Cloud Engineer

Kandidát pracuje v systéme AWS posledné 3 roky. Jeho hlavnou zodpovednosťou je sieťová konektivita medzi účtami, sieťová bezpečnosť, menšie migračné úlohy a podporné poradenstvo - všetko produkčné nasadenie je založené na Terraform. Má malé skúsenosti s Kubernetesom - na kontajnerizáciu používajú ECS - ale v budúcnosti by chcel Kubernetesu hlbšie porozumieť. Kandidát pracuje v IT od roku 2003 a na predchádzajúcej pozícii veľmi často komunikoval s klientmi. Vie si to predstaviť aj teraz, avšak nie tak často. Chcel by znížiť počet stretnutí na minimum, aby sa mohol plne sústrediť na svoju prácu. Uchádzač má niekoľko certifikátov AWS. Cíti, že má určité technologické deficity, čo je aj dôvod, prečo uvažuje o zmene zamestnania - v súčasnej spoločnosti je trochu obmedzený v ďalšom rozvoji. Vo voľnom čase sa rád venuje samoštúdiu.

Má 2 mesiace výpovednú lehotu

01/2019 – current: Cloud Infrastructure Specialist Responsible for provisioning, evolving, and deprovisioning the AWS account framework using Terraform 0.14. Major resources include VPC, CloudTrail, Config, SystemsManager, GuardDuty, Datadog, and OneLogin integration. Migrating cloud-based infrastructure services such as Cisco CSRs to TGW migration, Route 53 resolver deployment, central egress deployment, and VPC segmentation. Upgrading account framework from Terraform 0.11 to 0.14. Integrating AWS account into Datadog. Currently working on AWS network firewall deployment and Firewall Manager in proof of concept. Migrating workloads from on-premises to AWS using ELB, ASG, EC2, and RDS. Deploying and operating shared services such as FSx for Windows, AD Connector, SES for outbound emails, AWS Private CA, Datadog private location, and Mulesoft to Datadog log shipper.

08/2017 – 09/2018: Principal Network Security Engineer (Team Lead) Led the migration from on-premise Bluecoat proxies to Zscaler CloudProxy internet access solution for a user base of approximately 250,000 across all network. Built and handed over in-country firewalls based on Checkpoint and Juniper devices. Led a team responsible for global PKI infrastructure, DNS/DHCP/IPAM, firewall management infrastructure, F5 load balancers, and radius infrastructure.

03/2016 – 07/2017: Principal Technical Support Engineer Acted as a technical escalation interface for SSL visibility and Crossbeam Systems X-Series security platforms. Diagnosed complex issues and provided troubleshooting steps to resolve product and deployment issues.

11/2012 – 02/2016: Technical Support Engineer Provided technical support for Crossbeam Systems X-Series and SSL visibility platforms. Troubleshot technical issues, replicated customer issues in a lab environment, and interacted with escalations team for product fixes. Also participated in a monthly on-call shift.

01/2003 – 10/2012: Senior Data Security Administrator Administered and troubleshooted various security systems including Checkpoint FW-1, S2S IPsec VPN tunnels, C2S VPN tunnels, F5 load balancers, Juniper SA4000 SSL GW, RSA Authentication Manager, Infoblox DNS/DHCP solution, ActivIdentity Card Management System, Squid proxy with ESET AV, SMTP relays, and anti-spam solution. Also participated in the integration of new security systems and provided on-call support.

Currently holds AWS Certified Advanced Network certification.