Cloud & IT Infrastructure · San Francisco Bay Area

I take neglected IT environments and make them secure, documented, and cloud-hosted.

Ten years across systems administration, networking, and security. Most recently the only IT staff member at a 100+ user community mental health nonprofit across two San Francisco sites, where I ran an AWS-hosted clinical research platform, automated a full file-server-to-cloud migration, and rebuilt the security posture from the ground up.

Open to cloud infrastructure roles AWS Certified Solutions Architect 10+ years IT Bay Area / Remote
Get in touch Download resume GitHub LinkedIn

Experience

Mar 2022 to Aug 2025

IT Specialist

Homeless Children's Network · Community mental health & family services · San Francisco
  • Only IT staff member for a 100+ user behavioral health nonprofit across two sites. Every endpoint, server, switch, vendor contract, and the IT budget.
  • Served as the organization's point of contact to the San Francisco Department of Public Health for the 2023 EHR migration from Avatar to Epic. Owned technical readiness and testing, and got Citrix access working across every workstation.
  • Deployed and administered a REDCap clinical research platform on AWS using Elastic Beanstalk, EC2, and AMI-based recovery. Included SSL certificate management, a SendGrid API integration that automated monthly survey distribution, and incident response for unauthorized access attempts.
  • Wrote a PowerShell migration script that moved every local user profile and shared network drive to Google Drive, retiring an aging on-premises file server along with its hardware, warranty, and backup appliance costs.
  • Rebuilt the security posture to satisfy cybersecurity insurance requirements: MFA across Google Workspace and Microsoft 365, enforced password standards, encrypted email for client referrals, phishing simulations, and third-party risk assessments.
  • Cut recurring operating costs by consolidating phone, internet, and SaaS vendors, securing nonprofit pricing tiers, and winning hardware grants that funded laptop refreshes at no cost to the organization.
  • Managed the lifecycle of 100+ endpoints and site networking on Ubiquiti UniFi gateways, switches, and access points, from procurement and imaging through secure decommissioning.
  • Introduced a ticketing system and formal IT documentation where none existed, giving leadership visibility into IT workload for the first time.
2019 to 2022

Autonomous Vehicle Test Specialist

Cruise · San Francisco
  • Monitored autonomous vehicles on live San Francisco public roads, intervening and troubleshooting in real time when systems behaved unexpectedly.
  • Documented vehicle behavior and edge cases for engineering teams, contributing structured field data used in safety validation.
2013 to 2019

Systems Network Support Specialist

LSS of Northern California · Concord
  • Supported 100 users across 15 sites connected via MPLS and SD-WAN, handling workstation, server, and network incidents end to end.
  • Maintained Windows Server infrastructure and supported SQL Server database operations alongside the engineering team.
  • Owned IT asset management for all sites: procurement, inventory, and provisioning of workstations and network equipment.
2009 to 2013

Computer Technician

Pleasanton Computer Repair · Last Chance Computers
  • Built, diagnosed, and repaired custom desktop systems for residential and business clients. Data recovery, hardware and software troubleshooting across PC and Mac.
  • Set up and maintained networking equipment across residential and commercial LANs. On-call scheduling and on-site service.

Projects

OCR Quiz Capture

Phone camera captures multiple-choice sheets, OCR extracts the answers, results transmit over WiFi to a tablet display in real time. A Python and Node.js pipeline built end to end.

PythonNode.jsOCRWiFi transport

Google Drive Migration Script

PowerShell automation that moved every local user profile and shared network drive at a 100-user organization into Google Drive, allowing an aging on-premises file server to be retired entirely.

PowerShellGAM / GAMADVGoogle Workspace

Cinderworks

A small 3D printing and fabrication operation producing functional parts, enclosures, mounts, and brackets. Slicer profiles tuned to cut material waste and raise first-pass success rates.

CADOnshapeFDM

Certifications & Education

AWS Certified Solutions Architect - Associate
Amazon Web Services · Mar 2026 to Mar 2029
Active
CCNA: Switching, Routing, and Wireless Essentials
Cisco Networking Academy · May 2020
No expiry
CompTIA Security+
CompTIA · expired
Expired
CompTIA Network+
CompTIA · expired
Expired
A.S., Information and Communication Technology
Diablo Valley College · 2023
Degree
Certificate of Achievement, Network Cybersecurity
Diablo Valley College · 2023 · Digital Forensics, CCNA Security
Certificate

Technical

Cloud & Virtualization

AWS: EC2, S3, IAM, VPC, Elastic Beanstalk, AMI. Cloud migration. SSL/TLS certificate management. Hyper-V and VMware.

Systems & Directory

Windows Server 2008 R2 through 2019. Windows 10/11, Ubuntu, Kali, macOS. Active Directory, Group Policy, Google Workspace Admin, Microsoft 365 Admin.

Networking

TCP/IP, DNS, DHCP, VPN, VLAN. Firewall administration. Ubiquiti UniFi gateways, switches, access points. MPLS, SD-WAN, Wireshark, NAT and port forwarding.

Security

MFA rollout, endpoint protection, email encryption, phishing simulation, security awareness training, cybersecurity risk assessment, HIPAA-adjacent compliance.

Automation & Scripting

PowerShell, Bash, Python. GAM and GAMADV. AI-assisted development. ConnectWise Automate, ImmyBot.

Platforms

Microsoft 365, Google Workspace, ClickUp, ITGlue, Zoom, Adobe CC, Epic EHR via Citrix, SQL Server, TeamViewer, AnyDesk.

How this site is built

This page is not on a website builder. It runs on the same AWS primitives the Solutions Architect exam covers, defined in one CloudFormation template and deployed from the command line. That was the point.

Visitor browser Route 53 DNS + alias record CloudFront CDN + TLS termination S3 private origin (OAC) ACM certificate GET alias origin Request path
Route 53 hosts the zone and points alias records at the distribution. CloudFront terminates TLS with an ACM certificate, caches at edge, and adds security headers. A CloudFront Function redirects www to the apex. The S3 bucket is private, blocked from public access, and reachable only by this one distribution through an Origin Access Control policy with a SourceArn condition. Every resource is defined in a single CloudFormation template, so the whole site can be torn down and rebuilt from one command. Static content, no servers to patch, and it runs for a few dollars a month.

Source: github.com/Chizance/chancelage.me