Senior Software Engineer
Outcomes (Formerly, Fuse by Cardinal Health)
Columbus, OH
July 2021 – Present
Specialty Medication Platform: Azure-to-AWS Cutover Apr–Jun 2026
- Led architecture, implementation, and execution of migrating a production healthcare platform from Azure to AWS — the first ECS-based workload in the new environment, requiring entirely new deployment and ingress patterns. Zero data loss, coordinating across 4 teams spanning 6+ AWS accounts.
- Built cross-platform API communication between legacy and new environments using API Gateway, PrivateLink, and VPC Endpoints. Developed a Java Lambda authorizer bridging two identity providers (Cognito and Keycloak) for cross-platform service authentication.
- Executed production DNS cutover of 5 domains during an 8.5-hour maintenance window, troubleshooting and resolving 3 stacked issues live (authorizer caching, stale JAR, missing KMS permissions).
- Solved complex multi-layer routing for state vaccine registry connectivity (Transit Gateway to Palo Alto firewall to VPN), diagnosing cross-AZ routing failures and missing routes at 3 network layers.
DevOps Platform Buildout — Pharmacy Management System Jan–Apr 2026
- Took infrastructure lead building the DevOps platform for a new pharmacy management system from scratch — Concourse CI/CD, HashiCorp Vault, ArgoCD, ECR/Nexus integration, and EKS compute — and onboarding multiple teams including a large offshore contractor group.
- Reduced buildpack build times from 25 minutes to 2.5 minutes (10x improvement) by migrating EC2 worker filesystems from ext4 to BTRFS, enabling copy-on-write Docker layer caching.
- Researched and modified the internal CI/CD pipeline framework (Java) to support new repo structure patterns, maintaining backward compatibility with all existing pipelines.
- Established repeatable product onboarding patterns: repo structure standards, ArgoCD RBAC, Vault secret conventions, GitHub team/repo naming, developer onboarding documentation. Reduced new team onboarding from weeks to days.
Cloud Consolidation — Infrastructure Lead 2025
- Served as infrastructure lead for migrating 4+ product lines from GCP, legacy AWS, and on-prem into a unified AWS environment, achieving zero downtime across all migrations. Architected the multi-account organization structure with Control Tower governance and SCPs.
- Designed and built a centralized inspection network (hub-and-spoke via Transit Gateway) routing all cross-environment traffic through a dedicated inspection VPC with AWS Network Firewall (Suricata, strict-order, default DROP) and Palo Alto integration.
- Managed 7+ spoke accounts, 3 site-to-site VPNs (Azure, state registry), and stateful traffic inspection for HITRUST compliance.
- Built custom VPC architectures for a telephony platform (dual-firewall, internet-facing SIP) and a pharmacy partner integration service (VPN ingress with NLB/EIP).
- Contributed to migrating 40 applications from GKE to EKS with security modernization, zero downtime. Developed Security Hub to Jira automation enabling hundreds of remediations per quarter.
TSA Exit: Outcomes Separation from Cardinal Health 2023–2024
- Led critical infrastructure workstreams for Outcomes' complete separation from Cardinal Health, building the company's entire cloud platform from scratch under a hard contractual deadline while maintaining zero production downtime.
- Provisioned and configured 80 AWS accounts (40 products, nonprod and prod pairs) using Control Tower with consistent security controls via SCPs, establishing the multi-account structure that the company still runs on today.
- Built and configured all EKS clusters running the Outcomes microservices platform, implementing Karpenter for node management and ArgoCD on Fargate for GitOps deployments. Translated PCF application requirements into Kubernetes patterns for development teams.
- Stood up the full DevOps toolchain from scratch — Concourse (CI/CD), HashiCorp Vault (secrets), and Nexus (artifacts) — now used by 50+ developers across all product teams.