Orlando, FL · HashiCorp, an IBM Company

Michael Chasse

Resident Solutions Architect · HashiCorp Vault, Terraform & HCP · Multi-cloud platform & security automation

HashiCorp Resident Solutions Architect embedded with large banks, a Fortune 50 enterprise and a major energy utility, guiding Vault, Terraform Enterprise and HCP adoption from executive strategy to hands-on implementation. Ten years of cloud platform engineering and leadership across AWS, Azure and GCP, with deep expertise in secrets management, identity integration (OIDC / Entra ID), infrastructure as code and CI/CD for highly regulated environments. Integrates AI into modern DevOps workflows: agentic coding assistants, MCP integrations and self-hosted LLM infrastructure, built and run on a private cloud at home.

Looking for: AI / platform engineerDevOps, SRE or cloud engineerSolutions architect

See AegisX9 View resume GitHub
AegisX9: one request through the gateway Clients, apps and agents call the gateway, which applies single sign-on, per-team or per-agent keys, a model allowlist, budgets and rate limits. The request passes through input guards (prompt-injection and jailbreak detection, secret and PII redaction) to an allowed model provider; the response passes through output guards (data-leak prevention) back to the caller. The gateway and the output guards write to a tamper-evident audit log that stores no secrets. A dashed Phase 2 roadmap box shows a tool gateway with per-agent allowlists and human approval for risky actions. Clients apps, agents, IDEs team or agent key Gateway SSO, per-team keys model allowlist budgets, rate limits policy decision Input guards injection, jailbreak secret + PII redaction Output guards data-leak prevention on every response screened response back to the caller Model providers allowed models only hosted or self-hosted Audit log tamper-evident: every prompt, decision and tool call no secrets stored Phase 2, roadmap Tool gateway MCP, allowlists Approval risky actions Solid: Phase 1, in development in a private lab. Dashed: Phase 2, roadmap; not built yet. Highlighted: the guard path.
AegisX9: every model call and agent action passes through policy, guards and audit.
case studies

What I am building now.

Problem, what I built, the architecture, what it measured and what I would do differently. Private platforms are described at reference-architecture level.

platform In development

AegisX9

Secure AI gateway with governance for the enterprise

One policy-enforced gateway for all LLM traffic and agent actions: SSO and per-team or per-agent keys, a model allowlist, budgets and rate limits, input guards for prompt injection and secret or PII redaction, output data-leak prevention, a tamper-evident audit log, red-teaming as a CI gate and a signed, GitOps-delivered supply chain. Phase 1 is in development in a private lab; developer workspaces, agent and tool control and governance mappings follow on the roadmap. Apache-2.0; the source is private today and will be published.

  • AI security
  • LLM gateway
  • Guardrails
  • Audit
  • Supply chain
  • Kubernetes
  • GitOps
  • Python

Case study aegisx9.com

All projects

experience

Recent roles.

  1. May 2025 - Present

    Resident Solutions Architect at HashiCorp, an IBM Company

    Embedded advisor to large financial institutions, a Fortune 50 enterprise and a major energy utility for Vault, Terraform Enterprise and HCP.

    • Trusted embedded advisor for Vault, Terraform Enterprise and HCP, plus Packer, Consul, Nomad and Boundary, from strategy through implementation.
    • Advise executive and platform leadership on cloud operating model adoption, multi-cloud strategy, governance and ROI, translating product capability into business outcomes for practitioners through CxO.
    • Architect and deliver greenfield and modernization initiatives: Vault Secrets Sync, Microsoft Entra ID (OIDC) developer access to Vault, and multi-data-center Vault, Consul and Terraform Enterprise reference architectures.
    • Vault
    • Terraform Enterprise
    • HCP
    • Packer
    • Consul
    • Nomad
    • Boundary
    • AWS
  2. Aug 2023 - May 2025

    Site Reliability Engineer / Sr. Systems Administrator at Fortress Information Security

    Multi-region AWS platform, Vault and automation for a security company; promoted to SRE in December 2024.

    • Designed and implemented a multi-region, multi-AZ AWS infrastructure for the enterprise IT organization using Terraform, optimizing for reliability, security and cost; promoted to SRE in December 2024.
    • Architected and implemented HashiCorp Vault for DevOps and customer deployments, integrating secrets management into CI/CD pipelines.
    • Built Ansible automation for system deployment and maintenance, Docker/Podman microservices (SMTP relay, Traefik, proxies) and Terraform-managed AWS multi-account connectivity, replacing static IPsec tunnels.
    • AWS
    • Terraform
    • Vault
    • Ansible
    • Docker
    • Podman
    • Traefik
    • RHEL
  3. Jun 2022 - Jul 2023

    Sr. Server Systems Engineer at Kessler Collection

    Re-architected the VMware, storage and DR platform behind 11 hotel properties.

    • Led a complete re-architecture and rebuild of the VMware vSphere environment, including servers, SAN storage and UPS, supporting 11 hotel properties running Oracle Opera PMS; designed HA/DR with VMware SRM and Oracle Data Guard.
    • Upgraded Oracle Opera 5.4 to 5.6 with on-site migrations at each property and replaced physical workstations with VMware Horizon virtual desktops.
    • Implemented enterprise backup (Dell APEX / Druva), SolarWinds monitoring and IPAM with PagerDuty, and a data center redesign for power and network fault tolerance.
    • VMware vSphere
    • SRM
    • Horizon
    • SAN
    • Oracle Data Guard
    • Druva
    • SolarWinds
    • PagerDuty

Full resume Download PDF

skills

What I work with.

Grouped by area. Items marked with a dot link to a project where that skill shows up.

HashiCorp & secrets

  • Vault
  • Terraform Enterprise / HCP
  • Consul · Nomad · Boundary
  • Packer · golden images
  • Secrets management · PKI

Cloud & IaC

  • AWS multi-account / multi-region
  • Azure (Entra ID) · GCP
  • Terraform
  • Ansible
  • CI/CD · Jenkins · GitHub

Containers & platform

  • Kubernetes (k3s)
  • Docker · Podman
  • VMware vSphere · SRM · Horizon
  • Red Hat Enterprise Linux
  • Proxmox

AI & agents

  • LLM agents · MCP
  • Agentic coding assistants (Claude Code)
  • Self-hosted / local LLMs
  • AI-augmented DevOps

Security & identity

  • Zero trust · SSO · OIDC
  • PCI DSS
  • CIS hardening
  • Security+ practices

Observability & ops

  • SRE · monitoring · alerting
  • DR / BCP
  • Python · Bash
  • Embedded (ESP32, ESP-IDF)
certifications & training

Credentials.

Certifications

Previously held

Training and courses

  • AWS Certified Solutions Architect - Associate (SAA-C02) preparation
  • Certified Jenkins Engineer
  • Docker Certified Associate (DCA) preparation
  • Red Hat Certified Specialist in Ansible Automation (EX407) preparation
  • Microsoft Azure Fundamentals (AZ-900) preparation
  • AWS Well-Architected Framework
  • Managing AWS with Ansible
  • Deploying to AWS with Terraform and Ansible
available for select engagements

Outside work I take on a few projects a year.

Open to full-time roles and a limited number of outside engagements: infrastructure, security and AI-assisted operations.

AI-assisted operations

Agentic workflows, MCP tooling and guardrails built on real infrastructure, with cost and safety controls from the first commit.

Infrastructure and security

Terraform, Vault, AWS, VMware, Proxmox, Kubernetes and Ansible: designed, hardened and automated end to end, not just stood up once.

Sites and hosting

Design through deployment for small businesses: broad device compatibility, local search and a hosting stack I operate myself.

contact

Get in touch.

Hiring for a platform, SRE or solutions role, or have a project that fits the above? Send a note.

LinkedIn GitHub