, OIS/CSS — Identity Management Platform
Built policy-triggered workflows to streamline user creation, reducing user provisioning work by two-thirds.
Created system for granting Active Directory Federation access from within the Microsoft Identity Management (MIM) portal; a single analyst used this to provision access for 120+ accounts in under 2 days.
Implemented ELK cluster to ingest MIM request logs, providing live dashboards and reports.
Developed SAML token viewer with client-side processing that doesn't leak information to 3rd party services.
ISS6 Infrastructure Ops AnalystSpring 2014 – Spring 2017
Oregon Health Authority, OIS/CSS
Developed a Windows Service that intelligently disables WiFi, avoiding dual-homed machines.
Implemented OR-Kids server log analysis with Hadoop and ElasticSearch (ELK stack).
Developed file share usage heuristics platform to detect ransomware infections.
Automated platform deployment and monitoring using Bash, Python and PowerShell.
Documented legacy systems, migrated to supported platforms and defined ongoing maintenance strategy using LXC Linux containers and re-platforming Tomcat applications onto Windows Server.
Education
Benson Polytechnic High SchoolClass of 2006
Portland, OR
Majored in Microcomputer Technology and Manufacturing.
Technical Experience
Open-source Projects
Laparoscope: A sidecar web service for exposing Entra ID Connect as a RESTful web service. Built for multi-tenancy where the sync service is hosted by an MSP but synchronized directories may be managed by distinct organizations. Customers can see the configuration of connections to their environment, sync status of their own records and system health issues related to their own directory. Exposes some metrics via OpenMetrics API and Swagger metadata to document API calls. There's also a reference PowerShell module which mimics the Entra Graph module in functionality.
Code from this project is open sourced and intended as a reference for organizations looking to integrate legacy .net applications with modern auth. Version 1 was developed on ASP.NET OWIN for .NET Framework. Version 2 migrated to .NET 8 LTS with a .NET Framework RPC Windows Service to facilitate components which cannot use .NET core. Oregon Department of Education has used this code to guide modern auth adoption and runtime modernization of at least one application.
TimeKeeper.ps1: Dependency-free, low-overhead tracing performance profiler for PowerShell v5-7. Designed for use in production, it emphasizes low latency overhead and can export profile timeslices as plain text. It includes tooling for rendering ASCII-based waterfall charts to visualize overlapping timeslices, or compiling to Chrome profile JSON format to be visualized with Google Chrome's performance tooling. This was key in solving a production incident with a cloud-hosted serverless function that was missing a hard performance deadline. Traces can be added to a PowerShell program and be enabled or disabled by substituting a zero-overhead noop implementation.