{
    "ContactInfo": {
        "FirstName": "Jim",
        "LastName": "Andreasen",
        "Email": "jim@andreasen.dev",
        "Web": "https://andreasen.dev",
        "LinkedIn": "https://www.linkedin.com/in/reifnir",
        "GitHub": "https://github.com/reifnir",
        "Headline": "Platform Engineering \u00b7 AWS Multi-Account Governance \u00b7 Cloud Security",
        "Summary": "Principal engineer specializing in AWS multi-account governance, platform engineering and cloud security. Builds the self-service infrastructure other engineering teams depend on: account vending and guardrails across 200+ AWS accounts, ephemeral GitOps-driven Kubernetes clusters, and the reusable Terraform and CI/CD libraries that make the secure path the easy one \u2014 in regulated financial services and healthcare environments."
    },
    "Skills": {
        "Technologies": [
            {
                "Name": "AWS Organizations and Governance",
                "Children": [
                    {
                        "Name": "Multi-account landing zone and OU design"
                    },
                    {
                        "Name": "Automated account vending and baselining"
                    },
                    {
                        "Name": "Service control policies and guardrails",
                        "Url": "https://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_policies_scps.html"
                    },
                    {
                        "Name": "Networking (VPCs, Transit Gateways, Peering, IPAM, BYOIP)"
                    },
                    {
                        "Name": "FinOps (cost allocation, budgeting, chargeback)"
                    }
                ]
            },
            {
                "Name": "Cloud Security",
                "Children": [
                    {
                        "Name": "IAM policy design and least privilege"
                    },
                    {
                        "Name": "Identity federation and SSO (Entra ID)"
                    },
                    {
                        "Name": "Role chaining and cross-account access"
                    },
                    {
                        "Name": "Network segmentation and centralized egress"
                    },
                    {
                        "Name": "Kubernetes RBAC and namespace isolation"
                    },
                    {
                        "Name": "Detection and logging (CloudTrail, GuardDuty, CloudWatch)"
                    },
                    {
                        "Name": "Policy as code and IaC security scanning in CI"
                    }
                ]
            },
            {
                "Name": "Platform Engineering",
                "Children": [
                    {
                        "Name": "Self-service infrastructure provisioning"
                    },
                    {
                        "Name": "Reusable Terraform module libraries"
                    },
                    {
                        "Name": "CI/CD template libraries (GitLab CI, GitHub Actions)"
                    },
                    {
                        "Name": "GitOps delivery"
                    },
                    {
                        "Name": "Ephemeral, per-merge-request environments"
                    },
                    {
                        "Name": "Developer enablement and support"
                    }
                ]
            },
            {
                "Name": "Infrastructure and Configuration as Code",
                "Children": [
                    {
                        "Name": "Terraform",
                        "Url": "https://developer.hashicorp.com/terraform"
                    },
                    {
                        "Name": "CloudFormation",
                        "Url": "https://aws.amazon.com/cloudformation/"
                    },
                    {
                        "Name": "Puppet",
                        "Url": "https://www.puppet.com/"
                    }
                ]
            },
            {
                "Name": "Kubernetes and Containers",
                "Children": [
                    {
                        "Name": "Kubernetes (EKS, AKS, vanilla)",
                        "Url": "https://kubernetes.io/"
                    },
                    {
                        "Name": "Karpenter",
                        "Url": "https://karpenter.sh/"
                    },
                    {
                        "Name": "ScaleOps",
                        "Url": "https://scaleops.com/"
                    },
                    {
                        "Name": "Docker",
                        "Url": "https://www.docker.com/"
                    },
                    {
                        "Name": "Docker Swarm",
                        "Url": "https://docs.docker.com/engine/swarm/"
                    }
                ]
            },
            {
                "Name": "Languages",
                "Children": [
                    {
                        "Name": "HCL",
                        "Url": "https://developer.hashicorp.com/terraform/language"
                    },
                    {
                        "Name": "Python"
                    },
                    {
                        "Name": "Bash"
                    },
                    {
                        "Name": "C#",
                        "Url": "https://dotnet.microsoft.com/en-us/languages/csharp"
                    },
                    {
                        "Name": "PowerShell"
                    },
                    {
                        "Name": "JavaScript"
                    },
                    {
                        "Name": "T-SQL"
                    }
                ]
            },
            {
                "Name": "Tooling and Operations",
                "Children": [
                    {
                        "Name": "Linux (Ubuntu, Debian, CentOS, Amazon Linux, Kali)"
                    },
                    {
                        "Name": "GitLab CI/CD",
                        "Url": "https://docs.gitlab.com/ci/"
                    },
                    {
                        "Name": "GitHub Actions",
                        "Url": "https://github.com/features/actions"
                    },
                    {
                        "Name": "Datadog",
                        "Url": "https://www.datadoghq.com/"
                    },
                    {
                        "Name": "AWS Lambda",
                        "Url": "https://aws.amazon.com/lambda/"
                    },
                    {
                        "Name": "Azure Functions",
                        "Url": "https://azure.microsoft.com/en-us/products/functions/"
                    }
                ]
            }
        ],
        "Methods": [
            {
                "Name": "Architecture and Design",
                "Children": [
                    {
                        "Name": "Multi-account and landing zone design"
                    },
                    {
                        "Name": "Least-privilege and blast-radius reduction"
                    },
                    {
                        "Name": "Volatility-based decomposition",
                        "Url": "https://www.youtube.com/watch?v=VIC7QW62-Tw"
                    },
                    {
                        "Name": "Distributed system architecture"
                    },
                    {
                        "Name": "Cloud, on-prem and hybrid hosting models"
                    },
                    {
                        "Name": "Total cost of ownership"
                    },
                    {
                        "Name": "Technical and business analysis"
                    },
                    {
                        "Name": "Mentorship and enablement"
                    }
                ]
            },
            {
                "Name": "IDesign Training",
                "Children": [
                    {
                        "Name": "Architect's Master Class (Juval Löwy, 2013)",
                        "Url": "https://www.idesign.net/Training/Architect-Master-Class"
                    },
                    {
                        "Name": "Project Design Master Class (Juval Löwy, 2014)",
                        "Url": "https://www.idesign.net/Training/Project-Design-Master-Class"
                    }
                ]
            }
        ]
    },
    "WorkExperience": [
        {
            "CompanyName": "Kroll Bond Rating Agency",
            "StartDate": "2019-11-06T00:00:00",
            "Title": "Principal Engineer",
            "Address": "Remote — Philadelphia, PA",
            "Description": [
                {
                    "Text": "Principal engineer on the central platform team at the fourth-largest credit rating agency in the world, an SEC-registered NRSRO. Started and own the AWS multi-account foundation, the Kubernetes platform and the shared CI/CD substrate that nearly two dozen engineering teams build on, and act as the escalation point for cross-cutting infrastructure, security and cost concerns."
                },
                {
                    "Text": "Designed and automated AWS Organizations governance across 200+ accounts: account vending with baselined guardrails, organizational unit structure, and federated SSO into every account through Entra ID. New accounts land fully governed - logging, network, tagging and access baselines applied — in hours rather than days or months."
                },
                {
                    "Text": "Built a segmented network spanning two regions and three availability zones, with separately peered production and non-production transit gateways, non-overlapping address ranges and centralized egress. VPCs are RAM-shared from standardized but flexible Terraform modules with per-VPC subnet layouts, provisioned through dynamic GitLab pipelines."
                },
                {
                    "Text": "Replaced inherited, hand-built Docker Swarm clusters with ephemeral EKS clusters created and destroyed entirely through GitOps, including on demand per merge request. Every cluster ships the same paved-road defaults: Karpenter node provisioning, ScaleOps rightsizing, namespace and RBAC provisioning, role chaining, managed ingress,  DNS, observability and security agents. Retired four manually maintained clusters and reduced provisioning time by 80%."
                },
                {
                    "Text": "Built the self-service tooling other teams consume daily: a reusable Terraform module library, and a GitLab CI template library that gives teams composable, GitHub Actions-style jobs for Terraform validation and security scanning using both Checkov and tfsec."
                },
                {
                    "Text": "Ran multi-week architecture engagements with product teams to work out what changes together and at what rate, and provided day-to-day enablement on Terraform, GitLab automation and containers."
                },
                {
                    "Text": "Additional delivery: Azure AKS clusters with managed ingress, Azure tagging policy enforcement, custom Datadog metrics and monitors, and consolidation of an inherited fleet of Ubuntu and CentOS pet servers onto IaC and configuration management."
                }
            ],
            "LanguageConcentration": [
                {
                    "Name": "Terraform",
                    "Weight": 0.7
                },
                {
                    "Name": "Python",
                    "Weight": 0.1
                },
                {
                    "Name": "Bash",
                    "Weight": 0.1
                },
                {
                    "Name": "Misc",
                    "Weight": 0.1
                }
            ]
        },
        {
            "CompanyName": "Change Healthcare",
            "StartDate": "2016-06-13T00:00:00",
            "EndDate": "2019-10-18T00:00:00",
            "Title": "Architect",
            "Address": "King of Prussia, PA",
            "Description": [
                {
                    "Text": "Continuation of work started as an Apprenda consultant, in a HIPAA-regulated healthcare technology environment. Internal expert consultant for cloud-enabling existing enterprise products: delivered DevOps tooling and a provider-based programming model that abstracted the underlying platform, which was essential to continuing support for existing on-prem customers. Provided individual product teams architectural and technical guidance for PaaS and SaaS enablement. Additional work: Apigee proxy development, Docker on Apprenda, Kubernetes-related technologies."
                }
            ]
        },
        {
            "CompanyName": "Almac Clinical Technologies",
            "StartDate": "2015-08-01T00:00:00",
            "EndDate": "2016-06-10T00:00:00",
            "Title": "Solutions Architect",
            "Address": "Souderton, PA",
            "Description": [
                {
                    "Text": "Primarily responsible for overseeing multiple development teams, delivering both designs and hands-on solutions for cross-cutting concerns, reducing the cost and time required to prepare and maintain studies for the company's flagship clinical trial management system in a regulated, validated (GxP) environment. Partner with product owners by analyzing business problems, providing viable options and estimations, and facilitate aligning them with the study-level business unit. Collaborate with a small team of fellow architects to ensure consistent guidance and a clear vision for technical solutions. Provide technical leadership and mentoring to development team leads and their subordinates."
                }
            ]
        },
        {
            "CompanyName": "Apprenda, Inc.",
            "StartDate": "2013-11-01T00:00:00",
            "EndDate": "2015-08-01T00:00:00",
            "Title": "Solutions Architect, Client Services",
            "Address": "Troy, NY and King of Prussia, PA",
            "Description": [
                {
                    "Text": "Recommend and design enterprise client solutions for cloud-suitability with consideration for a customer's unique policy, process and technical requirements. Diagnose, troubleshoot and resolve customer issues relating to developer operations, cloud infrastructure and hosted applications. Factor existing applications for SaaS-enablement and distributed hosting on the Apprenda PaaS platform. Develop POCs, lead group training for diverse audiences, and extensively develop and create custom Apprenda platform extensions for cross-app communication and automation."
                }
            ]
        },
        {
            "CompanyName": "MedRisk, Inc.",
            "StartDate": "2013-07-01T00:00:00",
            "EndDate": "2013-11-01T00:00:00",
            "Title": "Sr. Software Engineer",
            "Address": "King of Prussia, PA",
            "Description": [
                {
                    "Text": "Short-term contract to lead migration effort of legacy Access implementation to .NET. Established new platform and standards with architect. Analysis of business needs and current implementation."
                }
            ],
            "LanguageConcentration": [
                {
                    "Name": "C#",
                    "Weight": 0.65
                },
                {
                    "Name": "SQL",
                    "Weight": 0.35
                }
            ],
            "IsArchived": true
        },
        {
            "CompanyName": "Siemens",
            "StartDate": "2013-04-01T00:00:00",
            "EndDate": "2013-07-01T00:00:00",
            "Title": "Lead Software Developer",
            "Address": "Malvern, PA",
            "Description": [
                {
                    "Text": "Short-term contract to deliver work orders for federal regulation compliance. In addition, responsible for training and providing examples to development team with modern principles and techniques of software development."
                }
            ],
            "LanguageConcentration": [
                {
                    "Name": "C#",
                    "Weight": 0.85
                },
                {
                    "Name": "JavaScript",
                    "Weight": 0.1
                },
                {
                    "Name": "SQL",
                    "Weight": 0.05
                }
            ],
            "IsArchived": true
        },
        {
            "CompanyName": "PointRoll, Inc.",
            "StartDate": "2010-07-01T00:00:00",
            "EndDate": "2013-03-01T00:00:00",
            "Title": "Architect, Sr. Software Engineer",
            "Address": "King of Prussia, PA",
            "Description": [
                {
                    "Text": "Rearchitected core application leveraging IoC to break apart a knot of circular dependencies. Lead shaping and implementation of backend design to the core application's more-UX focused reboot as a RESTful, testable API. Acted as a leading contributor to a rule-based dynamic ad content service. Received the peer nominated, management approved Roller (employee) of the year award in 2011."
                }
            ],
            "LanguageConcentration": [
                {
                    "Name": "C#",
                    "Weight": 0.7
                },
                {
                    "Name": "SQL",
                    "Weight": 0.25
                },
                {
                    "Name": "JavaScript",
                    "Weight": 0.05
                }
            ],
            "IsArchived": true
        },
        {
            "CompanyName": "Allied Barton Security Services",
            "StartDate": "2008-03-01T00:00:00",
            "EndDate": "2010-06-01T00:00:00",
            "Title": "Sr. Developer",
            "Address": "Conshohocken, PA",
            "Description": [
                {
                    "Text": "Responsible for designing and replacing legacy vacation/sick accrual and tracking system. The majority of development was done in C# leveraging LINQ, ASP.NET and jQuery driven front end and T-SQL. XSLT, SSIS, SSRS, VB6, and VB.NET 1.1, and LDAP were also used to a lesser extent."
                }
            ],
            "LanguageConcentration": [
                {
                    "Name": "SQL",
                    "Weight": 0.65
                },
                {
                    "Name": "C#",
                    "Weight": 0.3
                },
                {
                    "Name": "VB6",
                    "Weight": 0.03
                },
                {
                    "Name": "VB.NET",
                    "Weight": 0.02
                }
            ],
            "IsArchived": true
        },
        {
            "CompanyName": "MedRisk, Inc.",
            "StartDate": "2006-10-01T00:00:00",
            "EndDate": "2008-03-01T00:00:00",
            "Title": "Sr. Developer",
            "Address": "King of Prussia, PA",
            "Description": [
                {
                    "Text": "Programming focus was OO and DB design and development. Programming predominantly done in C#, T-SQL, VB6 and Access VBA. Projects include creation of COM Objects/DLLs, web services, automation, stored procedures, query optimization, automated email and attachment capture, and creation of rules based routing engines. In addition to programming: project design, mentoring, requirement gathering from all levels within the organization and technical writing."
                }
            ],
            "LanguageConcentration": [
                {
                    "Name": "C#",
                    "Weight": 0.60
                },
                {
                    "Name": "SQL",
                    "Weight": 0.30
                },
                {
                    "Name": "VBA",
                    "Weight": 0.07
                },
                {
                    "Name": "VB6",
                    "Weight": 0.03
                }
            ],
            "IsArchived": true
        },
        {
            "CompanyName": "Automated Financial Solutions",
            "StartDate": "2006-01-01T00:00:00",
            "EndDate": "2006-10-01T00:00:00",
            "Title": "Programmer Analyst",
            "Address": "Exton, PA",
            "Description": [
                {
                    "Text": "Programming focus was on VB6, DCOM, T-SQL, and hand-rolled AJAX for loan origination front end that interfaced with mainframes. Projects included: creation and maintenance of COM Objects/DLLs, VBA scripting engine, designed database archival process with on-demand retrieval."
                }
            ],
            "LanguageConcentration": [
                {
                    "Name": "VB6",
                    "Weight": 0.8
                },
                {
                    "Name": "SQL",
                    "Weight": 0.1
                },
                {
                    "Name": "XML",
                    "Weight": 0.05
                },
                {
                    "Name": "VBScript",
                    "Weight": 0.05
                }
            ],
            "IsArchived": true
        },
        {
            "CompanyName": "MedRisk, Inc.",
            "StartDate": "2001-06-01T00:00:00",
            "EndDate": "2005-12-01T00:00:00",
            "Title": "Sr. Developer",
            "Address": "King of Prussia, PA",
            "Description": [
                {
                    "Text": "Same scope as the 2006-2008 tenure: object-oriented and database design and development in C#, T-SQL, VB6 and Access VBA."
                }
            ],
            "LanguageConcentration": [
                {
                    "Name": "VBA",
                    "Weight": 0.5
                },
                {
                    "Name": "SQL",
                    "Weight": 0.45
                },
                {
                    "Name": "VB6",
                    "Weight": 0.05
                }
            ],
            "IsArchived": true
        },
        {
            "CompanyName": "Elecor Communications",
            "StartDate": "2000-04-01T00:00:00",
            "EndDate": "2001-02-01T00:00:00",
            "Title": "Network Administrator",
            "Address": "Butler, NJ",
            "Description": [
                {
                    "Text": "As sole member of the technical staff, developed and maintained Classic ASP web site for a digital dictation and document transfer service. Experience in ASP, VBScript, and ActiveX components."
                }
            ],
            "IsArchived": true
        },
        {
            "CompanyName": "Lion Technology",
            "StartDate": "1999-10-01T00:00:00",
            "EndDate": "2000-04-01T00:00:00",
            "Title": "Computer Service Technician",
            "Address": "Lafayette, NJ",
            "Description": [
                {
                    "Text": "Programming experience in Perl, Visual Basic, and HTML."
                }
            ],
            "IsArchived": true
        }
    ],
    "Id": "jim-andreasen"
}