• Responsible for configuring and tuning the Palo Alto Secure Web Gateway to ensure a secure and high-performance internet connection for IT workstations • Ensure that threats such as malware, exploits, or phishing in internet traffic are reliably detected and blocked, and optimize the relevant security policies • Responsible for protecting sensitive data through Data Loss Prevention mechanisms as well as content and file controls to prevent unintended data leaks • Ensure the secure use of applications by defining, maintaining, and continuously adapting application control rules to current security requirements

• Design and deploy a new Amazon WorkSpaces environment, including directory services (AWS Managed Microsoft AD or AD Connector), networking, and security configuration • Build and maintain Terraform modules for all infrastructure components, following IaC best practices (state management, module reuse, environment separation) • Configure Workspace bundles, custom images, and user provisioning workflows • Implement networking (VPCs, subnets, route tables, security groups, VPN/Direct Connect as needed) to support secure Workspace access • Set up monitoring, logging, and alerting (CloudWatch, CloudTrail) for the Workspaces environment • Apply security best practices including IAM least-privilege, encryption at rest/in transit, and MFA enforcement • Document the architecture, runbooks, and IaC patterns to enable handoff at end of engagement • Collaborate with internal stakeholders to translate requirements into a working environment

• Lead the day-to-day operations, configuration, and management of enterprise-grade cloud environments, primarily within Microsoft Azure • Deploy, configure, and manage Security Information and Event Management (SIEM) solutions • Continuously monitor cloud networks, check IP addresses and traffic logs, and proactively scan for and remediate system vulnerabilities • Ensure all cloud architectures and processes strictly adhere to NIST 800-53 security and privacy controls • Design, implement, and maintain CI/CD pipelines to fully automate software releases and infrastructure provisioning • Act as the primary subject matter expert for cloud infrastructure and security

• ArcGIS Enterprise Administration • Administer Highly Available multi-environment ArcGIS Enterprise platforms including installations, upgrades, SSL, and datastores • Configure and manage Windows Server/IIS integration • Monitor system health and provide technical support to meet SLA requirements • Manage ArcGIS Datastore using SQL, including advanced backup and synchronization workflows • Publish and optimize geospatial services, dashboards, StoryMaps, and Experience Builder applications • Cloud & Infrastructure: Design, deploy, and administer ArcGIS Enterprise on Azure and AWS cloud environments • Manage Azure services including Virtual Desktop (AVD), Blob Storage, Data Lake, and Azure Functions, Azure CLI, Azure Application Gateway Configuration, Azure Network Configuration • Support DevSecOps workflows for application and API promotions • Monitor cloud costs and evaluate architecture for scalability and cost-effectiveness • Data Engineering & Development: Build and maintain Python-based ETL pipelines using serverless platforms (Azure Functions) • Develop and maintain geoprocessing automation scripts using ArcPy, the ArcGIS Python API and other open-source geospatial python libraries • Design and implement STAC-based cloud-native data pipelines • Geospatial Analysis & Products: Conduct geospatial research and analysis to create and maintain enterprise datasets • Execute advanced geo-analytics workflows including Esri Deep Learning tools • Client & Team Collaboration: Lead cross-functional collaboration across geospatial, development, and IT teams • Provide end-user support, training, and mentorship • Work with Esri Support on licensing, bug identification, and product enhancements • Documentation & Best Practices: Create and maintain SOPs, knowledge base articles, and training materials • Document system architectures, workflows, and configurations