Scott L

Principal Site Reliability Engineer @ Soffi Technologies

Contractor • Part-time

Sep 2025 - Sep 2026 • 1 yr

– Sole infrastructure engineer at a 12-person AI startup: built the entire AWS environment as code from an empty account, every resource reproducible across dev/staging/prod; ran solo for 8 months, then hired and mentored a second engineer – Primary author of the IaC platform - 18 Terraform modules and 13 Helm charts spanning EKS with Cluster Autoscaler, multi-AZ RDS PostgreSQL with read replica, VPC with Client VPN, EFS, ALB, ECR, and Route53, all shipped through Atlantis PR-based GitOps – Owned security and compliance end to end: implemented the technical controls behind the company’s SOC 2 Type 2 attestation - Falco runtime threat detection, GuardDuty, CloudTrail audit logging with alerting, pgAudit on RDS, and Istio ambient-mesh mTLS enforcing zero-trust across the cluster - mapped to Trust Services Criteria – Stood up the reliability practice from nothing - Prometheus/Grafana/Loki/Pyroscope, Sloth-generated SLOs wired to a public Statuspage, plus incident reports, runbooks, and playbooks – Reduced the CloudWatch metrics line item roughly 90% and consolidated ALBs via ingress groups; added cost-allocation tags with Slack spend alerts for ongoing cost visibility – Wrote the platform’s deployment gateway in Go - a gRPC service orchestrating customer workload deployment and routing on Kubernetes/Istio; also contributed to the build and git-hosting services

Monitoring Engineer for GE Vernova

Microland • Full-time

Nov 2023 - Jan 2025 • 1 yr 2 mos

– Sole US-based engineer on GE Vernova’s monitoring migration: translated legacy Sensu Core check configurations into their ServiceNow ITOM equivalents and defined the integration pattern for the Agent Client Collector (ACC) – Audited Chef cookbooks fleet-wide, then ported or replaced Shell, Python, and Ruby monitoring plugins for full ACC coverage with zero gaps at cutover – Architected the MID Server and ACC client topology (including an SNMP-trap extension with regex matching), automated with forked Ansible roles tested under Molecule – Authored SOPs so the team could operate and extend the new monitoring stack independently

DevOps Engineer at Verys a Westmonroe Company

Self-directed • Full-time

Sep 2020 - Dec 2022 • 2 yrs 3 mos

– Led 3 engineers deploying Jenkins on EKS (Helm, Kubernetes plugin) with Calico CNI and Loki/Prometheus/Grafana observability, provisioned via Terraform and Atlantis PR-based deployments – Migrated customer infrastructure from Azure to AWS, using DMS to move MongoDB to DocumentDB with multi-region replication, then tested and documented DR procedures – Authored Terraform modules for DocumentDB, SSM parameters, and multi-region Jenkins pipelines – Built AMIs with Packer, automated app config with Chef, and centralized all logs in CloudWatch – Deployed HashiCorp Vault (AWS IAM auth) via CDKTF with daily Kubernetes-Job backups, and migrated the client’s AWS CDK codebase from .NET to TypeScript – Remediated security vulnerabilities, upgraded EKS clusters in place, and mentored client engineers