Site Reliability Engineer

• Apr 2021 - Present

DevOps Engineer

• Oct 2020 - Apr 2021

Data Platform Engineer

• Mar 2019 - Oct 2020

DevOps Engineer

• Nov 2017 - Mar 2019

I was an original member of the API Foundation team, modernising the application integration and delivery of REST APIs through microservices through CI/CD.My major success was introducing modern practices such as containerisation and orchestration, end-to-end automated infrastructure provisioning, and continuous delivery of microservices. From there, the team grew into a skilled cross-functional agile team working closely with development and product teams to first understand their deliverables and subsequently design and build the supporting infrastructure.Parts of my role were split between consulting and engineering. These include:- Upskilling staff on modern infrastructure principles, practices, and tooling, as well as bridging the age-old development-operations gap.- Introduced Infrastructure as Code concepts and tooling as standard practice.- Designed and Engineered the Container Platforms (Kubernetes on-prem and in the cloud with AWS EKS), along with deployment templates.- Maintain CI/CD Pipeline infrastructure- Tooling: Git, Kubernetes, Helm, Terraform, Ansible, Go, Inspec, Concourse, AWS- Assist development teams in design, troubleshooting, tooling, and platform onboarding.- Wrote supporting software to help with observability on the platform.The best feedback from an end user: "I actually now enjoy coming into work each morning!".

Network Architect

• Jul 2017 - Nov 2017

I came back in to the Infrastructure Architecture team after four months overseas. I worked closely with fellow Architects, Operations, and Information Security teams.- Network monitoring system assessment.- Release testing application interaction and network design.- Business banking network design.- Wrote Disaster Recovery operational procedures.- Recommended security remediation between production and non-functional testing environments.- Experimented with Kubernetes and Elastic Stack to ingest network flow information and performance metrics.- Experimented with automating health checks that were previously manually done by staff each morning.

DevOps Engineer

• Dec 2018 - Feb 2019

Working in a small product team on a GraphQL API for club management as well as managing the cloud infrastructure for both the frontend and backend services. - GraphQL API using Typescript, Apollo Server 2, Prisma and PostgreSQL. - Social logins with Auth0 (Oauth2), and JWT validation. - Travis CI pipelines for deployments to Heroku and S3 - AWS CloudFront + S3 + ACM (TLS) - Terraform configurations for Heroku and AWS resources. Working in a small product team on a GraphQL API for club management as well as managing the cloud infrastructure for both the frontend and backend services. - GraphQL API using Typescript, Apollo Server 2, Prisma and PostgreSQL. - Social logins with Auth0 (Oauth2), and JWT validation. - Travis CI pipelines for deployments to Heroku and S3 - AWS CloudFront + S3 + ACM (TLS) - Terraform configurations for Heroku and AWS resources.

Network Engineer

• Oct 2016 - Mar 2017

I worked in the Network and Security team to plan hardware refresh of Regional Aggregation Points and Substations across the country. Part of this work was to plan the removal of dated core switches and establish connectivity to new switches in the new security architecture. - Understanding and recording features used on hardware refresh candidates. - Finding appropriate upgrade models and licenses. - Removing superfluous devices, consolidating functionality where applicable. - Planning the upgrade of legacy tunnels carrying SCADA (reverse Telnet) traffic.

Network Architect

• Mar 2015 - Jan 2017

Multicast (PIM-SM) troubleshooting and fix along with the implementation of Anycast RP with MSDP, and multicast security. Public IP readdressing, traffic migration to new internet connections. Network Design and Implementation for diverse internet connectivity, WAN and telephony services with Quality of Service configurations. Designing and implementing OSPF for core and internal routers and firewalls. IPv4 and IPv6 edge using BGP and VRF-lite. Additionally I designed and implemented the separation of the Core and Distribution layers across multiple server rooms within the campus.

Software and Network Architect

• Mar 2015 - 2017

Software and Network Architect in the COMSMART Professional Services team. Clients include: - Wellington International Airport Limited - SportNZ - Trustees Executors - Spark Digital Services Additionally, I have been involved in Software Architecture: - Languages: C, Javascript, Java, Python, PHP - Web frameworks: AngularJS, Bootstrap - Application Servers: Node.JS, Nginx, Apache, IIS7, Tomcat7,8 - Platforms: Amazon EC2, Microsoft Azure, Docker - Databases: MS-SQL, MySQL, Mongo, various language specific ORMs - Version Control: Git, SVN

Network Architect

• Jan 2012 - 2017

Network Professional (Network Architecture, Engineering, and Implementation) Clients include: - Comsmart - Silicon Systems - Compass Communications - Provoke Solutions - LayerX and vGrid (formerly theCloud) - nspire Technologies - Vibe Communications Network Professional (Network Architecture, Engineering, and Implementation) Clients include: - Comsmart - Silicon Systems - Compass Communications - Provoke Solutions - LayerX and vGrid (formerly theCloud) - nspire Technologies - Vibe Communications

Network Architect

• Jun 2016 - Sep 2016

After my time in the Network Operations team, I moved into the Infrastructure Architecture team to complete a network upgrade design for the Auckland and Wellington data centres using Cisco Nexus. As part of this work, a number of smaller pieces were completed: - OSPF Design for the Datacentres and five main corporate WAN sites. Much of this was around simplifying the routing table by configuring OSPF area summaries, and renumbering loopbacks in preparation for the Cisco Nexus core. - Implementation assistance for the OSPF Design. - BGP Design to fix the incomplete iBGP through the use of Route Reflectors, enabling BGP on the firewalls, and solving asymmetric routing and antispoofing to make redundant paths dynamic (removing manual intervention). - Multicast (PIM Sparse Mode) Core Redesign for the Bank Treasury Telephony system using Anycast RP and MSDP for a fault tollerant multicast topology Treasury Telephony. - Smokeping trial to build a long term picture of the network as demand grows and new systems are installed.

Network Engineer

• Feb 2016 - Apr 2016

Assigned to the Core Banking Modernisation team as the dedicated network resource to alleviate load on the Network Operations staff. My role consisted of: - Day to day support of the Non-Functional Testing environment. - Check Point Firewall policy management and interfacing with the Security and Risk team. - Citrix Netscaler management. - Documentation updates. - Solution design. - Network mapping and Server room hardware relocation. - Implementation of a WAN latency emulator.

Network Engineer

• Jun 2012 - Jan 2014

Placed at Kiwibank in the Network Infrastructure team by nSpire. I worked with the Network Engineers and Architects to analyse and rationalise the Check Point firewall rules in the Core Banking firewall cluster. I used Firemon to monitor traffic flows and correlate them to permissive rules, then define tighter rules in order to remove the permissive rules. This subsequently lead to defining new firewall policy standards to simplify management of the policies down the track. Placed at Kiwibank in the Network Infrastructure team by nSpire. I worked with the Network Engineers and Architects to analyse and rationalise the Check Point firewall rules in the Core Banking firewall cluster. I used Firemon to monitor traffic flows and correlate them to permissive rules, then define tighter rules in order to remove the permissive rules. This subsequently lead to defining new firewall policy standards to simplify management of the policies down the track.

Network Architect

• 2013 - 2013

Through Comsmart, I completed a Network Audit and proposed Network Redesign for the Corporate Network and Campus Tenants. Through Comsmart, I completed a Network Audit and proposed Network Redesign for the Corporate Network and Campus Tenants.

Network Engineer

• May 2011 - Jul 2011

Contracting in the networks team for two months before my OE, maintaining and cleaning up the existing network while the new network was being designed. Roles and Responsibilities: - Planning, scheduling and upgrading (hardware and firmware) access routers. - Fixing layer 2 switching paths and spanning tree topology. - Management network tidy up and redesign. - Moves/Adds/Changes for the systems team (VLANs and VRFs). - IP Address Management (move from spreadsheet to IPAM software). - Customer connectivity planning and implementation. - General network maintenance out of hours (onsite or Sky Tower). - Assisted with network monitoring scripts (Nagios Plugins).

System Administrator

• Apr 2006 - May 2011

I started working for ZeroOne which was later bought by Compass. Within the ZeroOne team I support customers, maintain and build virtual servers, deploy layer 2 and 3 networks within the Data-center, provision services for customers. Gained experience with VMware ESX and ESXi virtual machine hosts and switch core/distribution/access design/deployment (link aggregation, spanning tree, VLAN tagging), etc. Roles and Responsibilities: - Keeping the Data-centre network/hosted systems operational. - ZeroOne network core/distribution/access design, cabling/patching - General hosted solution design, firewall & network configuration. - Server/network problem solving & solution/service documentation. - Backup system management, testing & scheduling - Answering escalated support calls and emails. - Rostered on-call for 24x7 supported customers. - Writing business cases for new and existing customer solutions. - Assisting the web development (programming and best practices).

Website Migrations/Technical Support

• Apr 2005 - Apr 2006

Planned and executed the task of migrating website and email hosting customers from shared servers in USA to Webfarm’s own servers in Auckland to improve customer experience. Gained experience in customer support, Domain Registry and DNS, advanced scripting (Bash, PHP, Perl) and using scripts to automate parts of migrations. Roles and Responsibilities: - Liaising with customers migrating services with minimal downtime. - Working with the support team and customer support tickets. - Making various system changes for customers as required.

Computer Technician

• Mar 2004 - Dec 2004

Built a simple asset register database and frontend (MySQL, PHP, Apache). Roles and Responsibilities: - Asset management - Building new machines with matching hardware. - Building Linux systems ready for the disks to be imaged/cloned. - Installing computers & internet connections (call-outs). - Repairing malfunctioning PCs. Built a simple asset register database and frontend (MySQL, PHP, Apache). Roles and Responsibilities: - Asset management - Building new machines with matching hardware. - Building Linux systems ready for the disks to be imaged/cloned. - Installing computers & internet connections (call-outs). - Repairing malfunctioning PCs.