Portland, Oregon, United States
Experienced System Administrator with skills that include creating and managing Information Technology projects. Implementing organizational and network hygiene practices. Specialties: Linux & Microsoft Domain Administration, MS Server 2000-2012 R2, Unix, LAN/WAN Administration, DNS, Apache, IIS, SQL and mySQL Administration, PBX Administration, Astrisks Phone System Setup and Deployment
• Completely automated deployment of infrastructure and engineering platforms using Ansible and Packer as no existing code or method existed. • Produced a custom application (Python and Ansible) to manage POSIX accounts as a stop gap before implementation of LDAP • Worked with the electrical engineering team to upgrade software and dependencies as instances were updated from RedHat 7 to 9/10 • Provided technical support to engineering teams
• Led effort of expanding product into Azure. This involved modification of the existing image pipelines for Azure. Utilized GitHub Actions, Atlassian Bamboo, Ansible, and Terraform to deploy infrastructure and appliances within a customers environment. Updates to code and infrastructure were offered weekly via pipelines. • Led the integration and deployment of AWS services in Dubai and Singapore regions, adding critical global features and ensuring compliance • Refactored Terraform infrastructure code, aligning it with best practices and style guides for AWS, GCP, and Azure, enhancing maintainability and scalability • Began transition project of moving platform to AKS and EKS • Spearheaded the automation of operations using Puppet and Ansible, significantly improving deployment times and reliability • Managed Nexus cluster to support deployments that used nexus for repos and artifact storage. • Transitioned CI/CD workflows from Bash and Python scripts to Atlassian Bamboo and GitHub, optimizing development processes • Developed and maintained Configuration as Code (CaC) and pipeline frameworks using Java, Bash, Python, and YAML, ensuring consistency from development through to production. Utilizing syntax checkers, test environments, and code reviews.
• Refactored and condensed 100+ custom-written Puppet modules from version 4 to 7 (latest), including configuration manifests for 30+ types of distinct systems. The business model had Puppet backed into the product, updating Puppet and its manifests and modules allowed the application to utilize more powerful features as well as eliminating hundreds of workarounds and bug fixes. • Designed and implemented multi-cloud-capable and multi-platform CI/CD processes for Virtual Machine and Container creation, versioning, and maintenance via GitLabCI • Developed and evangelized team style guides for Puppet, Packer, Ansible, and GitlabCI. • Introduced team to novel (unused) technologies, acting as an evangelist, teacher, and technical lead. • Utilized Docker standalone, Docker swarm, and Kubernetes to deploy new Puppet infrastructure and Nexus HA. • Consulted and assisted the SRE team with the transition from bare metal Kubernetes to Amazon EKS • Utilized Bash, Python, and Powershell for configurations that were not inside the scope of Ansible or Puppet yet.
• Designed and implemented network segmentation, introduced an internal network and supporting infrastructure for more efficient cluster computing • Designed and implemented the company's production network for 10 collocation facilities • Led charge and implementation to abandon inherited legacy OS (Crux Linux) and migrate to CentOS • Wrote and released completely Puppet-controlled environments for Production, QA, and Engineering • Utilizing r10k, enabled the creation of ephemeral environments that may be spun up by any user with no risk to other environments • Implemented and maintained GitLab Runners to ease development of Production, Python, and Bash by notifying the author if tests fail • Released and maintained services for the production environment including OpenLDAP, BIND9, OSSEC/WAZUH, HAProxy, SpaceWalk, GitLab, etc. • Perform upgrade of environments in 10 collocation facilities from Puppet 3.8 to Puppet 6 (stop gap) then to Puppet 7.5. Also included upgrading CentOS 6.10 to CentOS 7.9 Replaced ten Xen 6.1 hypervisors with 20 KVM hosts controlled by a central Ovirt node with NFS shared storage of 10 TrueNAS systems. Replacing 20 existing firewalls with more modern solution • First point of contact for all security issues, Internally and Vendor submitted • Sole recipient of security monitoring and alerts • Point person for PCI certification audits and vendor vulnerability scans • Administer Atlassian and Active Directory • Work with cloud platforms such as AWS, GCP, VMWare, KVM (oVirt and ProxMox) • Contributor on the team that went from three 9s to five 9s of uptime
Infrastructure architecture including fresh builds of Bind 9, LDAP and Kerberos authentication, OSSEC, etc. across 7 global data centers.
• Day-to-day management of systems in all production environments: multi-datacenter SAAS, on customer-site solutions, and internal development and operations environments • Perform planned and unplanned maintenance procedures, including software upgrades and patches. • Serve as 2nd-level escalation path between Help Desk and systems engineering, handling technical issues which require further investigation and consultation with other teams within the company (though seldom interfacing directly with clients). • Monitor operational components for warnings and errors, investigate and resolve issues. • Assist with system deployment duties including system builds, packaging and shipping, physical/network installation, command-line configurations.
• Monitoring and reporting of operating system and application performance • Producing documentation in support of all systems, change management, and future capacity plans • Maintaining/repairing all infrastructure components to provide 100% uptime • Recommending and implementing changes supported by evidence collected from thorough performance analysis • Creating and developing plans and projects for upgrades, patches, optimization opportunities and capacity planning exercises • Maintaining 60+ physical servers with 100+ virtual servers • Systems include VMware, NIS, LDAP, BIND, SVN, Cobbler, Apache/Tomcat, Java, Orcale, SQL/MySQL, F5 Load Balancer