Experience
2022 — Now
2022 — Now
San Francisco, California, United States
2020 — 2022
2020 — 2022
San Francisco, California, United States
• Manage 20 kubernetes clusters across 3 cloud providers. Using AKS, EKS, GKE, and kubeadm to manage the clusters.
• Leverage ArgoCD to continuously deploy container images and kubernetes manifests to clusters.
• Using terraform to manage AWS, Azure, GCP, New Relic, and Hahsicorp Vault. Configured Atlantis to plan/apply changes with github pull requests.
• Contribute to our internal jsonnet manifests to deploy and manage applications on our kubernetes cluster. This includes converting helm charts to jsonnet objects to extend them for internal use. I have also refactored our jsonnet apps to use k8s libsonnet which adds classes and functions to jsonnet.
• Managing Hashicorp Vault to provide a consistent secret storage platform, pki, and dynamic secrets across 3 cloud providers. I have also deployed the k8s-vault webhook to add vault agent side cars to provide secrets to k8s pods.
• Serve as an architect in microservice application architecture discussions of Influx's cloud product. This includes major discussions to guide engineering teams towards microservice best practices such as; grpc protobufs, backend for front end model, and synchronous/asynchronous communications.
• Setup Google Workspace as our SSO idp for Azure and AWS.
• Manage istio deployment in our kubernetes clusters.
2019 — 2020
2019 — 2020
San Francisco Bay Area
• Built a linux image pipeline using Packer, Saltstack, CircleCI, and Google Cloud Build. The image was designed to serve as a base image for all of Credit Karma and help transition configuration managed cloud images to an immutable deployment model.
• Leveraged Terraform to manage Google Cloud instances, projects, IAM, and other requested resources.
• Served as a linux application performance and application architecture consultant for Credit Karma. This sometimes involved being a resource during incidents to determine root cause and remediate incidents.
2014 — 2019
2014 — 2019
San Francisco Bay Area
• Maintained Square’s production orchestration system, P2, written in Go. P2 enabled easy application deployment to three datacenters. P2 isolated applications using cgroups and linux kernel namespaces on CentOS servers.
• Ensured smooth continuous deployment of 900+ microservices on P2 to support Square’s production application infrastructure.
• Utilized Packer and SaltStack to build AWS AMIs. Leveraged SaltStack Grains to create roles which configured three image types for an AWS based Kubernetes deployment.
• Leveraged Terraform to deploy images built with Packer as well as configure networks, security groups, EKS cluster, and a SSH bastion instance in AWS.
• Managed a small cluster of Docker hosts which hosted 25 internal applications for Developers.
• Deployed a centralized log aggregation system using Elasticsearch, Logstash, and Kibana (ELK). Processed 12GB per day for 250+ systems in 4 locations.
• Maintained a Rails application to simplify ec2 instance creation and application deployment for developer sandboxes. The service managed 90+ active ec2 instances daily.
• Maintained AWS management scripts using AWS Ruby SDK to provision S3 buckets and IAM access roles for developers.
• Wrote a tool in Go to manage and escrow recovery keys for 30 Ubuntu luks full disk encrypted workstations.
• Managed 300 Ubuntu and CentOS servers running on VMware using Foreman and Puppet. Foreman enabled us to standardize OS deployments by templating CentOS kickstart and Ubuntu preseed files. Foreman also provided us a reporting view for puppetdb data.
• Wrote Puppet modules that enabled dynamic system customization with Hiera. This enabled us to write less manifests and use Hiera to configure servers. Hiera provided flexibility to customize based on OS type, location, system role, or specific host needs. Through Hiera GPG, we were able to deliver encrypted passwords, api keys, and certificates to hosts.
2011 — 2014
2011 — 2014
San Francisco Bay Area
• Architected and transitioned several application components to Amazon Web Services including S3, Route 53 and EC2.
• Wrote python script to migrate and manage Route 53 domains and zone data in AWS.
• Built an automated RPM build environment using Jenkins.
• Utilized Puppet to manage 25 CentOS servers hosting Shotgun’s production Rails applications.
Education
University of Michigan