eduardxyz

Builded and maintained a number of software solution related to data ingestion, processing, building visual representation (dashboards) that enable data-driven business decisions and operational monitoring. Overseeing Cloud Security Posture Management (CSPM), ensuring the security and compliance of cloud infrastructure. Conducting Root Cause Analysis (RCA) for security-related issues, identifying vulnerabilities and implementing mitigation strategies. Analyzing the existing infrastructure to identify security gaps and formulating plans to address these issues, enhancing overall security posture. Actively working on implementing Google Cloud Platform (GCP) security architecture best practices. Collaborating with the team to integrate Lacework for advanced threat detection and security analytics, strengthening our cybersecurity framework.

Implemented IaC deployments via Terragrunt, Terraform, Packer. Built and deployed overall service infrastructure utilizing Docker containers, Github Actions, and several GCP stack (Including Compute Engine, Cloud Run, Google Domains, Cloud Storage, Cloud SQL, Redis, IAM), focusing on high-availability, fault tolerance, and auto-scaling. Fully automated LUKSO blockchains: devnet’s, testnet’s, mainnet’s deployments via Ansible. Troubleshooting and testing Ethereum fork blockchain parameters. Auditing and securing of cloud infrastructure and container workloads. Monitoring cloud infrastructure with Prometheus and Grafana. Enabling client to leverage the full power of Github (Setup, Disaster Recovery, Usage).

Developed UserData scripts in BASH for production. Those scripts were used in the frontend so users can implement different applications based on the OS and the version with a single click. For example, automatic LAMP/LEMP stack, Wordpress, Gitlab, Minecraft, Steam, OpenLiteSpeed, Docker, Kubernetes. Automated CloudStack deployments with Terraform for testing purposes. Automated deployments via CI/CD with Github workflow. Implemented server applications with Ansible.

Patching analysis and remediation with Satellite, Spacewalk, and BSA. Scripting and automation at whole infrastructure level with BASH where multiple teams were involved into using my scripts. OpenSUSE and RHEL Heartbeat Cluster creation for SAP applications. Security vulnerability report and remediation with Nessus. Responsible for RedHat Linux Enterprise, OpenSUSE, and Solaris server troubleshooting. Storage and backup implementation and configuration, Netapp and Netbackup, LVM partitions. VMware vSphere configurations and troubleshooting. Such as NIC teaming, vSwitch, iSCSI connection, NFS datastores, Root Cause analysis, vCPU and RAM optimization, Quiescence Snapshots, etc... Networking configurations. SMB, AFP or NFS communications between Active Directory and Unix/Linux systems, Link Aggregators, IP tables, DNS configuration, VPN, etc... Console troubleshooting and performance analysis; Console troubleshooting from software layer using tools like iDRAC and ILO. VMware for virtual servers. Kernel debugging from the source code; Stacktrace analysis to find errors in kernelspace.

Provisioned an easily manageable Kubernetes infrastructure (Amazon AWS+EKS) utilizing IaC (Infrastructure as Code) tools like Terraform. Designing and implementing of new and additional infrastructure. Facilitating larger-scale cloud and container migrations. Enabling clients to leverage the full power of Gitlab/Github (Setup, Disaster Recovery, Usage). Built fully automated CI/CD pipelines on Github Actions for the EKS setup with ArgoCD installation. Designed an overall service architecture and pipelines of the GitOps practices with the micro-services architecture. Implemented password manager on AWS to safely store the passwords across company. Deployed a centralized codebase environment (Gitlab) within docker containers and AWS. Deployed high-available proxy with HAproxy and Squid.

Troubleshoot over 1000+ Solaris Servers. Very comfortable and very good expertise using Linux/Unix servers. Storage and backup configurations; Such as Unix ZFS snapshots on shares or datastores, RAID configurations, etc... VMware vSphere configurations and troubleshooting. Such as NIC teaming, vSwitch, iSCSI connection, NFS datastores, Root Cause analysis, PassThru communications, vCPU and RAM optimization, etc... Networking configurations. SMB, AFP or NFS communications between Active Directory and Unix/Linux systems, Link Aggregators, IP tables, DNS configuration, VPN, etc... Hardware troubleshooting and performance analysis; Hardware troubleshooting from software layer using tools like iDRAC, IPMI, Solaris built-in tools, etc... Kernel debugging from the source code; Analyzing the stack trace to see where the problem was generated in the Kernel Space. Bash scripting, PHP, and Python for daily task/problem automation.

Troubleshot 1000+ Linux Servers and workstations. Troubleshot 400+ Windows Servers and workstations. Malware cleanup over 700+ systems. Developed and updated over 40+ tools (Python, Bash, Powershell, WebDev). Fully automated 8+ tasks. Created and updated over 15+ documentations/procedures. Analyzed multiple phishing emails. Triggered infrastructure critical events. Daily storage servers backup. Daily generated reports.