Wayne Lee
@waynelee1
Senior cloud infrastructure engineer specializing in secure hybrid AWS operations.
United StatesWhat I'm looking for
I’m a senior cloud infrastructure engineer with 25+ years designing, securing, and operating AWS and on-premises infrastructure, including 21 years at DrFirst, a HIPAA-regulated e-prescribing/EHR-integration SaaS company. I bring deep hands-on ownership of hybrid AWS architecture—EC2, RDS, VPC, IAM, Route 53, and site-to-site VPN—built for reliability and least-privilege access.
I’ve led security and compliance programs, including SOC 2 Type II and ISO 27001 audit leadership, and I’ve automated identity with Okta SSO. At scale, I’ve owned monitoring and response using Zabbix (10,000+ hosts), delivered datacenter failover/DR execution, and drove AWS cost optimization through the AWS MAP program.
Most recently, I secured EHR-integrated medical device connectivity for the VA EHRM program through 07/2026, architecting compliant network paths and submitting end-to-end ATC packages to DHA under NIST 800-53 with full audit trail. I also stay hands-on with AI-driven infrastructure automation (Claude Code, MCP, self-hosted agents) to speed up safe, repeatable operations.
Experience
Work history, roles, and key accomplishments
Infrastructure Network Security Engineer
RHO Incorporated
Nov 2023 - Jul 2026 (2 years 8 months)
Secured EHR-integrated medical device connectivity across the DoD boundary for the VA Office of Electronic Health Record Modernization (EHRM) by architecting private cloud network paths and enforcing least-privilege firewall policies. Developed and submitted ATC packages to DHA under NIST 800-53 and trained NetSecOps teams on secure connectivity testing and change management procedures.
Architected hybrid connectivity between AWS and on-premises databases, including site-to-site VPN tunnels and least-privilege firewall rules. Led monitoring and incident operations using Zabbix (10,000+ hosts), managed datacenter failovers, and supported SOC 2 Type II audit readiness and Okta SSO automation.
Led the 2007 HQ relocation project, including migrating network infrastructure for 300 users, upgrading to Windows Server 2008, transitioning POTS to VoIP, and deploying centralized AV and IP surveillance. Owned ISO 27001 certification activities, managed IT procurement ($250K+ annually), and coordinated penetration testing and FireEye anti-malware deployment.
Designed and deployed network infrastructure for 90+ staff across HQ and remote offices, including Active Directory, DNS, DHCP, IIS, site-to-site VPN, and APC power management. Administered MS SQL Server 2000 and Barracuda 400 anti-spam for cross-site high-availability email filtering and supported Citrix MetaFrame and Rcopia web application capacity.
Senior QA Engineer (Team Lead)
Network Associates
Jan 1999 - Mar 2002 (3 years 2 months)
Led firewall/VPN QA testing using WebShield, Gauntlet, and SmartGate, including test management and network security testing across DNS, FTP, HTTP, and email. Contributed to product internationalization alongside security-focused QA activities.
Network / QA Engineer
V-ONE Corporation
Feb 1997 - Jan 1999 (1 year 11 months)
Performed firewall/VPN QA work and managed related network security testing across protocols/services including DNS, FTP, HTTP, and email. Supported testing activities and product internationalization as part of QA delivery.
Education
Degrees, certifications, and relevant coursework
University of Maryland, Baltimore County (UMBC)
Bachelor of Science, Information Systems Management
Earned a B.S. in Information Systems Management from the University of Maryland, Baltimore County (UMBC).
Availability
Location
United StatesAuthorized to work in
Job categories
Skills
Interested in hiring Wayne?
You can contact Wayne and 90k+ other talented remote workers on Himalayas.
Message WayneGet matched with your dream remote job
Sign up now and join over 250,000+ remote workers who receive personalized job alerts, curated job matches, and more for free!
