I am Jonathan Polansky,
an infrastructure engineer
specializing in cloud, networking,
and security.

Projects

Self-Hosted Resume Website

This project focused on developing and deploying a self-hosted resume website, integrating Jenkins, Terraform, and Ansible for automation. Leveraging GitHub's webhook triggers, Jenkins orchestrates the provisioning of a new VM on Proxmox using Terraform, followed by configuration through Ansible. The website is served using Flask, uWSGI, and Nginx. The web app interacts with a Redis database to display and update a visitor counter in real time using Server-Sent Events.

Azure Website

The website you are on currently. This is a "serverless" website built in Azure using Github Actions, Azure CLI and Terraform. If any changes to the web files are pushed to Github, they trigger a Github Actions workflow to deploy the updated folder to Blob Storage and purge the CDN endpoint. Any modifications to the Azure resources are provisioned using Terraform through Github Actions, including setting the necessary Cloudflare DNS records. This project also incorporates a visitor counter, which stores the data in CosmosDB and is incremented using an Azure Function written in Python.

Skills

Work Experience

• Serve as the sole infrastructure owner for a 1,400-user software company across a primary site and 5 global branch offices, serving as their lead internal IT resource across cloud, systems, networking, and security.
• Manage 400+ AWS EC2 instances across multiple VPCs and regions, administering compute resources, VPC networking, security groups, and IAM to maintain a secure and reliable cloud infrastructure.
• Automate AWS infrastructure management and reporting using Python and boto3, including programmatic identification and remediation of security group misconfigurations across the environment.
• Replaced legacy SonicWall firewalls with FortiGates across all locations, configuring BGP to connect branch offices to AWS, SD-WAN for WAN path optimization, SSL decryption, IPS, web filtering, and application control.
• Architected and deployed Zscaler ZIA and ZPA to replace SonicWall SSLVPN for 1,400 remote users, enabling SSL inspection at scale, DNS filtering, web filtering, and DLP enforcement.
• Planned and executed a zero-downtime Active Directory migration from Windows Server 2012 R2 to 2022 across multiple domain controllers in a complex multi-site environment hosted on AWS.
• Deployed Microsoft Intune to 1,400+ end users, defining and building all compliance policies, configuration profiles, conditional access policies, and app deployments in collaboration with leadership.
• Deploy and manage enterprise monitoring and observability across all network devices, servers, and cloud infrastructure using Datadog and AWS CloudWatch, with real-time alerting pipelines delivered to Slack via Lambda.
• Develop comprehensive technical documentation and operational runbooks, enabling support teams to independently manage end-user issues.

• Manage a production datacenter environment housing 100+ VMs across 10+ hosts running VMware and Proxmox, alongside colocation services for multiple clients requiring managed hands and on-site support.
• Administer Veeam Backups across VMware, Proxmox, Hyper-V, Azure, Office 365, and AWS workloads.
• Deploy and manage a client-facing Veeam self-service restore portal for Microsoft 365, enabling end users to independently restore Exchange, Teams, SharePoint, and OneDrive data without engaging support.
• Designed and deployed a self-service disaster recovery portal using Ubuntu, nginx, and the Microsoft Graph API, enabling DR clients to independently provision ephemeral Azure VMs on demand.
• Migrated virtualization infrastructure from VMware to Proxmox, building a clustered environment for high-availability workloads.

• Served as sole systems administrator and third-level escalation for 20+ global financial services clients including hedge funds, managing infrastructure across cloud, virtualization, networking, and productivity platforms.
• Assisted with infrastructure projects including file server migrations to SharePoint and Egnyte, Exchange to O365 migrations, Windows Server upgrades, Intune deployments for workstations and mobile devices, and VPN deployments using Ivanti Secure.
• Administered Microsoft 365 environments including Exchange Online, SharePoint, and Teams, managing permissions, user lifecycle, and troubleshooting across multiple client tenants.
• Administered Mimecast across multiple client tenants, managing inbound and outbound email security policies, attachment sandboxing, URL protection, impersonation protection, DLP, email archiving, retention policies, continuity, directory sync, and automated signatures.
• Managed Active Directory functions including user provisioning, group policy, DNS management, and replication troubleshooting across multiple client environments.
• Managed configuration and troubleshooting of Cisco routers and switches to maintain network performance and reliability across client environments.

• Provided technical support and administration across Microsoft 365, Active Directory, and virtualization platforms for financial services clients.
• Gained foundational experience in backup operations using Veeam and Commvault, and supported email security administration across Proofpoint and Mimecast platforms.

• Led a team of 4-6 engineers through 100+ client onboardings, overseeing the full lifecycle from initial kick-off through technical implementation and handoff.
• Executed technical implementation work including new site buildouts, server deployments, firewall swaps, network equipment refreshes, and O365 migrations.
• Configured SonicWall firewalls including SSL inspection, application control, VLAN segmentation, and QoS policies to baseline client environments to company security standards.
• Conducted security audits for incoming clients, identifying gaps and implementing remediation as part of the onboarding process.
• Trained and mentored team members on implementation procedures and technical best practices.

• Executed new client site buildouts including server deployments, routers, switches, and wireless infrastructure from the ground up.
• Completed server migrations, firewall swaps, O365 migrations, Intune deployments, and MFA rollouts across a diverse client portfolio.

Education

Certifications