LUIS ORDONEZ 857-***-****

* **** **** ad3e7v@r.postjobfree.com

Wayland, Ma 01778

TECHNICAL SKILLS

Cloud: kubernetes v.1.15, v1.16, etcd, redis, zookeeper, kafka, docker

Orchestration: ansible, terraform, python v3

AWS: vpc, subnets, sg, peering, igw, elb, iam, kms, ecs, ecr, aurora mysql, postgresql

CI/CD: jenkins, concourse, Artifactory

REST Api, microservices

Linux, Linux/390, Bash shell, Perl, Bash, Make and Korn Scripts, NFS, Python, Jira, Confluence, Bitbucket (git), Github, Subversion v7, RedHat v5, V6 and V7, Systemd, Mesosphere, Marathon, DC/OS, Docker Containers

Windows: Windows 2010, Windows Server.

Compilers: VC++, gcc, Visual Basic, Rexx, Java, Java/jdbc, Ruby, rpm

Languages: English, Spanish and Portuguese.

Web Software: Apache Tomcat, IBM WebSphere 6.1/7.0/8.0/8.5 Server, WebSphere Scripting Jython. Java Enterprise, Java Servlet, JSP, Javascript and Ajax, WebSphere, Tomcat, JBOSS, Ant, LDAP, Siteminder. Eclipse, Jenkins, RAD 7.0, JMS, EJB,WSDL, Subversion, Data Studio, Autoit, Selenium/python, HTTP Flow,REST API, Amazon Web Services EC2, Node.JS

Test Tools: Open STA, Jmeter, Perl and Unix Scripting/Bash/Korn shell, Apache Ant, Apache Maven, Jenkins, ansible

Mobile Apps: Python for Android based on SL4A platform, Perl for Android and HTML5

Database: DB2 V9/V10, DB2/Utilities, PLATINUM, OMEGAMON, IMS/DB, DB2/UDB 8.2, DB2/CONNECT,DB2/UDB LUW, MS SQL, ORACLE 10, PL/SQL, stored procedures, MongoDB, mysql, redis, etcd, cassandra, databricks

Biology skills: Processing of DNA sequences using Scripts: perl and tcl for a project sponsored by Department of Biology/Mass Bay College.

PROFESSIONAL EXPERIENCE

Federal Reserve Bank April 2022 – May 2023

Platform Engineer/DevOps Engineer

Create and maintain Gitlab pipelines to packer/build aws AMI, create ec2 instances associated to Auto scaling and launchtemplates with terraform modules

Writing gitlab code to manage aws accounts including iam, s3 buckets and refreshing instances

Writing scripts driven through gitlab pipelines to create aerospike sets, create indexes and recover dead partitions

Migrated SonarQube version 6 to Version 9 running on Redhat version 8 with FIPS: Packaged the whole image as AWS AMI (via Packer, ansible and python) and Deployed through Gitlab pipelines calling Terraform scripts. All these tasks are fully automated.

Migrated Synopsys/Seeker App from RedHat version 7 to RedHat version 8 with FIPS. Resolving incompatibilities caused RedHat v8 requiring upgrading of nginx versions, and postgresql/client version. Tasks fully automated.

Migrated Synopsys/Tinfoil App from Redhat v7 to Redhat v8 with FIPS. Repackaged Tinfoil AMI with nginx v2.1. Wrote an API Service in Golang providing backup/restore capabilities to be called through NGINX context url.

Migrated ALM/Octane from RedHat v7 to RedHat v8 with FIPS. Resolved incompatibilities caused by Security FIPS preventing encryptions required by java key stores owned by Octane.

Migrating Synopsys Applications running on aws ec2 instances from Red Hat v7 to Red Hat v8.

Creating and maintaining RDS / postgresql databases

Managing Vault repositories and deploying clients on Apps pulling vault/secrets

As part of the project to monitor performance based on custom KPI metrics writing lambda code. Developing code locally using aws base images for lambda and testing out. Observability through prometheus and Grafana.

Wrote python scripts to stress test large aerospike databases distributed on six aws instances.

Automating Installation of linux packages and/or Security Software using Systemd extensions. Dynamically enable non-root users into the “sudoers” list for Custom Systemd Services running as a user.

Whole administration of Linux Red Hat, Ubuntu and Centos is based on specific users assuming root access to execute administration tasks through sudo and visudo.

Built Kubernetes on AWS/EKS with fargate on us-west-1 region and Configuring applicationservices by dockerizing java applications and installing them as Pods. This is beginnig of the second phase of the project which started with java applications deployed on Auto-Scaled EC2 instances.

Stress testing and performance analysis of large aerospike databases with terabytes of data.

Exactuals/City National Bank Los Angeles, CA June 2021 – March 2022

Platform Engineer/DevOps Engineer

Wrote PowerShell scripts creating excel reports for Microsoft Azure Active Directory.

Optimized execution of Azure reports combining Api calls and advanced programming techniques in PowerShell.

Planned, documented and implemented a Disaster Recovery project to replicate a Production system running on AWS.

Replicated VpC, private and public subnets, Security groups, igw and peerings with customized terraform modules.

Migrated Apps, RDS aurora MySQL and postgressql, ECR images, EC2 Ami from us-west to us-east.

Managed migration of encrypted databases and encrypted EC2 storage from west region to east region utilizing private keys or cmk.

Customized start-up of AWS/ECS instances introducing changes on user_data. Inserting Linux systemd Services to connect ECR/instance with external proxy server.

In AWS/ECS, replacing the use of NAT with ssh tunnels and proxy(squid) without disturbing deployment of tasks with docker images.

Deployed Graylog Server on AWS/EC2 and collecting log messages from Apps running on ECR.

Created projects on jira, with tasks as jira tickets. Participated on Scrum meetings with jira Agile boards.

Delivered tools in python with boto3 to route aws alarms from sqs queues to email based on lambda code driven by events.

Cloned and customized terraform and bash scripts to run from west region to east region.

Installed and managed Jenkins server running on AWS/EC2 specially with pipeline plugins.

Automated CI/CD process through Bitbucket and Jenkins plugins. Building docker images and uploading code into AWS/ECS.

SAP Concur Bellevue, WA December 2020 – May 2021

Platform Engineer/DevOps Engineer

Analyzing Vulnerabilities reports from NVD, identifying and downloading Centos Packages to resolve them. And schedule massive yum updates via scripts and services to keep Production Kubernetes Clusters free of security threats and compliant. Scripted with bash, and golang services.

Migrating kubernetes on vmware to AWS EKS. Creating Golden AMI template for all the aws nodegroups in each EKS cluster.

Updated best practices to maintain Worker nodes and Master Nodes with lower risk of failures. Scripted with cloudformation.

Monitoring clusters, nodes and Pods performance through Sysdig. Trained to create sysdig alerts.

Deployment and troubleshooting ISTIO mesh for concur apps running on kubernetes.

IBM, Littleton, MA Feb 2018 – May 2020

DevOps Engineer / CI/CD Engineer

Coding ansible playbooks and roles to install kubernetes version 1.12 and 1.13 on a bare metal clusters. Debugging and fixing python3 scripts.

Recoded ansible scripts with python scripts to deploy Kubernetes using kubeadm in bare metal clusters.

Developed scripts to diagnose hardware status of servers and requesting specific remediation actions to DC-Operations.

Customized kubernetes kube-dns and coredns to manage dns and services resolution.

Heavy use of ssh tunnels providing connectivity between docker registries and clusters

Creating and building Apps as docker images to be run as kubernetes services.

Supporting and resolving operational issues of pods running zookeeper, kafka, cassandra and redis.

Troubleshooting inhouse drivers written in go language causing failures during deployment of Apps in Kubernetes.

Installed Vault servers and implemented Vault agents on Kubernetes.

As part of the security team, migrated Kubernetes secrets into Vault. Developed scripts to read secrets from pods with little overhead.

Implemented etcd operator and vault operator under kubernetes.

Managing github repositories, submodules and automated build process and unit testing of Docker images to be deployed as Kubernetes Apps.

Implemented set terraform scripts on the CI/CD process to build Kubernetes Clusters through Jenkins and pulling code from github repositories.

Migrated kubernetes deployments manifests to Helm format to speed up deployment process of containerized Applications supporting the IBM Cloud.

Configured Helm yamls to deploy Daemonsets in all worker nodes of a Kubernetes Cluster.

Provisioning kubernetes namespace and load balancer to install rancher and start services.

Wrote a docker containerized process for CI/CD deploying kubernetes, kubeadm on clusters integrated by amd64 servers (linux), powerpc (aix) and s390x (red hat) servers. Written with python, bash and docker.

Designed and coded a set of terraform scripts to benchmark microservices deployed on kubernetes capturing performance metrics, memory usage, processor and network latency and data transfer rates.

Wrote a python code automating the process to download Kubernetes packages from Kubernetes community servers enforcing compatibility and dependency. Uploading the selected packages into Jfrog Artifactory to be input for local deployment on private clusters of servers.

Wrote multiple dockerfiles to wrap python scripts and stored on Artifactory. Maintaining Artifactory registries and provided bash script to “docker run” docker images from each kubernetes cluster of IBM Cloud.

Troubleshooting and resolving memory leaks caused by multithreaded process owned by docker containers.

Integrated installation of Openshift on IBM Cloud and automated deployment of containers through openshift cli.

Integrated Java Application with redis and mysql to run as multi-containers under kubernetes. Configured deployment manifests and unit tests to validate functionalities.

Identifying specific requirements of each kubernetes version to orchestrate smooth upgrades of HA clusters running 24 x 7. Analyzing, modifying and testing golang code from kubernetes repositories.

Acquiremedia-NewsEdge, Burlington, MA June 2017 – September 2017

DevOps Release Engineer

Managing subversion repositories and maintaining a full set of Bash scripts aimed to simplify the development cycle implementing SVN Export/Import as the vehicle to follow the model: trunk-branch-tag.

Continuous integration (CI/CD) of C++ code and building packages in RPM format. Supporting build of packages for Centos 7, Centos 6 and Centos 5. Resolving subversion Conflicts found during SVN Commits.

Creating Yum Repositories with gpg encryption and yum installing Linux Developer libraries required by Makefile and spot by rpmbuild and gmake during the build process.

As part of the DevOps group creating Gcloud instances and migrating Legacy Linux Centos servers to Google Cloud. Migrating subversion repositories and yum repositories and bash scripts.

Introduced to support build for Web crawler spiders and text processing techniques and tweeter API’s.

Verizon Labs, Burlington, MA January 2016 – May 2017

DevOps and Release Engineer

Install Jenkins and automated continuous delivery with a set of bash scripts I wrote integrating Confluence Pages with Bitbucket(git) and publishing results and metric reports in confluence.

Automate the creation of Docker Images and reorganized the continuous delivery of Docker images establishing Development environment and Production environment avoiding conflicts during deployment of Applications in the cloud.

Maintaining elasticsearch client in golang language to monitor activities in clusters.

Administering Projects and repositories in Bitbucket(git) setting up to enable merging of Pull Requests

Using JIRA requests to initiate the creation of bugfix or feature branches in Bitbucket for development tasks

Coded and updated existing terraform scripts deploying Verizon Applications in AWS instances as a task of migrating AWS to Verizon internal cloud.

Customize and implemented stash plugins in Jenkins to complement the validation of Pull requests

Written python and bash scripts to load and update confluence pages as part of the reporting phase of continuous integration

Implement docker images unit tests using oracle VirtualBox and kvm. Wrote and implemented Jmeter for performance testings.

Install and configuring Linux Ubuntu, RedHat, CoreOS in a cloud cluster. Upgrading and deploying Applications with automation tools Ansible. Developed Ansible scripts integrated in orchestration tools.

Applying remediation fixes to hundreds of servers with a single action using fleetctl, ansible scripts and bash scripting. Configuring SAN storage of HP MSA storage to allocate Disk Space for Base Apps supporting Mobile Applications.

Configured Jenkins to build android apk and remote mac workers to build Ios apps.

Setting up developer repositories with sftp and having Apache web server as front-end so continuous delivery could download files using wget command.

Supporting and troubleshoot coreos cluster servers (from 100 to 1000 servers), DCOS/Marathon, DCOS/Mesos and zookeeper using monitoring tools; Kibana, Logstash and Nginx, Cassandra, Redis, kafka, gluster filesystems, scaleio and EMC/ECS object repository.

Migrated Web Application supporting Verizon Mobile phone Apps from AWS instances to Internal Verizon Cloud. Migrating SNS and CloudFormation into Verizon Cloud services and ansible scrips. Redefined storage S3 into Verizon storage management. Updated CloudFormation scripts reconfiguring EBS storage.

Upgrading Software and Docker apps in entire cloud platform through Ansible scripting. Migrating Coreos from fleetctl to kubernetes.

Participated in scrum epics to investigate howto speed up transfer of user data from mobile phones to microservices listening on cloud.

Coded and deployed NodeJS with mongodb for Customer Validation credentials project.

Support and configuration of Hadoop clusters aimed to BIG DATA.

Diagnosing and resolving server issues affecting ssh connectivity, docker malfunctioning and filesystems faults in shortest time meeting expected SLA (service level agreement).

HealthEdge, Burlington, MA August 2015 - November 2015

CloudOps Engineer (DevOps)

Supported and maintained Linux servers and Windows Enterprise servers providing Web Applications services SaaS to a large number of Customers. 4.0

Migrated Windows apps from .Net 3.5 to .NET 4.6

Deployed full set of Web Applications in WebLogic and setting up Oracle databases as components of HealthCare Payment and Care Manager Services.

Resolved major service interruption affecting most of the customers caused by poor response time during peak times by changing the standard JVM memory heap space policies to realistic and well tested settings based on my expertise.

Built and configured Load balancer servers as front-end of WebLogic Multi-servers.

Built software running maven interfaced with Perforce repositories and subversion.

Identified bottlenecks in datasources with oracle v12 and reconfiguring jdbc and connection pools properties.

Collecting and analysis of Java Flight Recorder reports of Web Applications.

Troubleshoot and debugging the HealthEdge Client running in Windows Gui written in C# and .NET.

EDUCATION

National Engineering University of Peru

Bachelor Electronic Engineering Graduate

Contact this candidate