aimozart · Phoenix, AZ, USA · Remote only · sbaker@bigironbank.online · bigironbank.online
Test Automation Engineer (SDET): TypeScript · Playwright · API Testing · CI/CD · Custom Test Frameworks · 12+ years in enterprise IT, security and compliance
I'm a test automation engineer moving from 12+ years in enterprise IT, security and compliance. Quality first has always been how I work: prove it works, then ship it. I'm building a TypeScript and Playwright framework full time (in progress, not yet professional experience): a typed API client with schema validation, page objects, a separate test environment for every parallel worker, and pipelines in GitHub Actions and Jenkins, scored against 15 seeded defects in a bank application. Target: all 15 caught and no false failures on the clean build. Results will be posted here when they are measured.
I work test-first and deterministically: I forecast the outcome, pin every input, confirm a test fails for the stated reason before writing the code, and prove the result against the forecast. The evidence is in my own project, Entropa: its Rust implementation had 207 passing automated tests (documented 2026-08-23), byte-exact known-answer tests against NIST's official FIPS-204 vectors, JSON contract tests, and secret scanning in pre-commit and CI with 0 real leaks across the full history. My AI-assisted engineering follows a documented plan, prove, prune cycle in which claims are checked and corrected, not assumed: Paxel chat log.
Before that, 12+ years in regulated enterprise environments: I helped take a healthcare organization to official HITRUST certification (evidence for every control, Qualys and OpenVAS vulnerability scanning turned into remediation plans), ran baseline-configuration audits across a global fleet, wrote the SOPs and remediation documentation that enforced procedure, and administered Windows and Linux systems at scale (Active Directory, Group Policy, SCCM across all its functions; Windows XP → 7 → 10 and 7 → 11 migrations). The same discipline as a regression suite.
I hold the AWS Certified Solutions Architect – Associate and Databricks Certified Associate Developer for Apache Spark certifications and an SCCM Administration certificate. Remote only.
Hands-on Azure administration (Entra ID identity and access, Azure RBAC and Policy, Key Vault, Defender for Cloud and Sentinel, with Bicep and PowerShell) and data engineering (Spark, Delta Lake, Iceberg); building a TypeScript and Playwright test framework (in progress); designed, built and operated Entropa end to end; database-migration and infrastructure-as-code projects on Azure and GCP; earned AWS SA-A and Databricks.
Windows-heavy: administered Microsoft Intune and SCCM across all its functions (node and PXE server setups, OS imaging, application deployment to users, policy, patching, baseline-configuration audits), Active Directory and Group Policy, with heavy role-based access control (RBAC), group administration and global (enterprise-wide) policy; part of the team that migrated a global fleet from Windows 7 to Windows 11; ran enterprise EDR; administered PAM; MySQL.
Supported Active Directory and Hyper-V for roughly 3,400 TJX stores across the US and Canada (every North American banner, Sierra included), including the French-language stores, in a siloed environment; administered Microsoft Intune for the company's mobile devices across the enterprise (TJ Maxx and HomeGoods employees with company phones), including the C-level executives; delivered the enterprise-wide Software Center where entitled employees (mostly HQ staff and store managers) picked the applications they were permitted to install; administered Microsoft 365; administered Lotus Notes/Domino and databases for the account, and IBM i user access; C-level escalation support for down stores across the enterprise; restored 24/7 retail operations during outages.
Heavy Windows administration: Active Directory, Group Policy, and SCCM (OS imaging, policy, node setups, PXE servers, application deployment to users); migrated Windows XP → 7 → 10, and a legacy Windows NT domain (about 300 users) and NT servers to Windows Server 2012 R2, policies and user accounts included. Co-authored the security-policy framework and drove remediation to official HITRUST certification; wrote the program's SOPs; owned the security stack; PHI chain of custody on FIPS 140-2 media; MySQL in a HIPAA environment.
Linux web-hosting administration and occasional Windows Server hosting for customers who paid for it, plus MySQL and phpMyAdmin behind WordPress hosting, for 120+ enterprise accounts; server hardening and WordPress security on Ubuntu and RHEL. On the migration team for platform migrations across the company's hosting brands (Bluehost, HostGator, iPower and others): databases, WordPress sites, domains, DNS and Linux hosts, including moving acquired domains into larger platforms. Led the WordPress and hosting-account migrations.