SUMMARY:

• I’m a senior Automation Engineer with sysadmin DNA. As a seasoned Puppet developer, I’m typically embedded in Site Reliability teams supporting web application environments with project based work initiatives. I automate complete system lifecycle for web application clusters/environments; including provisioning, configuration management and continuous delivery pipelines for artifact deployment. I’m systems agnostic and therefore equally comfortable automating both Windows and the full spectrum of Unix flavors.
• I am seeking a role where I can collaboratively drive automation solutions according to best practices and innovative design patterns, using the Puppet Labs suite of tools. I'm open to full time employment as well as short and long term contract opportunities.

TECHNICAL SKILLS:

SKILLS & TOOLS: Proven ability to architect, build and support distributed, fault - tolerant systems; either clustered nodes or standalone servers Provisioning web application clusters/environments with Puppet, Foreman, Mcollective, etc Continuous Delivery pipelines integrated with provisioning and configuration management AWS/EC2; VMware ESX 3.5-4.1 & ESXi 5.x/vSphere; XenServer/XenCenter 5.6 SP2; AWS EC2 and attendant APIs. Capacity planning and Virtual Infrastructure sizing Ubuntu and Redhat systems and their derivatives, as well as Windows Server 2008/2012 R2 Application environment/service scaling and performance tuning Monitoring, centralized logging, event aggregation, auditing and reporting with Splunk; Nagios/GroundWork Community; Logstash with Lumberjack & Kibana; Loadbalancing/Autoscaling in EC2; Windows Event Forwarding and Collection Foreman 1.0-1.7x, Puppet 2.7x-5.x, Facter, Mcollective, Hiera, PuppetDB, and ActiveMQ

PROFESSIONAL EXPERIENCE:

Confidential

Puppet Developer

Responsibilities:

• Developed Puppet modules to migrate on-premise business intelligence applications to Amazon’s EC2.
• The guiding strategy was to separate configuration data from configuration code by wrapping modules available on Puppet Forge and leveraging the data transformation and iteration features of Puppet 4 and Puppet 5 to consume Hiera data.
• Developed automation solutions with Puppet for Tomcat, IIS, SSSD, MIT’s Krb5, Sudo, Samba, Amazon’s CodeDeploy, .Net 4.6.2, CIS Benchmarks for RHEL 6.8/7.2.

Confidential

DevOps Lead

Responsibilities:

• Developed a Metadata-Driven Architecture (MDDA) model for automating the delivery of system infrastructure. The solution leverages Puppet, Hiera, R10k, MCollective, PuppetDB and Foreman and was designed to read in metadata prepared as Hiera data (via GitHub). The project itself was authored in Puppet (building Puppet systems with Puppet), is fully automated and the automation framework for configuration management and service delivery is triggered via Git Hooks (push button deployments).

Confidential

Contract Automation Engineer

Responsibilities:

• Fully automated (Puppetized) the Center for Internet Security’s Configuration Benchmarks for the following operating systems:
• Windows Server 2008 R2; Windows Server 2012 R2
• Redhat 6.5/7.0 and Centos 6.5/7.0
• Ubuntu 12.04/14.04
• Developed Puppet solutions for a variety of client application environments; including a solution which leverages Amazon’s Simple Service Manager (SSM). The goal of the project was to bring “orphaned” Windows/Linux servers into a lean configuration model, using Bash, Powershell, Chocolatey and Puppet.

Confidential

Contract Automation Engineer

Responsibilities:

• Supported the Confidential Go platform. Technologies include Splunk, Jenkins, Puppet, Hiera, Mcollective, PuppetDB and R10K.
• Code review of all Puppet modules with attention to deprecated/new/enhanced functionality and changes in Ruby versions from Puppet 2.8 to 3.x.
• Upgraded Confidential ’s Puppet infrastructure and migrated from Enterprise to Open Source.
• Puppetized Confidential ’s DRM solution, Microsoft PlayReady and InsideSecure’s DFS Fusion Server. The installation manual for DFS server is 147 pages long and takes a human several hours to install and configure the application stack; which has numerous dependencies on middleware and cryptographic libraries. The Puppetized solution installs and configures the application stack in less than five minutes.
• Worked with Confidential ’s Digital Products division to scale to AWS in order to add additional capacity to handle workloads for the upcoming season of Game of Thrones.

Confidential

Contract DevOps Engineer

Responsibilities:

• Built a complete lifecycle management capability for the GLOBALedit technology stack replete with auto-scaling capabilities; e.g., no-click provisioning, configuration and change management for Windows Server 2012 R2 using Puppet, Hiera, Foreman and Rundeck. Puppetized the following application stack: IIS 8.0, Microsoft C# app tier with multiple WCF services. I also assisted with a migration to MSSQL 2012 for 64 bit for its scaling capabilities.

Confidential

Automation Developer/Engineer

Responsibilities:

• Architected migration from AWS to Rackspace (a hybrid metal/hypervisor solution) to accommodate for large scale growth of the number of mobile devices managed by the app
• Installed and configured a fully integrated Puppet 3.3x, Foreman 1.3.x, Mcollective and Rundeck 1.6x environment
• Created a no-click, scheduled, automated provisioning capability which enables “cloudbursting” from metal to hypervisor for elastically managing sinusoidal traffic patterns
• Fully automated provisioning and configuration of the Ruby stack (ruby-2.0.0-p247 under RVM) including nginx/unicorn and haproxy.
• Fully automated code deployments (Github to server) with the ability to deploy specific, point-in-time revisions of code
• Fully automated deployments of Redis, including Slave and Sentinel roles
• Fully automated NewRelic, Papertrail, for logging and monitoring

Confidential

Contract Cloud Engineer

Responsibilities:

• Upgraded existing Puppet environment with most current stable builds Puppet, Hiera and Mcollective as well as introducing Foreman as an External Node Classifier (ENC)
• Developed a change management and automation capability for Confidential 's new ecommerce platform using the above framework.
• Automated the installation and management of application containers, configuration data, initial deployment of artifacts and smoke tests of new instances for the following: ActiveMQ 5.8, Apache Server with mod dispatcher, Apache Solr, Adobe CQ 5.6.1, ElasticPath (as middleware), MongoDB, NewRelic agents and Java installations using parameterized Puppet classes and several Hiera/yaml backends for application configuration data
• Exposed application roles and project environments in order to provide CI tools like Jenkins with "lay of the land" visibility into the automation environment
• Developed monitoring and notification systems as well as a centralized logging capability using Logstash for Confidential 's ecommerce platform
• Documented all of the above

Confidential

Systems Administrator, DevOps Level IV

Responsibilities:

• Day-to-day management of Confidential ’s global inventory or assets and resources; tending to a Linux server inventory and private cloud that totals over 80 servers and a Windows server inventory that is greater than 1000 servers.
• Heavily leveraged Puppet and Mcollective in the environment
• Monitoring, reporting, auditing and tuning of all Linux and Windows servers
• Identity management & SSO using Windows Active Directory Federation Services 2.0 and ForegeRock OpenAM
• Tier IV DevOps Engineer supporting Confidential contract development teams and the Confidential global user community

Confidential

Senior System Engineer

Responsibilities:

• Supporting R/GA’s Digital Studio and 100TB StorNext SAN. Digital Studio Projects include:
• Hardware refresh and software upgrade for the studio’s render farm
• Final Cut Pro workstation upgrades for 11 fiber- connected digital video editing suites
• Developed a UNIX-based scripting solution to manage the “Golden triangle” of directory services which exist between Active Directory UIDs, Linux-based numerical UIDs, and Mac OS Server based Open Directory UIDs
• VMware administrator tasked with a hardware refresh of a four-node ESX cluster & an upgrade to VMware ESXi 5.0.0 for the entire VMware environment, both in the NYC and UK datacenters:
• Upgrade from HP DL380s to HP DL580s outfitted with two eight-core Intel E7 series processors and 192GB RAM per host.
• Upgrade to 10GbE over fiber networking
• Supporting the 1400 and growing R/GA user community worldwide and contributing to the build out of R/GA’s global MPLS network and cloud services