Resume
Download PDF
Cloud Engineer | AWS Certified Solutions Architect & CloudOps Associate
Philadelphia, PA | contact@harrynchang.com | www.harrynchang.com | +1 (215) 552-7727
Profile
A Cloud and DevOps engineer with hands-on production experience across AWS and Azure, specializing in Infrastructure-as-Code, network architecture, and identity management. AWS Certified Solutions Architect and CloudOps Engineer with a proven record of designing and troubleshooting production-grade cloud environments.
Certifications
AWS Certified Solutions Architect - Associate (SAA-C03) | AWS Certified CloudOps Engineer - Associate (SOA-C03) | AWS Certified Cloud Practitioner (CLF-C02) | Microsoft Certified: Azure Fundamentals (AZ-900) | CompTIA Security+
Core Competencies
AWS (VPC, EC2, S3, IAM, Lambda, API Gateway, Bedrock, DynamoDB, OpenSearch Serverless, Systems Manager, CloudWatch, CloudFormation, Secrets Manager) | Azure (Entra ID, Virtual Machines, Active Directory, Key Vault) | Terraform | Docker | Infrastructure-as-Code | CI/CD Concepts | Python | PowerShell | Linux/Bash | Windows Server / WSUS / GPO | Network Security (VPC Segmentation, Security Groups, SAML SSO, Firewalls) | Identity & Access Management | Incident Response & Root-Cause Analysis
Work Experience
- Automated user provisioning and lifecycle management using PowerShell and Microsoft Entra ID, enforcing MFA and randomized temporary passwords across new employee onboarding
- Deployed and monitored cloud-hosted virtual infrastructure (Azure VMs) supporting POS/IoT terminal endpoints, configuring telemetry agents and automated alerting to flag hardware failures in real time
- Implemented centralized Windows patch management (WSUS) with staged deployment rings and an automated 3-2-1 backup pipeline (SQL Server, Robocopy, Azure Blob Storage) with immutable storage locking, strengthening system resilience and disaster recovery posture
- Provisioned cloud infrastructure via Terraform (IaC) with Azure Key Vault secrets management, and implemented network segmentation (VLANs, firewall ACLs) isolating payment-processing systems from guest traffic, validated through packet analysis and compliance auditing
- Designed cross-cloud identity federation (SAML 2.0 SSO) bridging Azure Entra ID and AWS IAM Identity Center, enforcing least-privilege S3 access and resolving an access-denial incident caused by a network IP change
- Migrated EC2 server fleet to automated patch management via AWS Systems Manager and resolved a fleet-wide connectivity outage affecting 15 servers by deploying private VPC endpoints (AWS PrivateLink)
- Built a multi-channel CloudWatch alerting pipeline (SNS, Slack, SMS) for production EC2 hosts, diagnosing and resolving a silent monitoring failure caused by the agent not persisting through instance reboots
- Designed a secure multi-tier VPC (public/private subnets, NAT Gateway, stateful security groups) and resolved a production database outage caused by an accidental security group rule deletion
- Designed and deployed a 17-resource, multi-AZ AWS network architecture via Terraform, including subnet segmentation and security-group chaining, with centralized secrets management via AWS Secrets Manager to eliminate hardcoded credentials
- Built and deployed containerized applications via multi-stage Docker builds, reducing image size to 75.2MB, and diagnosed a production networking failure (HOSTNAME binding defect), restoring service without downtime
- Architected a serverless RAG pipeline (Lambda, API Gateway, Bedrock, OpenSearch Serverless) and established remote Terraform state management with S3 and DynamoDB locking for safe, collaborative infrastructure changes
Education
Bachelor of Science (B.S.), Cloud & Network Engineering - Western Governors University
Network Administration Option (A.A.S), Computer Information Systems - Community College of Philadelphia