resume-page: use generated data/resume.yml from @kneel/resume render-hugo
data/resume.yml is now the render-hugo output (phone dropped per pdf-only visibility; experience ordered chronologically). Canonical source is the swamp résumé model in ~/dev/personal/resume-swamp.
This commit is contained in:
+159
-84
@@ -1,18 +1,14 @@
|
|||||||
# Résumé content for the /resume/ page. Structured mirror of the canonical
|
# Generated by @kneel/resume (render-hugo) — do not edit by hand.
|
||||||
# LaTeX source (~/dev/personal/resume/resume.tex). Keep in sync with the PDF.
|
# Canonical source: the swamp résumé model. Edit there and re-render.
|
||||||
|
|
||||||
summary: >-
|
summary: >-
|
||||||
Infrastructure consultant specializing in Linux systems, automation, and
|
Infrastructure consultant specializing in Linux systems, automation, and
|
||||||
reliable platform delivery. I help organizations build, migrate, and operate
|
reliable platform delivery. I help organizations build, migrate, and operate
|
||||||
production environments — and contribute upstream to the tools that power them.
|
production environments — and contribute upstream to the tools that power
|
||||||
|
them.
|
||||||
pdf: https://shrugpw.com/resume.pdf
|
pdf: 'https://shrugpw.com/resume.pdf'
|
||||||
|
|
||||||
contact:
|
contact:
|
||||||
email: neil@shrug.pw
|
email: neil@shrug.pw
|
||||||
location: Massachusetts
|
location: Massachusetts
|
||||||
phone: "+1 978 432 9449"
|
|
||||||
|
|
||||||
skills:
|
skills:
|
||||||
- group: Open Source
|
- group: Open Source
|
||||||
items:
|
items:
|
||||||
@@ -26,106 +22,185 @@ skills:
|
|||||||
items:
|
items:
|
||||||
- Secure Infra Architecture
|
- Secure Infra Architecture
|
||||||
- CDN + Edge Services
|
- CDN + Edge Services
|
||||||
- "Cloud: AWS, Azure, GCP"
|
- 'Cloud: AWS, Azure, GCP'
|
||||||
- Infrastructure-as-Code
|
- Infrastructure-as-Code
|
||||||
- Containers / OCI / K8s
|
- Containers / OCI / K8s
|
||||||
- group: Networking
|
- group: Networking
|
||||||
items:
|
items:
|
||||||
- BGP, OSPF, Juniper
|
- 'BGP, OSPF, Juniper'
|
||||||
- Linux Routing / Firewalling
|
- Linux Routing / Firewalling
|
||||||
- Cisco ASA / R+S
|
- Cisco ASA / R+S
|
||||||
- Arista EOS, Mikrotik
|
- 'Arista EOS, Mikrotik'
|
||||||
- IPv6 Transition
|
- IPv6 Transition
|
||||||
- SD-WAN
|
- SD-WAN
|
||||||
- Load Balancing / ADC
|
- Load Balancing / ADC
|
||||||
- group: Programming
|
- group: Programming
|
||||||
items:
|
items:
|
||||||
- Python, Bash, Golang
|
- 'Python, Bash, Golang'
|
||||||
- Ansible, Puppet, Terraform
|
- 'Ansible, Puppet, Terraform'
|
||||||
- Pulumi, Lua, Ruby, PHP
|
- 'Pulumi, Lua, Ruby, PHP'
|
||||||
- group: Tooling
|
- group: Tooling
|
||||||
items:
|
items:
|
||||||
- Git / GitOps, CI/CD
|
- 'Git / GitOps, CI/CD'
|
||||||
- Prometheus, Grafana
|
- 'Prometheus, Grafana'
|
||||||
- rpm / mock / koji
|
- rpm / mock / koji
|
||||||
- GNU/Linux, Ubuntu
|
- 'GNU/Linux, Ubuntu'
|
||||||
- Red Hat Enterprise Linux
|
- Red Hat Enterprise Linux
|
||||||
|
|
||||||
experience:
|
experience:
|
||||||
- period: "2025—"
|
- period: 2025—
|
||||||
role: Owner, Principal Consultant
|
role: 'Owner, Principal Consultant'
|
||||||
org: Shrug PW Consulting
|
org: Shrug PW Consulting
|
||||||
location: Bedford, MA
|
location: 'Bedford, MA'
|
||||||
url: https://shrugpw.com
|
url: 'https://shrugpw.com'
|
||||||
highlights:
|
highlights:
|
||||||
- Architect and deploy bare metal, containerized, and cloud infrastructure for clients across defense, education, and enterprise sectors.
|
- >-
|
||||||
- Design and build standardized Linux system images (Ubuntu, RHEL, Rocky) and deployment pipelines using Ansible, Puppet, and custom automation tooling.
|
Architect and deploy bare metal, containerized, and cloud infrastructure
|
||||||
- Lead complex infrastructure migrations and disaster recovery efforts, including crisis response and system restoration for time-critical environments.
|
for clients across defense, education, and enterprise sectors.
|
||||||
- Build custom monitoring, alerting, and observability solutions delivering actionable insights while reducing alert fatigue.
|
- >-
|
||||||
- Design and deploy production network infrastructure including routing, firewalls, VLANs, wireless, and fiber connectivity for multi-site organizations.
|
Design and build standardized Linux system images (Ubuntu, RHEL, Rocky)
|
||||||
- Develop provisioning documentation, runbooks, and support procedures for client handoff and knowledge transfer.
|
and deployment pipelines using Ansible, Puppet, and custom automation
|
||||||
- Provide open source strategy consulting and technical governance for organizations adopting or contributing to FOSS ecosystems.
|
tooling.
|
||||||
- period: "2020—"
|
- >-
|
||||||
role: Director, Infrastructure
|
Lead complex infrastructure migrations and disaster recovery efforts,
|
||||||
org: Rocky Enterprise Software Foundation (RESF) — Rocky Linux
|
including crisis response and system restoration for time-critical
|
||||||
location: Remote (Volunteer)
|
environments.
|
||||||
highlights:
|
- >-
|
||||||
- Co-founded and lead infrastructure for the open source rebuild of CentOS Linux (Rocky Linux), coordinating a global team of more than thirty volunteers.
|
Build custom monitoring, alerting, and observability solutions
|
||||||
- Design and operate hybrid infrastructure spanning public cloud and physical data centers for global mirror distribution, CI/CD pipelines, and release engineering workflows.
|
delivering actionable insights while reducing alert fatigue.
|
||||||
- Build and maintain scalable public-facing services — Koji builders, HTTP/RSYNC pools, mirrorlist, and signing infrastructure — supporting **3 billion+ requests/month** and **1+ PB/month** of traffic.
|
- >-
|
||||||
- Develop and maintain **Peridot**, the open source build system powering Rocky Linux and CIQ's RHEL-derivative product lifecycle, for scalable, reproducible, secure builds.
|
Design and deploy production network infrastructure including routing,
|
||||||
- Build and maintain a cryptographic enclave for UEFI Secure Boot signing, enabling trusted boot for Rocky Linux and downstream derivatives.
|
firewalls, VLANs, wireless, and fiber connectivity for multi-site
|
||||||
- Architect secure-by-default systems and enforce best practices in CI/CD, credential management, artifact signing, and endpoint access control.
|
organizations.
|
||||||
- Lead incident response and coordinate recovery for critical infrastructure outages across multiple time zones and providers.
|
- >-
|
||||||
- Manage infrastructure sponsorships and partner relationships for long-term project sustainability and cost-effective operations.
|
Develop provisioning documentation, runbooks, and support procedures for
|
||||||
- period: "2020—"
|
client handoff and knowledge transfer.
|
||||||
role: Founding Board Member
|
- >-
|
||||||
org: Rocky Enterprise Software Foundation (RESF)
|
Provide open source strategy consulting and technical governance for
|
||||||
location: Remote (Volunteer)
|
organizations adopting or contributing to FOSS ecosystems.
|
||||||
highlights:
|
- period: 2021–2025
|
||||||
- Established the RESF to support community-driven governance, infrastructure, and lifecycle planning for Rocky Linux and other open source projects.
|
|
||||||
- Represent technical community perspectives on the RESF Advisory Board and help shape project direction and policy.
|
|
||||||
- Advise on growth, sustainability, and alignment between corporate partners and community goals.
|
|
||||||
- period: "2020—"
|
|
||||||
role: Contributor and Packager
|
|
||||||
org: The Fedora Project
|
|
||||||
location: Remote (Volunteer)
|
|
||||||
url: https://fedoraproject.org
|
|
||||||
highlights:
|
|
||||||
- Maintain and test packages in EPEL and Fedora branches.
|
|
||||||
- Contributed to the Fedora RISC-V SIG, supporting alt-arch enablement and early ecosystem work.
|
|
||||||
- Participated in Fedora CommOps, helping shape community engagement strategies and project visibility.
|
|
||||||
- Advocate for upstream-first workflows and maintain contributor-friendly build/test automation.
|
|
||||||
- period: "2021—2025"
|
|
||||||
role: Senior Infrastructure Engineer
|
role: Senior Infrastructure Engineer
|
||||||
org: Ctrl IQ (CIQ)
|
org: Ctrl IQ (CIQ)
|
||||||
location: Remote
|
location: Remote
|
||||||
highlights:
|
highlights:
|
||||||
- Performed formally-sponsored contributions to Rocky Linux and RESF infrastructure, bridging company goals and upstream project sustainability.
|
- >-
|
||||||
- Led cross-functional efforts to scale CIQ's build and release infrastructure for RHEL-derivative products based on Rocky.
|
Performed formally-sponsored contributions to Rocky Linux and RESF
|
||||||
- Designed and maintained hybrid CI/CD pipelines for open and closed-source systems, integrating GitLab, Koji, and internal build/test runners.
|
infrastructure, bridging company goals and upstream project
|
||||||
- Championed upstream-first development practices, ensuring internal engineering work could be contributed back cleanly to RESF when appropriate.
|
sustainability.
|
||||||
- Provided technical leadership and emergency response across CIQ's internal infrastructure stack — networking, packaging, on-call rotation.
|
- >-
|
||||||
- Advised CIQ leadership on open source community dynamics, trust-building, and governance best practices.
|
Led cross-functional efforts to scale CIQ's build and release
|
||||||
- period: "2015—2021"
|
infrastructure for RHEL-derivative products based on Rocky.
|
||||||
role: DevOps Engineer, Senior Network Engineer
|
- >-
|
||||||
|
Designed and maintained hybrid CI/CD pipelines for open and
|
||||||
|
closed-source systems, integrating GitLab, Koji, and internal build/test
|
||||||
|
runners.
|
||||||
|
- >-
|
||||||
|
Championed upstream-first development practices, ensuring internal
|
||||||
|
engineering work could be contributed back cleanly to RESF when
|
||||||
|
appropriate.
|
||||||
|
- >-
|
||||||
|
Provided technical leadership and emergency response across CIQ's
|
||||||
|
internal infrastructure stack — networking, packaging, on-call rotation.
|
||||||
|
- >-
|
||||||
|
Advised CIQ leadership on open source community dynamics,
|
||||||
|
trust-building, and governance best practices.
|
||||||
|
- period: 2020—
|
||||||
|
role: 'Director, Infrastructure'
|
||||||
|
org: Rocky Enterprise Software Foundation (RESF) — Rocky Linux
|
||||||
|
highlights:
|
||||||
|
- >-
|
||||||
|
Co-founded and lead infrastructure for the open source rebuild of CentOS
|
||||||
|
Linux (Rocky Linux), coordinating a global team of more than thirty
|
||||||
|
volunteers.
|
||||||
|
- >-
|
||||||
|
Design and operate hybrid infrastructure spanning public cloud and
|
||||||
|
physical data centers for global mirror distribution, CI/CD pipelines,
|
||||||
|
and release engineering workflows.
|
||||||
|
- >-
|
||||||
|
Build and maintain scalable public-facing services — Koji builders,
|
||||||
|
HTTP/RSYNC pools, mirrorlist, and signing infrastructure — supporting
|
||||||
|
**3 billion+ requests/month** and **1+ PB/month** of traffic.
|
||||||
|
- >-
|
||||||
|
Develop and maintain **Peridot**, the open source build system powering
|
||||||
|
Rocky Linux and CIQ's RHEL-derivative product lifecycle, for scalable,
|
||||||
|
reproducible, secure builds.
|
||||||
|
- >-
|
||||||
|
Build and maintain a cryptographic enclave for UEFI Secure Boot signing,
|
||||||
|
enabling trusted boot for Rocky Linux and downstream derivatives.
|
||||||
|
- >-
|
||||||
|
Architect secure-by-default systems and enforce best practices in CI/CD,
|
||||||
|
credential management, artifact signing, and endpoint access control.
|
||||||
|
- >-
|
||||||
|
Lead incident response and coordinate recovery for critical
|
||||||
|
infrastructure outages across multiple time zones and providers.
|
||||||
|
- >-
|
||||||
|
Manage infrastructure sponsorships and partner relationships for
|
||||||
|
long-term project sustainability and cost-effective operations.
|
||||||
|
- period: 2020—
|
||||||
|
role: Founding Board Member
|
||||||
|
org: Rocky Enterprise Software Foundation (RESF)
|
||||||
|
highlights:
|
||||||
|
- >-
|
||||||
|
Established the RESF to support community-driven governance,
|
||||||
|
infrastructure, and lifecycle planning for Rocky Linux and other open
|
||||||
|
source projects.
|
||||||
|
- >-
|
||||||
|
Represent technical community perspectives on the RESF Advisory Board
|
||||||
|
and help shape project direction and policy.
|
||||||
|
- >-
|
||||||
|
Advise on growth, sustainability, and alignment between corporate
|
||||||
|
partners and community goals.
|
||||||
|
- period: 2020—
|
||||||
|
role: Contributor and Packager
|
||||||
|
org: The Fedora Project
|
||||||
|
url: 'https://fedoraproject.org'
|
||||||
|
highlights:
|
||||||
|
- Maintain and test packages in EPEL and Fedora branches.
|
||||||
|
- >-
|
||||||
|
Contributed to the Fedora RISC-V SIG, supporting alt-arch enablement and
|
||||||
|
early ecosystem work.
|
||||||
|
- >-
|
||||||
|
Participated in Fedora CommOps, helping shape community engagement
|
||||||
|
strategies and project visibility.
|
||||||
|
- >-
|
||||||
|
Advocate for upstream-first workflows and maintain contributor-friendly
|
||||||
|
build/test automation.
|
||||||
|
- period: 2015–2021
|
||||||
|
role: 'DevOps Engineer, Senior Network Engineer'
|
||||||
org: KAYAK Software Corporation
|
org: KAYAK Software Corporation
|
||||||
location: Concord, MA
|
location: 'Concord, MA'
|
||||||
highlights:
|
highlights:
|
||||||
- Managed production and corporate networks across two data centers and 14+ global offices.
|
- >-
|
||||||
- Re-architected core switching to a modern spine/leaf fabric using BigSwitch Cloud Fabric (OpenDaylight).
|
Managed production and corporate networks across two data centers and
|
||||||
- Replaced aging Juniper gear and unstable edge routers; improved interconnects with private links and a Boston POP for AWS Direct Connect.
|
14+ global offices.
|
||||||
- Designed and implemented a PII "bubble" to segment sensitive workloads from general production traffic.
|
- >-
|
||||||
- Led CDN modernization using Fastly + Varnish; built traffic shaping and A/B testing config.
|
Re-architected core switching to a modern spine/leaf fabric using
|
||||||
- Maintained RADIUS and SAML-based MFA proxies for secure access to network gear.
|
BigSwitch Cloud Fabric (OpenDaylight).
|
||||||
- Owned alerting/on-call infrastructure; migrated incident workflows from PagerDuty to OpsGenie.
|
- >-
|
||||||
- Introduced Apache Airflow for analytics engineering, improving billing/reporting pipelines.
|
Replaced aging Juniper gear and unstable edge routers; improved
|
||||||
|
interconnects with private links and a Boston POP for AWS Direct
|
||||||
|
Connect.
|
||||||
|
- >-
|
||||||
|
Designed and implemented a PII "bubble" to segment sensitive workloads
|
||||||
|
from general production traffic.
|
||||||
|
- >-
|
||||||
|
Led CDN modernization using Fastly + Varnish; built traffic shaping and
|
||||||
|
A/B testing config.
|
||||||
|
- >-
|
||||||
|
Maintained RADIUS and SAML-based MFA proxies for secure access to
|
||||||
|
network gear.
|
||||||
|
- >-
|
||||||
|
Owned alerting/on-call infrastructure; migrated incident workflows from
|
||||||
|
PagerDuty to OpsGenie.
|
||||||
|
- >-
|
||||||
|
Introduced Apache Airflow for analytics engineering, improving
|
||||||
|
billing/reporting pipelines.
|
||||||
education:
|
education:
|
||||||
- period: "2013–2017"
|
- period: 2013–2017
|
||||||
role: B.S. in Computer Science
|
role: B.S. in Computer Science
|
||||||
detail: Minor in Computer Networking
|
|
||||||
org: Wentworth Institute of Technology
|
org: Wentworth Institute of Technology
|
||||||
location: Boston, MA
|
detail: Minor in Computer Networking
|
||||||
|
location: 'Boston, MA'
|
||||||
highlights:
|
highlights:
|
||||||
- Coursework in algorithms, compiler design, networking, security, software architecture, and systems programming.
|
- >-
|
||||||
|
Coursework in algorithms, compiler design, networking, security,
|
||||||
|
software architecture, and systems programming.
|
||||||
|
|||||||
Reference in New Issue
Block a user