Jesse McCann

Greenfield platform work on multi-tenant DAS Cloud — design, process, and mentoring — working alongside customers and teammates to take new deployments from proof-of-concept to production.

• Partnered with customers and across SRE, Service Desk, and engineering teams to onboard new clients — carrying their environments from first proof-of-concept to steady-state production.
• Built the multi-cloud Kubernetes “deployment factory” (Terraform/OpenTofu) that turned standing up a new-customer environment from days of manual work into one command and about an hour.
• Cut monthly cloud spend 45% through Cloud Custodian policy automation.
• Built an internal multi-agent AI platform (Vertex AI + Copilot) with a durable issue graph for long-running work — now the team's blueprint for large-scale legacy refactoring.
• Defined Terraform style and module standards, introduced a facade-based infrastructure pattern, split the SRE monorepo, and shipped the DAS 7.3 Terraform and Ansible release.
• Closed critical FedRAMP controls (SSH hardening, key rotation, scanner evidence, Salt/Zabbix remediation, GitLab upgrades) and expanded production IAM across RDS, CloudWatch, logging, Lambda, and snapshots.
• Evaluated and delivered multiple OpenSearch architectures (AWS, Aiven, Canonical Charmed/Juju) — Cluster Insights, UltraWarm/cold storage, in-place upgrades — and completed GCP commercial productionization.
• Improved detection and recovery with DAS CloudWatch alerting, Slack integration, a service-status page, RDS snapshots, immutable backups, and multi-AZ conversion; led resolution of customer-impacting incidents involving Elasticsearch, storage, certificates, and message queues.

A return to BlackLine to modernize at the AI frontier: Vertex AI and Gemini Enterprise at scale, and modernizing code, process, people, and workflow.

• Launched BlackLine's Gemini Enterprise (Agentspace) platform: Dev/Test/Prod environments and data connectors (SharePoint, OneDrive, Outlook, Teams, Jira, Confluence), a SAML→OIDC migration, and production data-access restriction.
• Designed and delivered a standalone, Terraform-managed GCP tenant for AI and agent workloads — org/folder structure, least-privilege IAM for citizen developers, network and tenant isolation, and a reusable module for business-unit agent projects.
• Implemented Workforce Identity Federation between Microsoft Entra ID and GCP; added vaulted break-glass access and removed over-privileged bindings and legacy admin tiers.
• Established infrastructure-as-code and release discipline (Terraform state migration, semantic versioning, Conventional Commits, release pipelines) and built self-service AI Playgrounds with automatic TTL cleanup.
• Automated the employee lifecycle with PowerShell onboarding/offboarding and a scheduled Workday export, and delivered Workato SSO/SCIM and a Confluence OAuth connector.

Hyperscale and real autonomy: Go and Kubernetes at the company behind enterprise Apache Kafka, through pre-IPO, IPO, and post-IPO growth.

• Wrote and operated Go and Python infrastructure services on GCP Cloud Run, with CI/CD from GitHub through Cloud Build; deployed GKE with Terraform plus custom Go cluster-management tooling.
• Led a multi-quarter Zero Trust network rollout (Palo Alto) for a global workforce, writing the allow-list automation so the cutover didn't interrupt anyone's work.
• Built proof-of-concept tooling to measure the blast radius of a proposed GitHub EMU migration, took the findings to InfoSec, TPM, and Engineering leadership, and helped steer the decision to GitHub Enterprise.
• Mentored 10 engineers and ran continuous-learning efforts across the infrastructure teams.

First move into cloud at a large, audited company — GCP, Python, and Terraform, where scale and auditability were the point. Migrated 4 Nutanix clusters, 30 servers, and 10 applications to GCP; ran the Atlassian stack (3,000 users) in high availability and automated HRIS, deployment, and patching, saving 10–15 hours per week.

Server Support Engineer, Publix Super Markets (2007–2012) — first tech job: cut my teeth on scaled, redundant enterprise systems where uptime was the whole story. Senior Systems Engineer, Virgin Galactic (2012–2014) — scrappy, fast-moving startup; multidisciplinary work across rockets, simulators, and systems, where the cost of a crash is real. Senior System Engineer to IT Manager, Applied Minds (2014–2018) — an R&D playground: AI, cybersecurity, national security, systems engineering, and management; led NIST 800-171 compliance and a 99.99%-uptime AWS migration.