Career Profile
Welcome!
My name is Keith Kain, and I bring over a decade of expertise in IT and DevOps - specializing in cloud technologies, DevOps/SRE practices, and enhancing the developer experience. As a holder of multiple AWS certifications, my skills have been honed through extensive hands-on experience, positioning me as a vital asset for development teams.
My strengths lie in thorough troubleshooting, a collaborative approach, and an unwavering enthusiasm for embracing and mastering emerging technologies
This resume is a proof-of-concept 100% hosted in AWS, utilizing services like S3, Lambda, and CloudFormation to serve content in a serverless architecture -- version-controlled and deployed through a CI/CD pipeline.
You can read about the design/architecture here.
Skills & Proficiency
AWS Cloud:
Implemented resilient, cost-conscious, and scalable architectures secured with the principle of least-privilege and deployed using infrastructure-as-code (IaC) methods including CloudFormation and Terraform.
I currently hold an AWS Certified DevOps Engineer Professional AND AWS Certified Solutions Architect certification.
Infrastructure Orchestration / CICD:
with tools such as Ansible, CloudFormation, LocalStack, Jenkins, Terraform, SCCM, MDT, Red Hat Satellite, AWS SAM, Github Actions/Gitlab CI, etc - (this site is deployed through a Github Actions pipeline, with stages for build, test, and deploy)
Containerized Workloads:
in Docker, Podman, ECS, EKS, Fargate. Maintain a diverse set of APIs in a production environment running on an ECS cluster. Migrate ECS workloads to Fargate.
Development/Scripting/Automation:
with Python, Go, Powershell, Bash, Ansible, Lambda, MQ/SQS, developing APIs. Developing Cloud-native applications with EventBridge.
Networking Experience:
DNS/Route53, Load balancing, SSL, security group design, troubleshooting web traffic flows, VPC routing, Nginx/IIS/Apache hosting and configuration, etc
Monitoring/Logging:
with Grafana/Prometheus, Loki, Splunk, PagerDuty, Zenoss, CloudWatch - designing alert-based remediation processes
Identity and User Management:
AWS IAM (least privilege) role/policy design/implementation, AWS Organizations/Control Tower, integrating Active Directory, LDAP, Shibboleth.
Windows Server Administration:
Active Directory, Remote Desktop Services/RemoteApp, DFS, Bitlocker Administration, Crystal Reports deployment and administration, Powershell App Deploy Toolkit, etc
Experiences
- Contribute to the development and operation of Intellix, the Capital One Commercial Banking and Money Movement portal. Contribute to backend development and developer-facing tooling. Experience with standardized bank file movement, including BAI2, NACHA, etc.
- Ownership of infrastructure configuration management (EC2/Lambda/S3/EFS/CloudFormation/Terraform)- write Infrastructure-as-Code for consistent deployments/rehydrations, cost-optimization of AWS environment
- SRE - Lead incident management and disaster-recovery sessions in a financial environment - create mitigations to prevent loss and disruptions in money-movement processes.
- Infrastructure Modernization - onboard legacy app components to custom Jenkins-based CI/CD pipeline, migrate other components to modern, serverless infrastructure (Lambda/Fargate).
- Write suite of automation runbooks using internal tools for environment self-healing and disaster mitigation (Recovery, Validation, Failover operations)
- Implement change/version control system for code/scripts and CI pipelines for immediate delivery of production code and configuration files.
- Write and maintain Powershell middleware libraries and APIs to manage dependencies and task sets within current infrastructure .
- Evaluate, rewrite, and migrate legacy code to new environments to allow for consistent updates and prevent environment stagnation/technical debt.
- Spearhead new technologies - identify environmental workflow challenges and implement solutions.
- Advanced Windows infrastructure and client endpoint System Administration using industry-standard toolsets - MDT, SCCM, WSUS, Powershell, etc.
- Windows Operating system deployment, packaging and licensing of enterprise and engineering software stacks.
- Perform basic administration of Linux servers and compute endpoints running RHEL using Red Hat Satellite/Puppet.
- Implement MacOS Jamf Pro deployment solution including Automated Device Enrollment workflow.
- Remotely manage Windows and MacOS devices, including software updates, package installations, configuration policies, group policies, etc
- Implement automation solutions using Powershell, Python, and other standard automation toolsets.
- Manage OS config & patching of 3000+ client systems in Windows/Mac environment using RMM/MDM solutions
- Led a project team to migrate 2000+ Windows 7 PCs to Windows 10.
- Special-projects lead, design/implement Powershell/Python automation systems to solve specific client issues.
- Implement efficient Windows build automation workflow using MDT, WDS, Powershell (migrated from 'ghosting' thick images)
- Create and maintain user accounts in various student education systems using standard IAM solutions
- Basic end-user/deskside support for IT and AV classroom scenarios