Umer Mahmood
Infrastructure & Security Engineer. Greater Seattle, WA · Available now · Greater Seattle or remote. Seeking infrastructure security, DevSecOps, platform and systems engineering roles.
Priority background
- Dozens of ATO efforts across DoD programs, including two complete packages led end to end at SMX and the secure campus wireless ATO delivered with NSA integrators.
- Led a 12-administrator datacenter team as Site Lead and Product Owner; migrated 100+ VMs from VMware to Nutanix HCI with under four hours of downtime.
- Cut costs where security allowed it: $100K+ per year through microsegmentation, and an AWS Outpost bill from $1,400 to $300 a month.
- Most recent contracting role: Senior Systems Administrator & Site Lead at SMX, Oct 2023 – May 2025.
Current work
I currently consult and am the sole member of YATC LLC (Yet Another Tech Company), a managed service provider I co-founded and began working on part-time in December 2023. The LLC runs the self-hosted platform described under Self-hosted platform and is where the independent projects below are built.
Detailed responsibilities and self-reported outcomes: resume. Contact: umerm89@gmail.com.
Security clearance
Top Secret clearance held through May 2025 (last cleared role); eligible for reinstatement.
Project evidence
- netstig — Network STIG evidence, automated. Python · Netmiko · NAPALM · Nornir · Typer CLI · v1.3.0.
- Spotter — A macOS terminal with an AI you set the level on. Swift 6 · SwiftUI · AppKit · SwiftTerm · iOS companion.
- Self-hosted platform — The VPS that runs this site, operated like production. Rocky Linux 10 · Docker Compose · OpenBao · GitLab CE · nginx · Tailscale.
- STIG Checklist Editor — Desktop checklist review and export. Go + Wails · React/TypeScript UI · Windows · macOS · Linux.
- Bao GUI — A desktop client for OpenBao secrets. Go 1.26 · Fyne · OpenBao SDK v2 · macOS · Linux.
Education and credential status
- Bachelor of Science, Cloud Computing (AWS track), Western Governors University (online): In progress, part-time.
- Computer Science coursework toward an Associate degree, Modesto Junior College, Modesto, CA: 2007 – 2009.
- Nutanix Certified Professional – Multicloud Infrastructure 6 (issued Mar 2025).
- CompTIA CySA+ ce (valid through Nov 2027).
- CompTIA Security+ ce (valid through Nov 2027).
- LPI Linux Essentials (issued Feb 2022).
- Microsoft Technology Associate: Networking Fundamentals (issued Oct 2016).
- AWS Certified Cloud Practitioner (held 2023 – Aug 2026, expired; renewal planned).
- ISC2 CCSP exam passed Oct 2023; certification not held (endorsement window lapsed).
- Planned: AWS Certified CloudOps Engineer – Associate and AWS Certified Solutions Architect – Associate; exams planned, not yet scheduled.
AI contribution
I use AI tools for coding, iteration, tests, and documentation. The portfolio is meant to show infrastructure, security and architecture judgment; I do not claim to be a seasoned software developer. Read my approach.
Sources and access
Career facts are self-reported. Screenshots show actual applications; synthetic data and startup states are labeled. Source repositories are private on a self-hosted GitLab; contact me for a walkthrough.
Download structured profile (JSON) · Full resume · Resume PDF