Marcus Whitman

Senior IT Infrastructure Engineer

St. Louis, MO | whitmanhm@gmail.com | linkedin | github

[ download the PDF ]

summary

Senior IT infrastructure engineer with 20+ years across enterprise IT, managed services, and military operations. AWS Certified Solutions Architect - Professional with production experience across EC2, VPC, S3, CloudFormation, and Application Migration Service, including a full data center migration to AWS. Administers cloud, Microsoft 365, and identity infrastructure at an MSP serving 44 client organizations (21 on Microsoft 365), owning client onboarding, multi-tenant delegated administration, and security tooling. Builds PowerShell and Python automation for that work through AI-assisted development, maintained in a GitHub codebase with secret-scanning CI.

technical skills

Cloud Platforms
AWS (EC2, VPC, S3, CloudFormation, Application Migration), Azure (VMs, Key Vault, Entra ID)
Infrastructure as Code
AWS CloudFormation
CI/CD & Version Control
Git, GitHub, GitHub Actions
Automation & Scripting
PowerShell, Python, Power Automate
AI-Assisted Development
Production automation via Claude Code (Python, PowerShell), 20+ reusable infrastructure workflows
Identity & Security
Entra ID / Hybrid Azure AD, Active Directory, GDAP / CSP delegated admin, Microsoft Graph (PowerShell), Duo MFA, Proofpoint, SAML SSO, certificate-based auth, CISA ScubaGear
Endpoint & Device Management
Microsoft Intune (MDM), Windows Hello for Business, BitLocker disk encryption, Conditional Access, Entra Join
Monitoring & Management
NinjaRMM, Auvik, PagerDuty, SentinelOne, N-Central
Virtualization
VMware, Hyper-V, Citrix Cloud / XenApp
Networking
DNS, DHCP, TLS/SSL certificates, nginx, IIS, Citrix NetScaler, SonicWall, firewall administration
Collaboration & ITSM
M365 Administration, SharePoint, Exchange Online, Jira / JSM, Halo PSA, IT Glue, Confluence

experience

Inzo Technologies - Senior Infrastructure Engineer

St. Louis, MO | August 2025 - Present

Managed services provider (MSP) supporting 44 client organizations

  • Onboarded the CSP component that enabled GDAP and Microsoft 365 Lighthouse, then established delegated administration across 21 client M365 tenants, replacing per-client admin accounts with single-identity access
  • Designed an AI-assisted automation framework of 20+ reusable workflows that standardizes security audits, network documentation, and client onboarding across 44 client organizations; in one three-week period it produced 12 onboarding scripts for a single client migration and API reference libraries for 4 MSP platforms
  • Led the technical onboarding of an acquired MSP (20 client organizations) onto the company's standard toolset, building ~370 IT Glue infrastructure assets and moving documentation and credentials off plaintext SharePoint storage
  • Onboarded 2 managed services clients end-to-end, from M365 tenant and license migration and Active Directory takeover through RMM, EDR, email security, and MFA enrollment
  • Led the company-wide Duo MFA rollout, enrolling all employees and configuring SSO for 8 internal services
  • Built the initial Microsoft Intune and Entra Join configuration for the company's ~40-employee rollout: compliance policies, a Windows security baseline, and Conditional Access, with device enrollment validated in testing

Keystone Technologies - System Administrator

Eureka, MO | September 2018 - July 2025 (promoted from Service Desk Technician, 2020)

Healthcare-focused MSP and cloud consultancy

  • Served as the sole L3 escalation system administrator (2020-2023) for 25+ clients on AWS and Citrix Cloud, then as senior system administrator trained the sysadmins hired from the largest client's IT department
  • Led a 30+ server data center migration to AWS for a large elder-care organization using AWS Application Migration Service, and moved a ~20 TB PACS imaging server to EC2 by AWS Snowball instead of over the client's link
  • Initiated and led the AWS Systems Manager rollout across every client account (300+ EC2 instances), building the service IAM roles by hand so new servers were configured through Run Command and Session Manager instead of RDP
  • Onboarded client AWS accounts into the company's AWS Organization with cross-account roles, and built client VPCs from standard CloudFormation templates, plus site-to-site VPNs and AD Connector or AWS Managed Microsoft AD
  • Administered Citrix Cloud on AWS for 25+ clients and 1,000+ users: built Machine Catalogs and Delivery Groups, deployed FSLogix, and repointed 30+ VDAs from NetScaler to Cloud Connectors in one client's move to Citrix Cloud
  • Ran EC2 backup with N2WS and on-premises server backup with Cove Data Protection, including three full production recoveries of a client's 5 ransomware-hit servers (2 domain controllers) from EBS snapshots
  • Designed a Windows 11 readiness inventory of 3,000+ workstations, pushing a PowerShell collector through N-Central into AWS DynamoDB (AI-assisted CloudFormation); found ~90 devices that could not upgrade
  • Single-handedly moved ~100 client organizations' documentation from IT Glue to Confluence, designing the space structure and templates, and migrated thousands of credentials from IT Glue to LastPass, then to Keeper

REJIS - Associate Network Analyst

St. Louis, MO | March 2016 - September 2018

Government-commissioned data services provider for local law enforcement and city and county governments

  • Administered Windows Server infrastructure and Active Directory for municipal government clients across the St. Louis metropolitan area, within the organization's managed IT services group
  • Managed WSUS patching, Dell Kace software deployment, and Citrix XenDesktop support for St. Louis County

BJC HealthCare - Senior Customer Support Technician

St. Louis, MO | September 2010 - February 2016 (promoted from Customer Support Technician, 2012)
  • Provided enterprise desktop, application, and hardware support for clinical and administrative staff across a 15-hospital health system in a HIPAA-regulated environment

United States Navy, USS Farragut (DDG-99) - AEGIS Computer Network Technician

February 2004 - March 2010
  • Administered a 41-node HP-UNIX combat systems network with fiber optic backbone and Cisco routing infrastructure, performing scheduled maintenance, system administration, and real-time troubleshooting during operational deployments
  • Earned two Navy Achievement Medals: one for restoring command and control servers during a live missile exercise, and one for contributing to a 98% Cruise Missile Qualification score

certifications

  • AWS Certified Solutions Architect - Professional (Recertified October 2024)
  • AWS Certified Solutions Architect - Associate (February 2019)
  • CompTIA A+ (2010)

volunteer

Ruling Elder and Clerk of Session, Midtown Church (PCA)

St. Louis, MO | 2020 - Present
  • Serves on the church's governing board (session) and, as clerk, maintains its official records and minutes

Volunteer System Administrator, Grace and Peace Fellowship

St. Louis, MO | 2010 - 2011