# resume.md
## Josh Noll
[LinkedIn] [GitHub] [Website] [PDF]
## Summary
Cloud/DevOps Engineer specializing in Kubernetes, infrastructure automation, and secure cloud platforms supporting enterprise and mission environments. Active TS/SCI clearance; MA in IT Management; CISSP, SecurityX, CCNA certified. Driven to build durable solutions to long-standing pain points, bridging engineering and leadership to deliver measurable outcomes.
## Technologies
Azure | AWS | Linux | PowerShell | Bash | Ansible | Python | HTML | CSS | JavaScript | TypeScript | React | Vite | NextJS | Jest | Tailwind | Docker | Kubernetes | Helm | FluxCD | ArgoCD | Temporal | VMWare | Proxmox | Wireguard | Tailscale | Nginx | Traefik
## Certifications
[CISSP](https://www.credly.com/badges/4df1206d-dc14-4302-83f4-cc5f8e76e2dc/public_url) | [CCNA](https://www.credly.com/badges/218f2074-76ba-4d60-b0d5-5bc83c515052/public_url) | [Az-104](https://learn.microsoft.com/en-us/users/joshrnoll/credentials/A419160A7DC41331?ref=https%3A%2F%2Fjoshrnoll.com%2F) | [Az-900](https://learn.microsoft.com/api/credentials/share/en-us/joshrnoll/B91E76B27D0D2605?sharingId=236C17A9E269164) | [SecurityX](https://www.credly.com/badges/ba45cd0c-fe71-4c6f-bfbf-9b8acdeeff9a/public_url) | [Security+](https://www.credly.com/badges/76550d7d-a270-421c-8436-b0123897fdf8/public_url) | [Network+](https://www.credly.com/badges/cf3b9100-9b51-488b-84d5-4beb661bee83/public_url) | [Project+](https://www.credly.com/badges/e5ef6d2e-bedd-48c2-a1d0-7b750d418908/public_url)
## Experience
### Infrastructure Engineer, Unstructured
_2026-02 - present_
- Designed and delivered versioned, immutable dedicated-instance infrastructure configuration using Kubernetes CRDs, Pulumi, Temporal, admission controls, and operator reconciliation; enabled teams to canary changes on individual instances before fleet-wide rollout.
- Built and productionized an Internal Docs platform with Docusaurus, FastAPI, Helm, Docker, Okta OIDC, local search, CI/CD, and an authenticated MCP server; migrated 189 pages to Git-backed durable storage and automated updates across 199 repository sessions.
- Diagnosed and fixed production-scale operator-console performance bottlenecks, reducing API payloads by 97.6% and 91% and bringing all seven tested navigations to 323 ms or less.
- Removed EKS upgrade blockers across 21 AWS clusters by making Kubernetes versions configurable, hardening cross-cloud validation, and pinning managed node groups to the control-plane version.
- Authored 162 pull requests across 11 repositories, with 140 merged, and reviewed at least 297 pull requests across infrastructure, release engineering, internal documentation, and developer tooling.
- Completed the infrastructure ingress migration from Nginx to Traefik, including removal of obsolete controllers and resources.
- Built and operationalized an AI engineering orchestrator with automated issue workers, CI/PR monitoring, re-review after blocker fixes, an append-only event ledger, a live dashboard, and a terminal-native TUI; production validation included 321 passing tests.
- Led a platform release through late-stage failures, halted an unsafe promotion, corrected staging/production plugin divergence, reran production promotion, and confirmed end-to-end validation before release.
- Assessed a 23-instance infrastructure fleet using live status and deployment previews, separating harmless refresh drift from material backlog and creating a risk-based maintenance and migration plan.
- Made infrastructure drift state self-healing after deployments by updating the operator to re-check and clear stale verdicts immediately rather than waiting up to 24 hours.
- Created authenticated, live documentation previews for every content pull request, removing the need for reviewers to run Docusaurus locally.
### Data and Information Systems Engineer, US Army
_2021-01 - 2026-01_
- Delivered an AI-powered search solution using Azure AI Search with cross-functional teams, improving accessibility of 22TB+ of data and cutting information retrieval time from 20+ minutes to under 10 seconds.
- Identified a chronic gap in user account management and built a custom PowerShell module from scratch, increasing service desk ticket closure speed by 100%.
- Authored an enterprise cybersecurity policy aligning technical controls with business priorities; secured C-suite buy-in and reduced violations by 75%+.
- Designed and presented a tactical network/systems architecture to 5+ C-suite stakeholders, enabling buy-in for a training event supporting 50+ end users.
- Deployed resilient Active Directory domain architecture across 8 geographically dispersed sites, maintaining service continuity for 150+ users in austere tactical environments.
### Executive Assistant, US Army
_2020-02 - 2021-01_
- Bridged C-suite leadership and technical teams in drafting and publishing the U.S. Army Arctic Strategy, a foundational initiative driving the Army's return to Arctic dominance amid great power competition.
### Platoon Leader, US Army
_2019-03 - 2020-11_
- Commanded a 22-person Cavalry platoon through a successful combat training center rotation; rated #1 of all platoon leaders in the squadron and accountable for $1M+ in equipment.
## Volunteering
### Programming Director, Arrowhead Research
_2026-01 - present_
- Lead Black Relay 2026: Safehouse Systems, a four-month engineering initiative to build a portable, survivable operating stack for temporary sites across fabrication, detection, survivability, and TAK teams.
- Designed, built, and deployed the Arrowhead Research website and the Black Relay 2026 program site, translating the organization’s mission, programs, application flow, and field-event requirements into public-facing web experiences.
- Delivered a presentation at a company-sponsored prototype showcase on open-source methodology to a panel of 5 industry experts and DoD leaders including the US Army CTO, demonstrating technical leadership and communication skills.
### Web Developer, Cybersecurity Canon
_2025-11 - 2026-05_
- Prototyped a modern platform to replace long-deferred WordPress infrastructure; communicated architectural trade-offs to leadership to enable enhanced extensibility.
## Technical Projects
- **[Black Relay 2026: Safehouse Systems](https://arrowheadresearch.org/black-relay)** | Designed and deployed the public program site for a four-month field-engineering initiative building a portable, survivable safehouse operating stack for temporary sites.
- **[Homelab as Code](https://github.com/joshrnoll/homelab-as-code)** | GitOps/IaC platform deploying homelab services to Kubernetes on Talos Linux; uses FluxCD, Tailscale, SOPS, and age for secure multi-user operations and secret management.
- **[Homelab Ansible Collection](https://github.com/joshrnoll/ansible-collection-homelab)** | Published Ansible Galaxy roles that automate Linux server hardening, Docker installation, containerized service deployment, Tailscale networking, Traefik reverse proxying, and Cloudflare DNS records.
- **[Personal Website](https://joshrnoll.com)** | Astro-based personal site deployed through GitHub Actions to Azure Storage and secured behind Cloudflare HTTPS, with a technical blog and public notes.
- **[pi-teach](https://github.com/joshrnoll/pi-teach)** | Published Pi extension that turns agent sessions into interactive HTML classrooms with highlight-to-ask explanations, persistent contextual Q&A, and agent-graded quizzes.
- **[Traefik Install Playbook](https://github.com/joshrnoll/ansible-playbook-traefik-tailscale)** | Ansible playbook that automates Traefik deployment with Tailscale and Traefik Kop across multiple hosts.
## Education
### Webster University
MA, Information Technology Management *(May 2022)*
### University of Wisconsin - Eau Claire
BA, German *(May 2017)*
### Galvanize
Software Development Immersive *(September 2025)*
### US Army Cyber Center of Excellence (CCOE)
Graduate, Information Systems Engineering Course *(October 2021)*