Cloud Engineer

The candidate has been working with AWS for the last 3 years. His main responsibilities are in network connectivity between accounts, network security, smaller migration tasks and supportive advisory - all production deployment is based on Terraform. He has a little experience with Kubernetes - they are using ECS for containerization - but he would like to get a deeper understanding of Kubernetes in the future. The candidate has been working in IT since 2003 and he used to communicate with clients very often in his previous position. He can imagine doing so even now, however not so frequently. He would like to reduce the number of meetings to its minimum so he could fully focus on his work. The candidate has several AWS certifications. He feels that he has some technological deficits which is also the reason why he considers changing his job - in current company he is a little limited in further development. In his free time he likes to devote himself to self-study.

Má 2 mesiace výpovednú

01/2019 – current: Cloud Infrastructure Specialist Responsible for provisioning, evolving, and deprovisioning the AWS account framework using Terraform 0.14. Major resources include VPC, CloudTrail, Config, SystemsManager, GuardDuty, Datadog, and OneLogin integration. Migrating cloud-based infrastructure services such as Cisco CSRs to TGW migration, Route 53 resolver deployment, central egress deployment, and VPC segmentation. Upgrading account framework from Terraform 0.11 to 0.14. Integrating AWS account into Datadog. Currently working on AWS network firewall deployment and Firewall Manager in proof of concept. Migrating workloads from on-premises to AWS using ELB, ASG, EC2, and RDS. Deploying and operating shared services such as FSx for Windows, AD Connector, SES for outbound emails, AWS Private CA, Datadog private location, and Mulesoft to Datadog log shipper.

08/2017 – 09/2018: Principal Network Security Engineer (Team Lead) Led the migration from on-premise Bluecoat proxies to Zscaler CloudProxy internet access solution for a user base of approximately 250,000 across all network. Built and handed over in-country firewalls based on Checkpoint and Juniper devices. Led a team responsible for global PKI infrastructure, DNS/DHCP/IPAM, firewall management infrastructure, F5 load balancers, and radius infrastructure.

03/2016 – 07/2017: Principal Technical Support Engineer Acted as a technical escalation interface for SSL visibility and Crossbeam Systems X-Series security platforms. Diagnosed complex issues and provided troubleshooting steps to resolve product and deployment issues.

11/2012 – 02/2016: Technical Support Engineer Provided technical support for Crossbeam Systems X-Series and SSL visibility platforms. Troubleshot technical issues, replicated customer issues in a lab environment, and interacted with escalations team for product fixes. Also participated in a monthly on-call shift.

01/2003 – 10/2012: Senior Data Security Administrator Administered and troubleshooted various security systems including Checkpoint FW-1, S2S IPsec VPN tunnels, C2S VPN tunnels, F5 load balancers, Juniper SA4000 SSL GW, RSA Authentication Manager, Infoblox DNS/DHCP solution, ActivIdentity Card Management System, Squid proxy with ESET AV, SMTP relays, and anti-spam solution. Also participated in the integration of new security systems and provided on-call support.

Currently holds AWS Certified Advanced Network certification.