Andrew D.

I build and secure cloud, AI, and DevSecOps platforms, most of it delivered in government cloud rather than commercial. 23 years in engineering and architecture across federal, financial services, geospatial, and manufacturing environments. Active TS/SCI with CI Polygraph and an active FDIC Public Trust. I am a hands-on architect: I write the Terraform, the Python, and the pipelines, and I still own the design. What I deliver: Cloud security architecture. Azure and AWS landing zones, Entra ID, managed identities and workload identity federation, custom RBAC, Private Link and private endpoints, Key Vault and secrets handling, Azure Policy at management-group scope, Defender and Sentinel. DevSecOps and compliance engineering. Secure CI/CD with Terraform, Docker and Kubernetes; Policy as Code; automated evidence collection for accreditation and audit. On the FDIC ISS program I built compliance automation across more than 60 Azure subscriptions and reduced full-day control investigations to under 60 seconds. Government cloud. Azure Government and GCC, including commercial-to-GCC migration and the security, authentication and service-availability constraints that come with it. This is the part most consultants have never actually done. AI and agent platforms. Production AI systems across OpenAI, Claude and Azure services; RAG, MCP and agent tool-calling; AI governance controls covering model access, data classification and audit logging. Also Copilot rollout and workflow automation where a team needs adoption rather than infrastructure. Data and ML engineering. AWS microservices and ETL pipelines processing petabytes of imagery and geospatial data from dozens of sources; PyTorch and TensorFlow computer vision models delivered for NGA and IARPA programs. How I work: clear scope, clear deliverables, no surprise invoices. Tell me what you are trying to accomplish and I will tell you honestly whether I am the right fit.