Josh K. Cooley

e: josh@cooley.tech

I use technology to change the world.

Work History

Cloud Engineering – Rustici Software 2024—2025
DevOps Engineer (ECS, Step Functions, AWS IAM Identity Center (SSO), RDS Aurora MySQL, Terraform, Terragrunt, GitHub Actions, CloudFront, BetterStack)

• Routinely maintained per-customer application stacks and their deployment stacks.
  • Responded to per-environment customization requests including ad-hoc scaling and whitelabelling.
  • Assisted with move from Jenkins to an in-house solution.
• Introduced account- and organization-level AWS account configuration-as-code.
• Improved the company security posture by:
  • Removing server shell accounts and enabling EC2 Instance Connect to better control Support and Dev team access.
  • Deprecating IAM keys in favor of AWS IAM Identity Center.
  • Introducing best practices for securely deploying infrastructure-as-code.

Cloud Engineering – Alto Solutions 2021—2024
Site Reliability Engineer (EKS, Kubernetes, AWS IAM Identity Center (SSO), RDS Aurora MySQL, Terraform, GitHub Actions, Cloudflare, OpsGenie)

• Transitioned from single manually provisioned AWS account to multiple accounts completely configured with Terraform.
• Migrated app from Elastic Beanstalk to Kubernetes.
• Moved from EC2 OpenVPN server to AWS Client VPN, then to Cloudflare WARP w/ Cloudflare tunnels in Kubernetes.
• Improved the company security posture by:
  • Creating AWS root login alerts over Slack and OpsGenie.
  • Removing server shell accounts and enabling EC2 Instance Connect for the Cloud team only.
  • Removing user DB credentials and enabling IAM auth over Okta, with different permission levels per environment and team.
  • Automating Docker image vulnerability scanning with Lacework.
  • Configuring AWS GuardDuty, Inspector, Security Hub, Shield, WAF, and Macie.
  • Configuring secret scanning in GitHub.
• Configured centralized logging and application performance monitoring with Datadog.
• Integrated Kubernetes with 1Password Connect for application secrets.
• Managed GitHub repository configuration with Terraform, and imported all existing repos.

Cloud Engineering – SmileDirectClub 2019—2021
DevOps Engineer (ECS, RDS PostgreSQL, Terraform, Jenkins, CodeBuild, CodeDeploy)

• Migrated Jenkins/Python deployment scripts into CodeBuild/CodeDeploy.
• Imported and recreated manually provisioned AWS resources with Terraform.
• Established CI/CD and AWS resource standards with:
  • Reusable Terraform modules.
  • GitHub repo Templates.
• As part of the Python guild, governed best practices for coding conventions, improving consistency and readability.

DevOps – Change Healthcare 2014—2019
Senior System Administrator (Bamboo, Apigee, IPsec, Monit, Nginx, EC2, RDS MySQL, Chef, Terraform)

• Created server architecture in Dev, Staging, UAT, and Production environments.
• Worked with CTO and CSO to ensure HIPAA compliance by:
  • Restricting RDS access.
  • Maintaining EC2 security groups.
  • Restricting access through frontend proxies (using nginx).
  • Managing F5 network routes in multiple subnets.
  • Enforcing end-to-end encryption for all apps.
  • Ensuring all PHI and PII is encrypted both at rest, and in transit.
• Worked side-by-side with developers to create an infrastructure that is maintainable through many code deployments, while preserving the adaptability necessary for an agile environment.
• Deployed new infrastructure and code in an automated fashion with the help of Bamboo, Chef, and Terraform.
• Guaranteed uptime through the use of performance monitoring tools, such as New Relic, Pingdom, and Pager Duty, and low-level process uptime with Monit.
• Coached junior engineers, encouraging fearless ownership and a “fail fast and often” mindset.

Service Desk – Walgreen Co. 2013—2014
LAN Support Specialist (Tier 2 Assist, Tier 1 Supervising, EHR Support, Remote/Home User Support)

• Worked with EMR applications in consumer facing (Walgreens stores) and enterprise environments.
• Onboarded and offboarded EMR access for nurses and doctors, including access to PHI.
• Created image updates and patch plans for consumer and corporate healthcare sites, focusing on high security with minimal downtime.

Consumer Support – Strictly Computers 2008—2013
End-user support (Malware Removal, Hardware Installation, Custom System Building)
On-site support (Data Backup, Network Installation, Emergency Incident Response)
Manager (Trained Employees, Managed Work Schedules, Set Repair Priority)

• Same-day response to incidents for local businesses, including doctor’s offices, lawyers, retail, etc.
• Installed networks for local businesses, including cable runs, patches, routing and firewall configurations, and inbound routes for security systems, remote administration, etc.
• Built custom PCs based on customer needs.

This resume was built with Terraform! https://github.com/JoshCooley/resume_builder_tf