Cloud Engineer

Kandidát pracuje se systémem AWS poslední 3 roky. Jeho hlavní odpovědností je síťové propojení mezi účty, zabezpečení sítě, menší migrační úlohy a podpůrné poradenství - veškeré produkční nasazení je založeno na Terraformu. Má malé zkušenosti s Kubernetes - pro kontejnerizaci používají ECS - ale do budoucna by rád Kubernetes pochopil hlouběji. Kandidát pracuje v IT od roku 2003 a na své předchozí pozici velmi často komunikoval s klienty. Dokáže si představit, že by tak činil i nyní, nicméně ne tak často. Rád by počet schůzek snížil na minimum, aby se mohl plně soustředit na svou práci. Kandidát má několik certifikátů AWS. Cítí, že má určité technologické deficity, což je také důvod, proč uvažuje o změně zaměstnání - v současné společnosti je trochu omezen v dalším rozvoji. Ve volném čase se rád věnuje samostudiu.

Má 2 měsíce výpovědní lhůty

01/2019 – current: Cloud Infrastructure Specialist Responsible for provisioning, evolving, and deprovisioning the AWS account framework using Terraform 0.14. Major resources include VPC, CloudTrail, Config, SystemsManager, GuardDuty, Datadog, and OneLogin integration. Migrating cloud-based infrastructure services such as Cisco CSRs to TGW migration, Route 53 resolver deployment, central egress deployment, and VPC segmentation. Upgrading account framework from Terraform 0.11 to 0.14. Integrating AWS account into Datadog. Currently working on AWS network firewall deployment and Firewall Manager in proof of concept. Migrating workloads from on-premises to AWS using ELB, ASG, EC2, and RDS. Deploying and operating shared services such as FSx for Windows, AD Connector, SES for outbound emails, AWS Private CA, Datadog private location, and Mulesoft to Datadog log shipper.

08/2017 – 09/2018: Principal Network Security Engineer (Team Lead) Led the migration from on-premise Bluecoat proxies to Zscaler CloudProxy internet access solution for a user base of approximately 250,000 across all network. Built and handed over in-country firewalls based on Checkpoint and Juniper devices. Led a team responsible for global PKI infrastructure, DNS/DHCP/IPAM, firewall management infrastructure, F5 load balancers, and radius infrastructure.

03/2016 – 07/2017: Principal Technical Support Engineer Acted as a technical escalation interface for SSL visibility and Crossbeam Systems X-Series security platforms. Diagnosed complex issues and provided troubleshooting steps to resolve product and deployment issues.

11/2012 – 02/2016: Technical Support Engineer Provided technical support for Crossbeam Systems X-Series and SSL visibility platforms. Troubleshot technical issues, replicated customer issues in a lab environment, and interacted with escalations team for product fixes. Also participated in a monthly on-call shift.

01/2003 – 10/2012: Senior Data Security Administrator Administered and troubleshooted various security systems including Checkpoint FW-1, S2S IPsec VPN tunnels, C2S VPN tunnels, F5 load balancers, Juniper SA4000 SSL GW, RSA Authentication Manager, Infoblox DNS/DHCP solution, ActivIdentity Card Management System, Squid proxy with ESET AV, SMTP relays, and anti-spam solution. Also participated in the integration of new security systems and provided on-call support.

Currently holds AWS Certified Advanced Network certification.