Malcolm Acker
Multi-account AWS platform. FedRAMP Moderate. 40+ services in production.
What I Do
I joined a healthcare SaaS company as the sole infrastructure person and built the AWS platform from scratch: Terraform architecture, container supply chain security, CI/CD pipelines, and compliance posture across FedRAMP, HIPAA, and SOC 2. The compliance assessment passed on the first attempt.
- FedRAMP Moderate authorized on first attempt
- 67 Terraform modules across 6 AWS accounts
- 40+ containers, zero static credentials
- Migrated from Docker Swarm to ECS Fargate with zero data loss
- Built and led the DevOps team (4-7 engineers, 18 months)
- Single reusable pipeline enforcing FIPS + SBOM + signing across all builds
Before this: 7 years as a Senior Systems Administrator deploying video conferencing infrastructure for UK government (AWS, CloudFormation, Direct Connect into secure datacenters) and managing enterprise networks. Before that: Manhattan SCALE WMS deployments for logistics companies (GE, Haier, SCI Logistics, Canada Cartage). 20 years of infrastructure work across healthcare, government, and supply chain.
Featured Work
I designed a three-tier Terraform architecture (67 modules) that lets one engineer safely manage 6 AWS accounts, 16 environments, and 60+ microsegmented endpoints with zero static credentials and no outbound internet access.
I built a single 785-line reusable GitHub Actions pipeline that enforces FIPS cryptography, dual vulnerability scanning, and SBOM attestation across all 40+ containers, eliminating the TOCTOU gap with a local OCI registry pattern.
I migrated 40+ containers from Docker Swarm to AWS ECS Fargate with zero data loss and zero application code changes, using PostgreSQL logical replication as a hot standby for instant rollback.
I led a distributed team of 4-7 engineers through an 18-month FedRAMP authorization while building structured knowledge-sharing sessions that took engineers from zero cloud security experience to independently deploying regulated infrastructure.
View all projects →