Samuel “Sam” Haile

Cloud/SRE & DevSecOps Engineer — I build secure, compliant AWS platforms that ship faster.

8+ years across Aviation, Marine, Insurtech, Consulting, and Banking. I migrate production workloads from ECS to EKS, stand up Amazon Bedrock AgentCore infrastructure for AI agents, and bake SOC 2 / NIST controls straight into CI/CD.

<90 daysto SOC 2 readiness
100%CIS compliance
20–30%lower AWS spend
8+ yrscloud & DevSecOps

Selected Work

Bold Penguin · 2025

ECS → EKS Platform Migration

ECSCI/CDEKS

Moved production microservices to Kubernetes with zero service disruption, unblocking the platform modernization roadmap.

EKSAWS CDKCloudFormation
Bold Penguin · 2025

Bedrock AgentCore Infrastructure

devalphabetaprod

Per-environment AI agent runtimes with guardrails and credential isolation so the agentic team ships safely.

Amazon BedrockCDK (Python)Secrets
AirTera · 2024–25

SOC 2 in Under 90 Days

CodeScanGateAudit

Audit-ready controls, automated evidence, and gated GitLab pipelines that opened the door to enterprise clients.

GitLab CITrivyKMSOIDC

Experience

Cloud/SRE Engineer

Bold Penguin
  • Stood up secure, per-environment Bedrock AgentCore infrastructure for AI agents
  • Migrated production microservices from ECS to EKS with zero disruption
  • Standardized dev → prod promotion with AWS CDK / CloudFormation
Show full details

Operating in the insurtech sector, Bold Penguin is a privately held organization providing a digital marketplace and infrastructure connecting small businesses with commercial insurance carriers and agents.

Responsibilities:
  • Provision and maintain Amazon Bedrock AgentCore infrastructure (runtimes, credential/secret management, guardrails) via AWS CDK across multiple environments to support agentic AI service deployments.
  • Lead migration of production microservices from ECS to EKS, coordinating cross-team dependencies and updating CI/CD deployment pipelines.
  • Partner with agentic and cloud engineering teams to plan phased service migrations and environment promotion workflows.
Accomplishments:
  • Enabled the agentic engineering team to ship AI agent services faster by standing up secure, per-environment AgentCore infrastructure with guardrails and credential isolation.
  • Migrated multiple production microservices from ECS to EKS without service disruption, unblocking cloud engineering's platform modernization roadmap.
  • Streamlined multi-team environment promotion (dev to alpha to beta to prod) through standardized AWS CDK and CloudFormation IaC patterns.
Tech Stack:
  • AWS: Amazon Bedrock, ECS, EKS, AWS CDK, CloudFormation, IAM, VPC, S3, CloudWatch
  • IaC & Automation: AWS CDK (Python), CloudFormation
  • DevOps & Security: CI/CD, Secret Management, Guardrails, Container Orchestration

October 2025 - Present

DevSecOps

AirTera, a service mark of NATA Compliance Services
  • Achieved SOC 2 readiness in under 90 days
  • Cut infrastructure cost 20–30% via Lambda optimization and IaC modules
  • Led monorepo platform migration to AWS with full SOC 2 alignment
Show full details

Operating in the aviation and transportation technology sector, AirTera is a privately held organization providing security, safety, and compliance solutions for airlines, airports, and ground-operations clients.

Responsibilities:
  • Architected and deployed secure AWS infrastructure using AWS CDK (ECS Fargate, Lambda, API Gateway, ALB, VPC, Aurora Postgres, RDS SQL Server).
  • Built GitLab CI/CD pipelines integrating Trivy, Semgrep, dependency scanning, and deployment gates.
  • Implemented SOC 2 technical controls including CloudWatch logging, KMS encryption, WAF/Shield, CloudTrail/Config auditing, and OIDC‑based CI/CD authentication.
  • Replatformed core services from Supabase to Aurora Postgres, improving schema‑change lead time and reliability.
  • Migrated legacy Windows Task Scheduler workloads to serverless .NET 8 Lambdas using EventBridge and SES.
  • Enhanced observability using CloudWatch, Prometheus, Grafana; improved developer experience.
Accomplishments:
  • Led migration of a monorepo Operations platform (APIs, Next.js frontends) to AWS with full SOC 2 alignment.
  • Achieved SOC 2 certification readiness in under 90 days, enabling enterprise expansion.
  • Reduced infrastructure cost by 20–30% through Lambda optimization and standardized IaC modules.
  • Delivered a fully serverless reporting system with deterministic outputs and sub‑10‑second execution time.
Tech Stack:
  • AWS: ECS Fargate, Lambda, API Gateway, ALB, VPC, Aurora Postgres, RDS SQL Server, Secrets Manager, KMS, WAF/Shield
  • DevSecOps: GitLab CI/CD, OIDC, Trivy, Docker, IAM least privilege, SOC 2 controls
  • IaC & Automation: AWS CDK (TypeScript), Terraform
  • Applications: Node.js, .NET 8
  • Observability: CloudWatch, CloudTrail, Prometheus, Grafana

November 2024 - October 2025

AWS DevOps Engineer

Everllence
  • Raised CIS compliance to 100% and NIST to 96%
  • Cut deployment time 40% by moving analytics to Terraform
  • Integrated Vault with Kubernetes, Jenkins, and Terraform
Show full details

Operating in the marine, energy, and industrial sectors, the Digital Center of MAN Energy Solutions has approximately 75 employees globally.

Responsibilities:
  • Built and maintained DevOps tooling, CI/CD pipelines, and containerized applications to improve deployment speed and reliability.
  • Implemented self‑service deployment workflows, reducing issue resolution time by up to 40%.
  • Designed scalable infrastructure for data science and AI workloads.
  • Integrated HashiCorp Vault with Kubernetes, Jenkins, and Terraform to enforce CIS/NIST controls and dynamic secrets.
Accomplishments:
  • Migrated Analytics platform to Terraform IaC, reducing deployment time by 40% and increasing scalability by 30%.
  • Automated vulnerability scanning and compliance checks, raising CIS to 100% and NIST to 96%.
  • Designed CI/CD pipelines supporting 50+ releases annually.
  • Developed reusable Terraform modules for standardized provisioning.
Tech Stack:
  • AWS: IAM, EC2, EBS, AutoScaling, Load Balancers, S3, Lambda, CloudWatch, CloudTrail, ECR, EKS
  • Security: HashiCorp Vault, AWS Secrets Manager, Security Hub, Inspector, GuardDuty
  • DevOps Tooling: Jenkins, GitLab, Docker, Kubernetes (EKS), Rancher, Artifactory
  • IaC & Automation: Terraform, Ansible
  • Observability & Data: Prometheus, Grafana, Kafka, MongoDB

October 2022 - November 2024

AWS Cloud Engineer

Accenture
  • Cut deployment times 50% and operational costs 30% by automating CI/CD and provisioning
  • Added Fortify SAST to CI/CD for a major water utility, reducing security-related release delays 30%
  • Migrated staging, pre-prod, and prod to Terraform, cutting manual config errors 40%
Show full details

Operating in the consulting sector, Accenture is a Publicly-Held organization employing over 700,000 employees worldwide.

Responsibilities:
  • Optimized CI/CD pipelines and automating infrastructure provisioning, reduced application deployment times by 50% and operational costs by 30%, allowing quicker adaptation to market demands and delivering value to clients faster.
  • Implemented Static Application Security Testing (SAST) capability for a major water company, integrating security checks into the CI/CD pipeline to identify and remediate code vulnerabilities early in the development lifecycle.
Accomplishments:
  • Successfully contributed to the migration of a multi-environment infrastructure (staging, pre-production, production) using Terraform, enhancing security by isolating production, pre-production and staging environments. This accomplishment also led to a 40% reduction in manual configuration errors and improved overall resource management throughout the application lifecycle.
  • Integrated Fortify security checks into the CI/CD pipeline which enhanced application security, reduced security-related release delays by 30%, and ensured compliance with regulations for critical infrastructure in the water sector.
  • Designed and implemented CI/CD pipelines leveraging Jenkins, Helm, and Kubernetes to deploy and manage containerized applications on AWS Elastic Kubernetes Service (EKS), ensuring seamless application updates and high availability.
Tech Stack:
  • AWS: EC2, EKS, S3, Lambda, CloudWatch, CloudTrail
  • Security: Fortify (SAST)
  • DevOps Tooling: Jenkins, Git, Docker, Kubernetes (EKS), Helm
  • IaC & Automation: Terraform

May 2019 - October 2022

Software Developer

21PSTEM
Show full details

Operating in the education sector, 21PSTEM is a Privately-Held organization employing approximately 50 employees.

Responsibilities:
  • Modernized a Ruby on Rails school management system serving 10k+ users. Upgraded Rails 3.2 → 4.0 in 4 months.
  • Built Selenium automation tests with 100% coverage.
Tech Stack:
  • Frontend: React, JavaScript Backend: Ruby on Rails, Node.js, Testing: Selenium, Databases: MongoDB, Tools & Frameworks: MERN stack (MongoDB, Express.js, React, Node.js)

May 2018 - April 2019

Web Development Immersive Bootcamp

General Assembly
Show full details

18 weeks learning and practicing MERN Stack web development

November 2017 - April 2018

Associate Business System Analyst

JP Morgan Chase
Show full details

Operating in the financial service sector, JPMorgan Chase is a publicly held organization employing over 290,000 employees worldwide.

Responsibilities:
  • Worked directly with financial data and information, creating meaningful analysis, reports, and presentations in the payment research department.
  • Types of analysis and reporting include: quality reviews, workflow analysis, process improvement, budget management, performance and risk reporting.
Accomplishments:
  • Led initiatives to automate manual processes of Treasury Note Auction orders, resulting in a 90% reduction in processing time and 99% decrease in errors.
  • Collaborated with cross-functional teams to identify areas for automation and developed detailed business requirements.

December 2015 - November 2017

Business System Analyst

BNY Mellon
Show full details

BNY Mellon operates in the financial services and investment management sector. It is a publicly held organization with approximately 50,000 employees worldwide.

Responsibilities:
  • Provide support for the automation of NAV calculation applications.
  • Provide support to migration from IDC platform to Eagle Investment Systems application which offers a multi-currency, multi-basis solution that enables a consolidated view of BNY’s global accounting books.
Accomplishments:
  • Automated extraction of prices from pricing terminals which Increased price accuracy by 100% resulting in perfect NAV calculation.
  • Successfully automated the onboarding process for new mutual funds valued at over $2 billion, leading to increased revenue and improved operational efficiency.
  • Assisted in the analysis of existing workflows and identified opportunities for automation.

March 2006 - December 2015

Help Desk Analyst

AHP Settlement Trust
Show full details

AHP Settlement Trust was a private entity established to manage and distribute settlement funds for large-scale pharmaceutical litigation.

Responsibilities:
  • Provided technical support and issue resolution for internal staff processing complex Fen-Phen settlement claims, ensuring high system uptime and operational efficiency.

June 2002 - March 2006

Education

Drexel University

Bachelor of Science in Business Administration (BSBA)
Management Information Systems
May 2003

Skills

☁️

AWS Cloud

  • EC2, ECS Fargate, Lambda, EKS
  • VPC, Route53, CloudFront, ALB, API Gateway
  • S3, RDS, DynamoDB, Aurora
  • IAM, Security Hub, GuardDuty, Inspector
  • CloudWatch, CloudTrail, EventBridge
  • KMS, Secrets Manager, WAF
🤖

AI & Agentic Platforms

  • Amazon Bedrock
  • Bedrock AgentCore (Runtimes, Guardrails)
  • Credential Isolation for AI Agents
  • Per-Environment Agent Deployments
🔒

Security & Compliance

  • SOC 2 Implementation
  • CIS Benchmarks
  • NIST Framework
  • SAST/DAST (Fortify, Snyk, Trivy, Semgrep)
  • Vulnerability Management
  • IAM Least Privilege
🚀

DevOps & CI/CD

  • GitLab CI/CD, Jenkins
  • Docker, Kubernetes (EKS)
  • Terraform, AWS CDK (Python, TypeScript), CloudFormation, Ansible
  • Helm, ArgoCD
  • ECS to EKS Migrations
📊

Observability

  • Prometheus & Grafana
  • CloudWatch Dashboards
  • Datadog, BetterStack
  • ELK Stack
🔐

Secrets Management

  • HashiCorp Vault
  • AWS Secrets Manager
  • OIDC Authentication
  • Certificate Management
  • Encryption at Rest/Transit
💻

Programming & Scripting

  • Python, Bash
  • TypeScript, Node.js, .NET 8
  • Groovy, Ruby
  • HashiCorp Configuration Language (HCL)

Interests

Outside of work, I enjoy most of my time being outdoors. I’m also passionate about soccer and a dedicated Liverpool FC supporter.

As the founder of Delaware's Official Liverpool FC Supporters club, I’ve helped build a strong fan community. Each year, we collect over 300 pounds of food for local food banks, supporting those in need and giving back to our community.


Certifications

  • AWS Certified Solutions Architect - Associate | Amazon | 2019 - 2022
  • Google IT Automation with Python Professional | Grow With Google | 2020