JB.

Platform Engineer
with a systems lens.

Public, high-level professional profile. The downloadable version contains only intentionally public, sanitized information.

Anahuac, TX · 903-246-1634 · joshuabrewer.d@gmail.com · LinkedIn · GitHub · Active TS/SCI clearance.

Download resume PDF

Summary

Platform Engineer with 7+ years of experience building and running production cloud infrastructure on AWS. Strong background managing EKS cluster lifecycles, establishing modular Terraform practices, and driving AWS cost efficiency across multi-tenant environments. Experienced with high-availability systems, infrastructure-level on-call rotations, and continuous telemetry using Grafana, Prometheus, Loki, and Splunk. Skilled in Golang, Python, and automated compliance in security-sensitive environments.

Core Skills

Cloud & Platforms: AWS (EKS, VPC, EC2, IAM, S3), Kubernetes, Docker, Helm, Istio, Ingress Controllers

Infrastructure as Code: Terraform, HCL, GitLab CI, GitHub Actions, Reusable Infrastructure Modules

FinOps & Cost Optimization: AWS Compute Rightsizing, Spot Instance Strategy, Graviton Migrations, Cluster Autoscaler

Languages & Scripting: Golang, Python, Bash, PowerShell, JSON, YAML

Observability & Incident Response: Grafana, Prometheus, Loki, Vector, Splunk, Elastic Stack, CloudWatch, Infrastructure On-Call

Security & Compliance: NIST SP 800-53, CIS Benchmarks, Keycloak, SAML/OIDC, NeuVector, IAM

Experience

Defense Unicorns · Platform Engineer · May 2023–Present

  • Managed full lifecycle operations for production AWS EKS clusters, executing zero-downtime control-plane upgrades, Istio ingress configuration, and automated node scaling using Cluster Autoscaler.
  • Built and maintained reusable, modular Terraform codebases, establishing infrastructure standards and automated CI/CD deployment pipelines across teams.
  • Drove AWS footprint cost efficiency through proactive resource rightsizing, Spot node strategy implementation, and Graviton instance migrations.
  • Maintained 99.99% runtime availability across multi-AZ environments; served on primary infrastructure on-call rotation for platform-layer incidents.
  • Deployed and maintained monitoring stacks using Grafana, Prometheus, Loki, and Splunk for real-time system telemetry, alert triage, and postmortem analysis.
  • Developed custom CLI tooling and operational automation in Golang and Python to simplify developer workflows and cluster administration.
  • Hardened Kubernetes infrastructure to comply with NIST SP 800-53 and CIS standards, integrating continuous container scanning via NeuVector and IAM controls.

Amazon Web Services · Cloud Support Engineer, Containers · Jan 2022–May 2023

  • Diagnosed and resolved complex, production-critical EKS and ECS issues for enterprise customers, focusing on VPC CNI networking, ingress routing, and runtime container performance.
  • Advised client engineering teams on Kubernetes control-plane scaling limits, cluster upgrade paths, multi-AZ resilience, and disaster recovery strategies.
  • Resolved 182+ high-severity enterprise container cases (exceeding performance metrics by 115%) and authored technical runbooks and troubleshooting guides.

Texas Air National Guard · Cyber Systems Operator, DevOps/SRE Focus · Dec 2018–Present

  • Automated Active Directory management and security tasks using PowerShell and Bash scripts, cutting manual operational work by 90%.
  • Operated VMware ESXi virtualized environments and Virtual Desktop Infrastructure (VDI) supporting 800+ users, maintaining uptime and patch schedules.
  • Executed vulnerability scans using Nessus, system audits, and rapid incident response in accordance with federal security standards.

Education

Master of Science, Management Information Systems · Texas A&M University, Mays Business School · 2026–Present

Master of Science, Cloud Computing Architecture · University of Maryland Global Campus · 2021

Bachelor of Science, Criminal Justice · East Texas A&M University · 2018

Graduate Certificate, Penetration Testing and Ethical Hacking · SANS Technology Institute · 2024

Certifications

GIAC Certifications: GIAC Penetration Tester (GPEN) · GIAC Cloud Penetration Testing (GCPN) · GIAC Certified Incident Handler (GCIH) · GIAC Security Essentials (GSEC)

CompTIA & Vendor Certifications: CompTIA Security+ · CompTIA Linux+ · VMware Certified Professional – Data Center Virtualization (VCP-DCV)