Ernest L. Baker

Container Vulnerability Scanning with Trivy

Developer • Fall 2025

Used Trivy to scan container images for OS package and dependency vulnerabilities, secrets, and misconfigurations. Built a GitHub Actions pipeline to automate image scanning on every build, and documented the full workflow from a vulnerable base image through scan results and remediation.

Supply Chain Security with SBOM

Developer • Fall 2025

Generated a Software Bill of Materials (SBOM) with Syft for a containerized application and scanned it for known vulnerabilities using Grype. Triaged 47 initial findings down to the one vulnerability with an available fix, remediated the vulnerable dependency, and rebuilt and rescanned to confirm the fix in CI.

Predicting CVSS Vulnerability Severity with Machine Learning

Developer • Fall 2025

Trained a Random Forest Regression model on ~156,000 NVD vulnerability records (CVE, CISA KEV, and EPSS data) to predict CVSS base severity from underlying attack characteristics (vector, complexity, privileges required, user interaction, scope, CIA impact) plus real-world exploit signals. Achieved an R² of 0.986 on held-out data, with integrity impact and network-based attack vectors as the strongest predictors. Caught and corrected an early data-leakage bug that had inflated an earlier version's accuracy to an unrealistic 99.99%.

Capture-the-Flag Infrastructure Setup (NJ3CT)

Systems Administrator • Fall 2025

Provisioned and configured a DigitalOcean VM for a team capture-the-flag exercise. Hardened SSH (disabled root login, created scoped user accounts), stood up nginx and vsftpd, and built deliberately vulnerable services - anonymous FTP access and path-traversal target directories - to give teammates a live environment for enumeration and exploitation practice.

Secrets Scanning in Git Repositories

Developer • Fall 2025

Implemented Gitleaks to detect and prevent secrets leakage in Git repositories. Added pre-commit hooks for local enforcement, integrated CI/CD scanning with GitHub Actions, and showcased GitHub Advanced Security push protection. Originated as an in-class CI/CD security demo for Introduction to Cybersecurity. Demo includes fake secrets, failing pipeline, remediation, and history cleanup workflow.

Portfolio CI/CD Pipeline

Developer • January 2024 - Present

To build a personal portfolio site with automated deployments using GitHub Actions + Cloudflare demonstrating GitOps workflow basics, static site hosting, version control, and deployment automation.

DOE Grant Data Extraction Script

Developer • March 2023 - December 2023

Executed and maintained Python scripts to generate datasets for DOE Grid Modernization grant reporting using scripting fundamentals, data extraction, and operational support for compliance workflows.

Open Sauced Guestbook

Contributor • February 2025

Open-source collaboration learning GitHub forking, branching, and PR submission workflow for basic open-source contribution practices, collaborative version control skills.

CloudRF API Clients - Python 3 Migration

Contributor • December 2018 - February 2019

Upgraded Python client code for CloudRF API: refactored for Python 3 compatibility and organized Python 2/3 variants.

DevSecOps & CI/CD

Git, GitHub Actions, GitHub Advanced Security, Gitleaks, Trivy, Syft, Grype, Pre-Commit Hooks, SBOM Generation, CVE/CVSS Vulnerability Analysis, Applied ML for Security Scoring

Systems Engineering & Governance

IT Governance, Infrastructure & Network Design, Project Management, Requirements Gathering, UAT, Digital Transformation

Automation & Programming

Python, Bash, C++, Java, SQL, YAML, Markdown

Platforms, Virtualization & Cloud

Linux, Windows Server, VMware, Proxmox, Docker, Kubernetes (k3s), Digital Ocean, nginx, vsftpd

Networking & Security Tools

nmap, Wireshark, VLANs, Subnetting, VPNs, Load Balancing, Hardware MFA (YubiKey), TCP/IP

Infrastructure Automation

Traefik, n8n, Pi-hole, Homelab Design & Deployment

Database Management

SQL Server, Oracle, MySQL, PostgreSQL

Tools & Applications

Itron FDM, Fixed Network 100, OpenWay, SSMS, Oracle Billing & MDM, Cherwell

Duquesne Light Company, Information Technology

Software and Systems Analyst III (Metering and Applications Team) • November 2021 to Present

• Led data retrieval efforts by performing comprehensive data analysis and engaging in strategic collaborations with vendors, resulting in securing over $19.7 million in Department of Energy grants for Grid Modernization Projects.
• Collaborated with Faster support to identify and resolve part ordering issues, enhancing data integrity and improving operational efficiency within the Faster database.
• Developed Python scripts to automate processes within the Outage Management System, reducing manual effort by up to four hours daily and ensuring project timelines were met.
• Performed thorough audits of internal documentation and monitoring systems to ensure accuracy, reliability, and compliance with IT governance standards.
• Maintained operational success by stepping into key roles during personnel changes, facilitating smooth transitions and ensuring team objectives were consistently met.
• Developed and implemented Single Sign-On (SSO) solutions and robust data retention policies, ensuring cybersecurity and compliance with data continuity requirements.
• Collaborated with project teams to analyze requirements, define project scope, and translate business and technical needs into application modules, ensuring successful project outcomes.
• Provided ongoing technical support, resolving support issues promptly and ensuring continuous system and application availability, contributing to high user satisfaction.

City of Cleveland Department of Public Utilities, Information Technology

Systems Analyst (AMI System, Network & Application Administrator / Database & Network Analyst) • July 2018 to May 2021

• Analyzed and correlated Key Performance Indicators (KPI) data using Microsoft SQL Server and Field Deployment Manager (FDM), identifying underperforming areas and non-normalized endpoints, ensuring timely and accurate meter reads that contributed to $300 million in yearly revenue.
• Ensured continuous performance of 287 Automated Meter Reading (AMR) gathering sites using Ethernet and Cellular protocols, maintaining 98% read rate and network reliability.
• Verified completion of contractual work and processed payments for contracts valued at $250,000, conducting thorough reviews to ensure compliance and fiscal responsibility.
• Analyzed and streamlined daily operational processes by automating reports, file transfers, and archiving tasks with Python, saving five hours per week while maintaining accuracy.
• Provided advanced business support and critical infrastructure support to Department of Public Utilities and Cleveland Water Department users, ensuring seamless operation of essential services and high user satisfaction.
• Administered and supported production and test environments for Windows and Linux servers, ensuring system stability and optimal performance.
• Managed and supported the Itron 900 MHz Fixed Network 100, ensuring network met Key Performance Indicators (KPI) and delivered 98% reliable meter reading services.
• Conducted Quality Assurance Testing and User Acceptance Testing (UAT) to validate system functionality and performance, ensuring high standards of software quality.
• Collaborated with meter operations to minimize the impact of system outages, exceptions, and inaccurate data, enhancing service reliability and customer satisfaction.
• Created and maintained an inventory of system equipment, including servers, field devices, and permanent meter reading equipment, ensuring accurate asset management and tracking.

Itron

Field Engineer • September 2015 to July 2018

• Executed mitigation surveys in areas with weak or no signal to ensure sector acceptance and automated billing certification for Itron OpenWay Advanced Metering Infrastructure, enhancing network reliability.
• Utilized tools such as OpenWay Field Pro, 3G Squid, Zigbee radios, and optical probes for field operations, demonstrating expertise in advanced metering technologies.
• Conducted investigations of malfunctioning meters and recommended appropriate replacements or installation of alternative technologies, improving system accuracy and customer satisfaction.
• Presented mitigation results and findings to customers, effectively communicating technical information and solutions to stakeholders.
• Managed inventory and maintenance of testing and safety equipment, ensuring operational readiness and compliance with safety standards.
• Performed preventative maintenance on testing and safety equipment, minimizing downtime and maintaining equipment performance.
• Conducted fieldwork in remote and challenging environments, often working independently and carrying equipment up to one mile, ensuring timely and accurate completion of tasks.
• Diagnosed and troubleshooted various electronic and RF systems, ensuring quick resolution of issues and minimizing service disruptions.
• Applied knowledge of RF and propagation theory, TCP/IP, and routing concepts to optimize network performance and reliability.
• Maintained strong PC skills, utilizing software such as Excel, Word, and PowerPoint for reporting, data analysis, and presentations, resulting in clear and effective communication of technical information.

Itron

Quality Assurance Analyst • July 2014 to September 2015

• Led quality assurance testing to verify work completion according to original work orders, ensuring adherence to established protocols and maintaining high standards of project execution.
• Utilized Itron FDM and FC300 tools for data collection, analysis, and reporting, enhancing the accuracy and efficiency of project management tasks.
• Conducted follow-up interactions with customers to confirm satisfaction with installations, addressing any concerns and ensuring a positive customer experience.
• Performed comprehensive data analysis using Excel to query completed work types, ensuring accurate contract billing and thorough project wrap-up.
• Managed inventory of used and unused supplies across multiple locations in Northeast and Central Ohio, ensuring accurate billing based on work performed and maintaining supply chain efficiency.
• Assisted municipalities in Northeast Ohio and Central Illinois with quality assurance testing and verification, contributing to regional project success and consistency.
• Collected and validated meter readings for over 500,000 customer accounts, ensuring data accuracy and project completeness for large-scale validation efforts.

Scope Services

Water Meter Installer • May 2014 to July 2014

• Conducted the replacement of residential and commercial water meters, ensuring accurate and efficient installation to maintain service quality and regulatory compliance.
• Identified and reported hazardous conditions that could impact the safe replacement of water meters, contributing to a safer working environment.
• Maintained and operated hand-held technology devices such as GPS, PDAs, and digital cameras for planning and executing daily tasks, ensuring data accuracy and timely completion of assignments.
• Interpreted maps and navigated assigned geographic areas using GPS instruments, demonstrating strong directional and organizational skills to complete meter replacements within specified timeframes.
• Communicated professionally with customers, addressing their concerns and resolving issues such as meter tampering or unexpected situations on their premises, ensuring high levels of customer satisfaction.
• Adhered to corporate policies and procedures, including safety requirements, to complete all work assignments efficiently and safely.
• Worked independently with minimal supervision, showing self-motivation and the ability to multitask in a fast-paced environment.
• Performed routine physical tasks such as standing, walking, lifting, and stooping while exposed to various weather conditions, demonstrating physical endurance and adaptability.
• Trained on and utilized new equipment and procedures to improve work efficiency and effectiveness.

United States Army

Specialist E4 - Cannon Crewmember • June 2010 to October 2013

• Operated and maintained field artillery equipment, including howitzers, to support combat operations and mission objectives in diverse environments.
• Deployed to Afghanistan, engaging in active combat operations and ensuring artillery support for ground troops, contributing to mission success and troop safety.
• Held a SECRET security clearance, maintaining the highest standards of security and confidentiality in handling classified information.
• Conducted routine and preventive maintenance on artillery systems and vehicles, ensuring operational readiness and minimizing downtime.
• Coordinated with infantry and other support units to synchronize artillery fire, enhancing overall mission effectiveness and operational efficiency.
• Trained and supervised junior soldiers, providing mentorship and guidance to improve their technical skills and combat readiness.
• Recognized for exemplary service with multiple awards, including the Afghanistan Campaign Medal with 2 Campaign Stars, Army Commendation Medal, NATO Medal, Army Good Conduct Medal, National Defense Service Medal, Global War on Terrorism Service Medal, and Army Service Ribbon.

Stetson University, Florida

Bachelor of Science - Cyber Security • May, 2027

Coursework spans applied cryptography (symmetric/asymmetric ciphers, hashing, key management, and hardware-based authentication), big data mining with machine learning applied to vulnerability severity prediction, and a secrets-scanning CI/CD demo built for Introduction to Cybersecurity that grew into an ongoing security-tooling project line. Relevant coursework: Applied Cryptography, Big Data Mining & Analytics, Introduction to Cybersecurity.

Info-Tech Research Group

Service Planning and Architecture • 2023

Completed comprehensive training on IT service architecture design, service lifecycle management, and strategic service planning to align technology solutions with business objectives.

Info-Tech Research Group

Strategy and Governance • 2023

Mastered IT governance frameworks, strategic planning methodologies, and policy development techniques to ensure technology initiatives support organizational goals and compliance requirements.

University of California, Irvine

Budgeting and Scheduling Projects • 2020

Developed expertise in project financial management, cost estimation techniques, and timeline development to deliver projects within scope, budget, and schedule constraints.

University of California, Irvine

Managing Project Risks and Changes • 2020

Gained proficiency in risk identification, analysis, and mitigation strategies while mastering change management methodologies to ensure project adaptability and stakeholder acceptance.

University of California, Irvine

Initiating and Planning Projects • 2020

Learned systematic approaches to project initiation, scope definition, stakeholder analysis, and comprehensive planning techniques that establish solid foundations for successful project delivery.

Matanzas High School

High School Diploma • 2010

Completed general education with focus on mathematics and computer science, establishing a foundation for future technical studies and career development.

Student Veteran Organization at Stetson University

Secretary • 2025-2026

Serving as Secretary for the Student Veteran Organization at Stetson University, coordinating meetings, managing communications, and supporting veteran students in their academic and social endeavors.