Portfolio index · HTML Ron Mercier | Cloud Support Specialist & Cybersecurity Engineer
About Skills Projects Experience Contact Blog ↗
Cloud & Cybersecurity Engineer

Ron Mercier

I build things that hold up under pressure: cloud infrastructure, security tooling, and the kind of technical support that turns a customer's worst day into a resolved ticket. I'm a Technical Support Engineer at Verint, supporting enterprise fraud and security platforms. Before that, I was a Cloud Support Specialist at Akamai, handling DDoS alerts, compromised account remediation, and database recovery for 500+ global customers. On the side, I'm building SecureByDefault.io, a practical cybersecurity and IT education platform focused on real-world skills, troubleshooting, and hands-on learning.

MSc Cybersecurity CySA+ PenTest+ ISC2 CC AWS CCP

Engineer. Writer. Builder.

I'm a Cloud & Cybersecurity Engineer based in Raleigh, NC, with experience across enterprise cloud platforms, fraud and security systems, and real-world incident response. The common thread in my work is keeping complex systems running under pressure and communicating clearly when things go wrong.

At Verint, I'm a Technical Support Engineer for enterprise Fraud & Security platforms. My days go to root-cause analysis, log forensics, and working with engineering on the toughest problems customers escalate. Before that, I spent 2.5 years at Akamai as a Cloud Support Specialist, where I triaged DDoS alerts, remediated compromised accounts, and restored database availability for 500+ global customers while holding a 90%+ satisfaction rating. Earlier in my career, I worked on network infrastructure at AT&T and hardware systems at Woven by Toyota.

I'm also a husband and a father of five, and I built SecureByDefault.io to make technical learning more practical and approachable. It focuses on real-world cybersecurity, IT support, Linux, cloud, career development, and hands-on skills that people can actually apply on the job.

Current Role
Technical Support Engineer
Verint · Fraud & Security Solutions · Remote
Base
Raleigh, North Carolina
Open to remote and hybrid roles
Graduate Education
MSc Cybersecurity, WGU
Graduated February 2026 · Cloud Security · GRC · PenTest
Undergraduate Education
BSc Computer Science, WGU
Graduated 2021 · Architecture · Linux · Databases
Writing
SecureByDefault.io
Real attack breakdowns · No hype
Open Source
6 Active Repositories
Hardening tools · IR toolkits · Checklists

What I Work With

Skills built over years of cloud support, network engineering, and cybersecurity work, solving real problems in production environments.

🛡️
Cloud Security
AWS infrastructure hardening, IAM least-privilege design, security group configuration, S3 bucket security, and cloud-native threat detection.
🎧
Enterprise Technical Support
High-volume support at Akamai (15–20 tickets daily) and on Verint enterprise platforms. Root-cause analysis, log forensics, DDoS triage, and account remediation, with 90%+ satisfaction across 500+ customers.
🐧
Linux & Server Admin
Ubuntu, Fedora/RHEL production environments. Nginx, UFW, Fail2Ban, SSH hardening, systemd, performance tuning, and infrastructure automation.
⚡
Incident Response
Triage, containment, forensic preservation, and post-incident reporting. CySA+ and PenTest+ certified with hands-on enterprise IR experience.
☁️
AWS & IaC
Lambda, DynamoDB, API Gateway, S3, CloudFront, Route 53, ACM, SAM, and CloudFormation. CI/CD via GitHub Actions with OIDC auth.
🌐
Network Security
Enterprise network engineering from AT&T. TCP/IP, firewall architecture, WAF configuration, VPN zero trust, and network-layer threat analysis.

Pinned Repositories

Open-source security tools, hardening configs, and incident response resources, built from real operational experience.

🔒
⭐ Battle-tested
securebydefault-server-hardening
A production-grade Linux server hardening baseline: Nginx security headers, UFW deny-by-default, tuned Fail2Ban configs, SSH key-only auth, and kernel sysctl hardening. Tested against real attacks on day one.
Bash Nginx Linux Fail2Ban UFW
View repository →
✅
28 items
cloud-security-checklist
A practical, engineer-built security checklist across 6 categories: Identity & Access, Email & Phishing, Devices, Backups, Network & Cloud, and People & Process. Free PDF version available.
Security Cloud Checklist Bash
View repository →
🎯
5 scenarios
ddos-tabletop-toolkit
A practitioner's DDoS incident response tabletop toolkit with 5 scenarios, from volumetric floods to smokescreen data exfiltration. Includes runbooks, facilitator guides, and scorecards. Built from my Akamai IR experience.
DDoS IR Tabletop Blue Team
View repository →
⚡
Python 3.12
cloud-resume-backend
Serverless visitor counter API for the Cloud Resume Challenge. AWS Lambda + DynamoDB + API Gateway HTTP API, deployed via AWS SAM with OIDC-authenticated GitHub Actions CI/CD. No stored credentials.
AWS SAM Lambda DynamoDB Python OIDC
View repository →
🌐
Live site
AWS-S3-Static-Website
Portfolio site hosted on AWS S3 with CloudFront CDN, Route 53 custom domain, ACM SSL/TLS certificate, and automated GitHub Actions CI/CD deployment. This site you're viewing now.
AWS S3 CloudFront Route 53 CI/CD
View repository →
📋
Case study
Incident Response Writeup: SQLi
Incident response case study documenting the detection, analysis, containment, and remediation of a SQL injection attack. Methodology, timeline, forensic evidence, and lessons learned.
IR SQLi Forensics Writeup
View repository →
View All Repositories ↗

Where I've Worked

Technical Support Engineer, Fraud & Security Solutions
Verint
Jan 2025 to Present · Remote
  • Deliver deep technical support for enterprise Fraud and Security platforms, partnering with customers, integrators, and internal engineering teams to resolve the most complex escalations.
  • Perform root-cause analysis and systematic debugging of software, networking, and system-related issues in high-stakes enterprise environments.
  • Analyze logs, system configurations, and application behavior, turning raw technical data into clear, actionable resolution paths.
  • Collaborate cross-functionally with engineering and support teams to drive issue resolution and improve platform-wide reliability.
  • Document technical findings, troubleshooting workflows, and solutions to build a shared knowledge base that reduces resolution time across the team.
Enterprise Support Root-Cause Analysis Log Forensics Fraud & Security Networking
Cloud Support Specialist
Akamai Technologies
Sept 2022 to Jan 2025 · Remote
  • Managed 15–20 technical support tickets daily across Akamai's Linux-based cloud platform, resolving complex issues for 500+ customers across networking, compute, managed databases, VMs, and object storage.
  • Detected, triaged, and resolved DDoS alerts on customer cloud servers, coordinating rapid mitigation to minimize service disruption and protect customer infrastructure.
  • Investigated and remediated compromised customer accounts, conducting root-cause analysis and implementing corrective measures to restore security posture.
  • Collaborated with the database management team to diagnose and resolve database failures, restoring availability and communicating resolution timelines to affected customers.
  • Partnered with Engineering, Trust & Safety, Product, and Sales teams to advocate for customer needs and drive continuous service improvement.
  • Authored internal documentation and user-facing resources that streamlined issue resolution and reduced repeat ticket volume across the support team.
Linux Cloud Infrastructure DDoS Response Incident Response DNS Technical Support
Hardware Technician · Contract
Woven by Toyota
Jan 2022 to Sept 2022 · San Jose, CA
  • Managed imaging and software deployment across 50+ autonomous vehicle hardware systems, reducing setup time by 20%.
  • Analyzed reliability test data to predict hardware lifespan with 95% accuracy, enhancing long-term product quality.
  • Troubleshot OS, firmware, and hardware failures across Linux and embedded systems environments, restoring full functionality under tight timelines.
  • Maintained security configuration and software across all managed systems to sustain privacy and protection against unauthorized access.
  • Managed comprehensive repair and update logs via Jira, increasing team operational efficiency by 30% through optimized issue tracking.
Linux Embedded Systems Hardware Diagnostics Jira Device Imaging
Senior Network Technician
AT&T
Aug 2016 to Jan 2022 · San Jose, CA
  • Led a team of 8 technicians to complete 6 MDU fiber infrastructure projects on time, within budget, and with 100% client satisfaction.
  • Installed and upgraded VoIP, video, and high-speed internet services for 500+ residential and commercial customers, achieving 98% customer satisfaction.
  • Analyzed network performance across the customer base, identifying and implementing improvements that increased average speeds by 20%.
  • Troubleshot routers, switches, firewalls, and hardware across residential and enterprise environments, providing clear technical explanations to non-technical customers.
Network Engineering VoIP Fiber Infrastructure Team Leadership Enterprise Support

"Ron is someone who I have a ton of respect for. He often rose to the occasion to handle new tasks in a rapidly evolving environment, and never made a fuss about it. I often thought of Ron as someone who quietly performed better than many realized because he operates without fanfare or commotion. Dependability and integrity are essential traits in any workplace, but especially so in a remote environment. I absolutely recommend Ron for any team that feels the same."

MP
Michael Peters
Training Specialist, Compute Support · Akamai Technologies

Let's Connect

I'm open to Cloud Security Engineer, SOC Analyst, and Cloud Support Engineering roles where I can put my incident response experience and security mindset to work at scale. I answer every genuine message, whether it's a role inquiry, a question about something I've written, or a project worth discussing.

You can also reach me through SecureByDefault.io. Subscribe to the newsletter or reply to any issue I send. I read every response.

Send Me an Email
Claude finished the response