AWS Enterprise Architecture & GovCloud: Deep experience in AWS multi-account landing zones (Control Tower, AWS Organizations, SCPs, Account Factory) within AWS GovCloud environments. Terraform Enterprise Architecture: Expertise with self-hosted Terraform Enterprise (TFE) planes, workspace management, and Private Module Registries. Pipeline Architecture & Keyless Deployments: Designing OIDC-based CI/CD architecture (GitLab Dedicated $
ightarrow$ Vault $
ightarrow$ TFE $
ightarrow$ AWS IAM workspace roles) eliminating all static AWS keys. Migration & Cutover Strategy: Experience planning and executing greenfield landing zone builds, cutovers, retiring legacy landing zones, and driving Disaster Recovery (DR) exercises.
Certifications: AWS Certified Solutions Architect - Professional or AWS Certified DevOps Engineer - Professional.GovCloud Governance: Familiarity with NIST 800-171 control-to-service mapping, DFARS 7012 requirements, and eMASS package coordination. FinOps: Operationalization of AWS FinOps practices and evidence automation via AWS Audit Manager.