Senior DevSecOps Engineer (Remote)

• Oct 2021 - Present

Founder

• Nov 2009 - Present

Provide consulting services on various projects to optimize the current infrastructure management code and general introduction to containers, mainly using Kubernetes. • Assist DevOps teams in improving and optimizing the current Terraform configuration, by modifying the existing code. This project improved the performance while deploying using Terraform, as-well as simplified the code. • Build a monitoring solution to allow for better visibility to the internals of the application as well as the infrastructure, the main tools used to collect and visualize the metrics and alerts were mainly Grafana and Prometheus • Build a Kubernetes Cluster in GCP and work with various teams in the company to convert to a serverless infrastructure. This project was fully automated with Terraform for all the infrastructure configuration and Helm as the application deployment tool. Show less

Cloud Engineer - (Remote)

• May 2021 - Sep 2021

Design and migrate all applications from an external Saas provider to AWS services. While maintaining the existing platform hosted in AWS. Introduce monitoring and altering solutions for both applications and infrastructure. • Deployed a monitoring and alerting solution using Prometheus and Grafana, which allowed for better visibility in to the infrastructure’s health and behavior • Design and build an EKS cluster for both production and staging environments • Design a migration plan to move from an external saas provider to EKS • Design a CI/CD pipeline to build and deploy the applications to EKS, the pipeline was configured to use Helm as the deployment automation for the docker containers and the configuration required by Kubernetes to run the application Show less

Senior DevOps Engineer (Remote)

• Oct 2018 - Oct 2020

Develop and deploy various solutions to improve the CI/CD pipeline, with focus on performance, scale-ability and additional automation. • Develop additional Terraform states to expedite the build and release steps of the pipeline. • Introduce solutions to allow for better visibility into Jenkins and pipeline related component, metrics collection scripts, and additional monitoring triggers. • Drive the effort to introduce Kubernetes (EKS) to replace EC2 type nodes. All the orchestration and automation was managed by Terraform • Audit the current pipeline for potential security gaps. Document and apply any necessary security patches or code changes. • Redesigned and rebuilt the legacy Artifactory setup in to a clustered solution, allowed for a faster artifact delivery and the ability to replicate between different locations. Show less

Senior Release Engineer - (Remote)

• Feb 2018 - Oct 2018

Supported the release engineering team in developing automation solutions to improve the SDLC workflow, as well as introduce Semantic versioning. Worked with the team leadership to introduce standard policies and procedures. • Introduce semantic versioning and the git-flow standards to various applications to replace the method of versioning by build-id, this allowed for faster development and testing as well as an audit trail incase of an urgent revert or hotfix situation. • Documented all the major functions of the Salt setup such as: deploy states and dependencies, custom states and orchestration. • Developed multiple Saltstack states, returners and beacon scripts, to assist in monitoring and metrics collection. • Developed multiple custom Terraform plugins for additional automation to interact with Google Cloud (GCP). • Replaced the existing Jenkins build workflow with a more robust pipeline approach with multiple branches supporting the git-flow standard. • Introduce automation tools for building and packaging the artifacts to be stored in Docker containers prior to deployment, this added a layer of security to guarantee the same code goes through the pipeline. Show less

Principal System Engineer - (Remote)

• Oct 2015 - Mar 2018

Lead the efforts to improve the technical operations and security team’s workflow by automating existing procedures and creating processes and policies to reduce on solutions delivery time and increase security posture. Designed a solution for a metrics collection and monitoring to allow for better visibility in to the application and infrastructure health and behavior. Introduced a new process of requests and ticket/task submissions to operations that significantly improved on the response time. Developed a new internal workflow for the Operations team following Kanban standards, that allowed for better tracking and performance visibility. Deployed a new metrics collection and graphing solution that significantly increased the visibility in to the systems health and performance, decreased triage and discovery time during incidents and allowed for better tracking of current capacity and scale. Designed and automated the process of OS security patching. Compiled the policy based on which an automated tool was developed. The tool helped to maintain a consistent patch level to fit the requirements of the PCI compliance policy. All the automation was implemented as part of the Configuration management (SaltStack). Rebuilt the infrastructure serving the CI/CD environment. The new architecture was designed as a cluster running Jenkins managing the build pipeline and resulted in improving the performance of the build, testing and deployment workflow. Played a key role in a data-center migration project between coasts, the hardware existed in both data centers and the cut-over was less than 3 minutes. Refactored and re-engineered the configuration management (Saltstack) workflow for various tasks that allowed for a significant reduction in change deployment time. Designed and deployed a new Atlassian Jira and Confluence as a cluster leveraging the Atlassian Data-Center solution. The architecture components are automatically provisioned and scaled in AWS. Show less

IT Manager - Infrastructure Operations (Remote)

• Apr 2014 - Oct 2015

Lead and mentor the Core operations team. Restructured the team and reallocated resources based on expertise and specialty. Introduced a new vision for the infrastructure to modernize the hosting platform and deployment methodologiesImproved the team structure to allow focus on the interests of the business and individual career developmentDesigned a Disaster Recovery plan consisting of cost analysis on multiple failover options as well as replication/backup options. Consideration included multiple physical sites as well as AWSDeveloped a hybrid cloud automation platform using Ansible and custom written playbooks for the environment consisted of Ansible-Tower as the management interface and VMWare vSphere and AWS as the hosting platform.Designed a migration plan to retire legacy in-house developed configuration management and deployment tools to be replaced by Ansible and Chef. Show less

Devops Technical Lead

• Jun 2013 - Apr 2014

Played a lead role in the DevOps team, including mentoring of the best practices and methodologies, as well as allowed for an autonomous development process to the various development teams.Designed a new on-call rotation schedule, by splitting the single operations team rotation to a per product on-call rotation, thereby allowing for an increase of visibility of the current state of the platform by introducing 60 additional members to the rotation and reduced the alert rate by approximately 80%Developed a wrapper for the deployment tool to allow access control and setting of policy that resolved the bottle-neck of a single release team, thereby allowing each product team to maintain their deployment schedule autonomously, resulting in an increase of release frequency from 2 to 35 per month.Mentored the “DevOps” of other product teams to follow and apply the defined best practicesDesigned a base structure for the use of Ansible as a configuration management and deployment toolDesigned a new Splunk cluster to serve as the main log aggregation point for both operational and business intelligence. Show less

Senior Systems Engineer

• Feb 2013 - Jun 2013

Served as representative of the IT operations team, working with 60+ developers on multiple products, to maintain best practices and fluency of the development cycle, while introducing new solutions to improve the development process by scaling and automating the development platform, deployment process and tools.Audited and improved monitoring and metrics tools to increase visibility on product behavior and performance, using tools such as: Ganglia, Nagios.Scaled and improved the performance of the backend PostgresSQL DB in all environments by increasing the resource footprint and optimizing connectivity on both kernel and db.Developed a proof-of-concept tool to allow for developing independently without interrupting the workflow of other teams, by bringing up a production replica development environment in AWS and deploying the desired application and configuration changes. Tool written in python using boto and fabricDesigned and built a new QA grid environment to allow for a flexible “webdriver” testing environment with diverse OS and browser versions. All instances are provisioned on demand using Jenkins on KVM and VMWare running SeleniumPlanned and executed on a full product OS Upgrade from CentOS5 to CentOS6 while rebuilding and reconfiguring all dependent packages. All tasks were automated using Ansible Show less

Senior Systems Engineer

• Oct 2012 - Feb 2013

Support a live production platform while developing scaling and redundancy solutions. Migrated an infrastructure hosted on AWS between different accounts and regions, while converting the configuration management components from Puppet to Chef. Developed various infrastructure and application supporting modules/cookbooks for chef. Developed supporting tools to manage AWS EC2 instances to allow for mass executions of operations, rapid and auto provisioning Developed a solution for data migration from production to AWS S3 and Glacier. Managed Load balancer changes and custom rules. Reviewed current SOX compliance audit plans and document scope and security flaws mitigation plans. Show less

Senior Systems Engineer

• Feb 2010 - Oct 2012

Design and implement solutions for general infrastructure and security flaws, while maintaining production integrity and continuous deployments. Developed an automated deployment tool, with the ability to incorporate custom modules for in-house written applications, mainly using Capistrano. Rebuilt and redesigned the DNS infrastructure across multiple platforms, while providing for a redundant solution across continents. Designed and deployed a backend windows active directory infrastructure for authentication and authorization purposes, using Puppet to maintain policies and Centrify Express for authentication. Backend infrastructure included: AD, Sophos Console, WSUS and Terminal Services, all the components were hosted on a Hyper-V Cluster. Deployed a centralized configuration management solution using Puppet and rewrote all OS related configuration files in to Puppet modules with templates to generate the configuration automatically based on geographical location and other dependencies. Assisted in the design of an internal security policy and procedure to satisfy compliance, with automated scheduled patching based on penetration test results. Designed and deployed a new virtualization solution, including evaluation of major vendors such as: VMware, Citrix, RHEV and OVM, Including a POC. Managed all the migration efforts from RHEL5 Xen to Citrix XenServer and VMware vSphere 5. Show less

System Engnieer/ Storage Admin - Consultant

• Apr 2008 - Feb 2009

• Designed and built a managed and monitored solution for incoming and outgoing connection filtering, using Squid, Nagios, Cacti. • Developed and implemented custom solution for vendor dynamic storage usage reporting system on. • Designed a replication/synchronization solution for dual publishing verification from coast to coast. • Modify Tivoli backup configurations for update servers. • Created an automated solution for monitoring a removal of non-existent nodes in LDAP. • Migrate existent servers/nodes to a new backup system in bulk, required an automated solution. • Develop an application to extract configuration files from network appliances in to subversion in an automated way. • Develop an alternative solution for manual high availability clustering, including floating IP’s and remount of shared storage devices. • Develop an automated synchronization reporting system, to report by mail daily. • Develop and application to extract the current usage of storage devices in to an excel spreadsheet and send by mail weekly. • Modify existent daemon scripts to log every action and generate a summary monthly. Apache, Jboss, Dynamo • Develop and deploy a centralized logging solution, with a web interface for management, syslog-ng, php-syslog-ng, MySQL. • Setup and replace the Super User environment with an auditable environment to log in to mysql. And develop an application for auditing. SudoSH2 environment. • Develop and deploy a Cacti plug-in for data source collection to graph the synchronization results reporting on time, speed and amount of files transferred. • Develop and deploy a Nagios plug-in to monitor for failed synchronization jobs and report as Critical or Warning depending on the restrictions. Show less

System Engineer

• Oct 2006 - Nov 2007

Design, Monitor, maintain and repair the servers that provide the following services within the main platform and the internal office services: • Maintenance and security of the Live Trading servers. • Full administration of the Mail server, including monitoring for spam and defected mail. Filtering using relays, maintenance of the relays and pointers. – Barracuda Filters • Design and Deployment of a new mail environment running Postfix / Cyrus IMAP, clustered using RHCS, connected to an external storage. • Designed and Deployed of the backup solutions. • Administration of the development and staging (testing) Virtualized servers. • Designed and Monitored all the services and first response solutions. • Designed solutions for server and network redundancy, such as load balancing and fall back solutions. • Configuration and Design of the web environment running Apache, Tomcat, Weblogic. • Maintenance and administration of the database servers. – MySQL, PostgreSQL. • Design and Modification of the security policy within the internal network. • Conversion of hardware while avoiding downtime to the systems. • Configuration and administration of DNS servers. – Bind 8, 9. • Migration of physical server to virtual servers, running on XEN/VMware. • Configured and maintained a clustered web environment and proxies. – /HA/Apache/mod_proxy/mod_ssl. • Management of a Virtualized Production Environment, VMware Infrastructure and XEN Enterprise. • Migration of services from windows to Linux servers, such as: LDAP, Kerberos, NFS, Samba. • Migration of internal servers to a remote Data center. And Creating a VPN Tunnel for communication. • Initial Configuration of Managed Switches: Cisco, DELL. • Configuration and installation of a Main Software Repository. • Design a solution for diskless boot and Fast Deployment – Kickstart, NOCMonkey, FastDeploy. • Initial storage design, and continues administration. Including HBA and iSCSI. – FalconStor, 3Par Show less

Systems Administrator

• Sep 2005 - Sep 2006

Responsible for all technical requests from clients, both hardware and software Initial Server installation including hardware assembly, operating systems, and network configuration Control Panel installation and customization General Unix/Linux Redhat/CentOS/FreeBSD server administrator upon clients request, including all services: Web, Application, Mail. Responsible for all technical requests from clients, both hardware and software Initial Server installation including hardware assembly, operating systems, and network configuration Control Panel installation and customization General Unix/Linux Redhat/CentOS/FreeBSD server administrator upon clients request, including all services: Web, Application, Mail.