SENIOR DEVSECOPS ENGINEER · COHESITY

DevSecOps engineer.
Curious by default.

I’m Andrew. I build secure platforms that help teams release with confidence. Kubernetes, CI/CD, and secrets automation are my everyday work.

Small changes. Real impact.

From my work at Cohesity.

120 hostsArchitected a secure, automated build fleet.Behind the number

The challenge: A production build fleet spanning Linux, Windows, HP-UX, and AIX needed a consistent security foundation.
My approach: I designed a segregated environment with vCenter provisioning, Ansible roles, MFA, and privileged credential rotation.
The result: 120 hosts in a controlled build environment, with direct internet exposure removed.

64 serversEliminated static credentials through a Vault migration.Behind the number

The challenge: Build engineering needed to move away from static CI credentials and unify secrets management.
My approach: I led the migration from Delinea Secret Server to HashiCorp Vault across servers and CI pipelines.
The result: 64 servers and 5+ pipelines migrated, with static credentials eliminated and rotation and access policies unified.

~90% fewer CVEsReduced shipped CVEs across 20 container images.Behind the number

The challenge: Reduce vulnerabilities shipped in the Backup-as-a-Service product’s container images.
My approach: I hardened 20 images through refreshed base images and vulnerability gates in the delivery process.
The result: Approximately 90% fewer shipped CVEs across those images.

Cohesity, 2022–now RBC Wealth Management, 2021–2022