resume-page: use generated data/resume.yml from @kneel/resume render-hugo
data/resume.yml is now the render-hugo output (phone dropped per pdf-only visibility; experience ordered chronologically). Canonical source is the swamp résumé model in ~/dev/personal/resume-swamp.
This commit is contained in:
+159
-84
@@ -1,18 +1,14 @@
|
||||
# Résumé content for the /resume/ page. Structured mirror of the canonical
|
||||
# LaTeX source (~/dev/personal/resume/resume.tex). Keep in sync with the PDF.
|
||||
|
||||
# Generated by @kneel/resume (render-hugo) — do not edit by hand.
|
||||
# Canonical source: the swamp résumé model. Edit there and re-render.
|
||||
summary: >-
|
||||
Infrastructure consultant specializing in Linux systems, automation, and
|
||||
reliable platform delivery. I help organizations build, migrate, and operate
|
||||
production environments — and contribute upstream to the tools that power them.
|
||||
|
||||
pdf: https://shrugpw.com/resume.pdf
|
||||
|
||||
production environments — and contribute upstream to the tools that power
|
||||
them.
|
||||
pdf: 'https://shrugpw.com/resume.pdf'
|
||||
contact:
|
||||
email: neil@shrug.pw
|
||||
location: Massachusetts
|
||||
phone: "+1 978 432 9449"
|
||||
|
||||
skills:
|
||||
- group: Open Source
|
||||
items:
|
||||
@@ -26,106 +22,185 @@ skills:
|
||||
items:
|
||||
- Secure Infra Architecture
|
||||
- CDN + Edge Services
|
||||
- "Cloud: AWS, Azure, GCP"
|
||||
- 'Cloud: AWS, Azure, GCP'
|
||||
- Infrastructure-as-Code
|
||||
- Containers / OCI / K8s
|
||||
- group: Networking
|
||||
items:
|
||||
- BGP, OSPF, Juniper
|
||||
- 'BGP, OSPF, Juniper'
|
||||
- Linux Routing / Firewalling
|
||||
- Cisco ASA / R+S
|
||||
- Arista EOS, Mikrotik
|
||||
- 'Arista EOS, Mikrotik'
|
||||
- IPv6 Transition
|
||||
- SD-WAN
|
||||
- Load Balancing / ADC
|
||||
- group: Programming
|
||||
items:
|
||||
- Python, Bash, Golang
|
||||
- Ansible, Puppet, Terraform
|
||||
- Pulumi, Lua, Ruby, PHP
|
||||
- 'Python, Bash, Golang'
|
||||
- 'Ansible, Puppet, Terraform'
|
||||
- 'Pulumi, Lua, Ruby, PHP'
|
||||
- group: Tooling
|
||||
items:
|
||||
- Git / GitOps, CI/CD
|
||||
- Prometheus, Grafana
|
||||
- 'Git / GitOps, CI/CD'
|
||||
- 'Prometheus, Grafana'
|
||||
- rpm / mock / koji
|
||||
- GNU/Linux, Ubuntu
|
||||
- 'GNU/Linux, Ubuntu'
|
||||
- Red Hat Enterprise Linux
|
||||
|
||||
experience:
|
||||
- period: "2025—"
|
||||
role: Owner, Principal Consultant
|
||||
- period: 2025—
|
||||
role: 'Owner, Principal Consultant'
|
||||
org: Shrug PW Consulting
|
||||
location: Bedford, MA
|
||||
url: https://shrugpw.com
|
||||
location: 'Bedford, MA'
|
||||
url: 'https://shrugpw.com'
|
||||
highlights:
|
||||
- Architect and deploy bare metal, containerized, and cloud infrastructure for clients across defense, education, and enterprise sectors.
|
||||
- Design and build standardized Linux system images (Ubuntu, RHEL, Rocky) and deployment pipelines using Ansible, Puppet, and custom automation tooling.
|
||||
- Lead complex infrastructure migrations and disaster recovery efforts, including crisis response and system restoration for time-critical environments.
|
||||
- Build custom monitoring, alerting, and observability solutions delivering actionable insights while reducing alert fatigue.
|
||||
- Design and deploy production network infrastructure including routing, firewalls, VLANs, wireless, and fiber connectivity for multi-site organizations.
|
||||
- Develop provisioning documentation, runbooks, and support procedures for client handoff and knowledge transfer.
|
||||
- Provide open source strategy consulting and technical governance for organizations adopting or contributing to FOSS ecosystems.
|
||||
- period: "2020—"
|
||||
role: Director, Infrastructure
|
||||
org: Rocky Enterprise Software Foundation (RESF) — Rocky Linux
|
||||
location: Remote (Volunteer)
|
||||
highlights:
|
||||
- Co-founded and lead infrastructure for the open source rebuild of CentOS Linux (Rocky Linux), coordinating a global team of more than thirty volunteers.
|
||||
- Design and operate hybrid infrastructure spanning public cloud and physical data centers for global mirror distribution, CI/CD pipelines, and release engineering workflows.
|
||||
- Build and maintain scalable public-facing services — Koji builders, HTTP/RSYNC pools, mirrorlist, and signing infrastructure — supporting **3 billion+ requests/month** and **1+ PB/month** of traffic.
|
||||
- Develop and maintain **Peridot**, the open source build system powering Rocky Linux and CIQ's RHEL-derivative product lifecycle, for scalable, reproducible, secure builds.
|
||||
- Build and maintain a cryptographic enclave for UEFI Secure Boot signing, enabling trusted boot for Rocky Linux and downstream derivatives.
|
||||
- Architect secure-by-default systems and enforce best practices in CI/CD, credential management, artifact signing, and endpoint access control.
|
||||
- Lead incident response and coordinate recovery for critical infrastructure outages across multiple time zones and providers.
|
||||
- Manage infrastructure sponsorships and partner relationships for long-term project sustainability and cost-effective operations.
|
||||
- period: "2020—"
|
||||
role: Founding Board Member
|
||||
org: Rocky Enterprise Software Foundation (RESF)
|
||||
location: Remote (Volunteer)
|
||||
highlights:
|
||||
- Established the RESF to support community-driven governance, infrastructure, and lifecycle planning for Rocky Linux and other open source projects.
|
||||
- Represent technical community perspectives on the RESF Advisory Board and help shape project direction and policy.
|
||||
- Advise on growth, sustainability, and alignment between corporate partners and community goals.
|
||||
- period: "2020—"
|
||||
role: Contributor and Packager
|
||||
org: The Fedora Project
|
||||
location: Remote (Volunteer)
|
||||
url: https://fedoraproject.org
|
||||
highlights:
|
||||
- Maintain and test packages in EPEL and Fedora branches.
|
||||
- Contributed to the Fedora RISC-V SIG, supporting alt-arch enablement and early ecosystem work.
|
||||
- Participated in Fedora CommOps, helping shape community engagement strategies and project visibility.
|
||||
- Advocate for upstream-first workflows and maintain contributor-friendly build/test automation.
|
||||
- period: "2021—2025"
|
||||
- >-
|
||||
Architect and deploy bare metal, containerized, and cloud infrastructure
|
||||
for clients across defense, education, and enterprise sectors.
|
||||
- >-
|
||||
Design and build standardized Linux system images (Ubuntu, RHEL, Rocky)
|
||||
and deployment pipelines using Ansible, Puppet, and custom automation
|
||||
tooling.
|
||||
- >-
|
||||
Lead complex infrastructure migrations and disaster recovery efforts,
|
||||
including crisis response and system restoration for time-critical
|
||||
environments.
|
||||
- >-
|
||||
Build custom monitoring, alerting, and observability solutions
|
||||
delivering actionable insights while reducing alert fatigue.
|
||||
- >-
|
||||
Design and deploy production network infrastructure including routing,
|
||||
firewalls, VLANs, wireless, and fiber connectivity for multi-site
|
||||
organizations.
|
||||
- >-
|
||||
Develop provisioning documentation, runbooks, and support procedures for
|
||||
client handoff and knowledge transfer.
|
||||
- >-
|
||||
Provide open source strategy consulting and technical governance for
|
||||
organizations adopting or contributing to FOSS ecosystems.
|
||||
- period: 2021–2025
|
||||
role: Senior Infrastructure Engineer
|
||||
org: Ctrl IQ (CIQ)
|
||||
location: Remote
|
||||
highlights:
|
||||
- Performed formally-sponsored contributions to Rocky Linux and RESF infrastructure, bridging company goals and upstream project sustainability.
|
||||
- Led cross-functional efforts to scale CIQ's build and release infrastructure for RHEL-derivative products based on Rocky.
|
||||
- Designed and maintained hybrid CI/CD pipelines for open and closed-source systems, integrating GitLab, Koji, and internal build/test runners.
|
||||
- Championed upstream-first development practices, ensuring internal engineering work could be contributed back cleanly to RESF when appropriate.
|
||||
- Provided technical leadership and emergency response across CIQ's internal infrastructure stack — networking, packaging, on-call rotation.
|
||||
- Advised CIQ leadership on open source community dynamics, trust-building, and governance best practices.
|
||||
- period: "2015—2021"
|
||||
role: DevOps Engineer, Senior Network Engineer
|
||||
- >-
|
||||
Performed formally-sponsored contributions to Rocky Linux and RESF
|
||||
infrastructure, bridging company goals and upstream project
|
||||
sustainability.
|
||||
- >-
|
||||
Led cross-functional efforts to scale CIQ's build and release
|
||||
infrastructure for RHEL-derivative products based on Rocky.
|
||||
- >-
|
||||
Designed and maintained hybrid CI/CD pipelines for open and
|
||||
closed-source systems, integrating GitLab, Koji, and internal build/test
|
||||
runners.
|
||||
- >-
|
||||
Championed upstream-first development practices, ensuring internal
|
||||
engineering work could be contributed back cleanly to RESF when
|
||||
appropriate.
|
||||
- >-
|
||||
Provided technical leadership and emergency response across CIQ's
|
||||
internal infrastructure stack — networking, packaging, on-call rotation.
|
||||
- >-
|
||||
Advised CIQ leadership on open source community dynamics,
|
||||
trust-building, and governance best practices.
|
||||
- period: 2020—
|
||||
role: 'Director, Infrastructure'
|
||||
org: Rocky Enterprise Software Foundation (RESF) — Rocky Linux
|
||||
highlights:
|
||||
- >-
|
||||
Co-founded and lead infrastructure for the open source rebuild of CentOS
|
||||
Linux (Rocky Linux), coordinating a global team of more than thirty
|
||||
volunteers.
|
||||
- >-
|
||||
Design and operate hybrid infrastructure spanning public cloud and
|
||||
physical data centers for global mirror distribution, CI/CD pipelines,
|
||||
and release engineering workflows.
|
||||
- >-
|
||||
Build and maintain scalable public-facing services — Koji builders,
|
||||
HTTP/RSYNC pools, mirrorlist, and signing infrastructure — supporting
|
||||
**3 billion+ requests/month** and **1+ PB/month** of traffic.
|
||||
- >-
|
||||
Develop and maintain **Peridot**, the open source build system powering
|
||||
Rocky Linux and CIQ's RHEL-derivative product lifecycle, for scalable,
|
||||
reproducible, secure builds.
|
||||
- >-
|
||||
Build and maintain a cryptographic enclave for UEFI Secure Boot signing,
|
||||
enabling trusted boot for Rocky Linux and downstream derivatives.
|
||||
- >-
|
||||
Architect secure-by-default systems and enforce best practices in CI/CD,
|
||||
credential management, artifact signing, and endpoint access control.
|
||||
- >-
|
||||
Lead incident response and coordinate recovery for critical
|
||||
infrastructure outages across multiple time zones and providers.
|
||||
- >-
|
||||
Manage infrastructure sponsorships and partner relationships for
|
||||
long-term project sustainability and cost-effective operations.
|
||||
- period: 2020—
|
||||
role: Founding Board Member
|
||||
org: Rocky Enterprise Software Foundation (RESF)
|
||||
highlights:
|
||||
- >-
|
||||
Established the RESF to support community-driven governance,
|
||||
infrastructure, and lifecycle planning for Rocky Linux and other open
|
||||
source projects.
|
||||
- >-
|
||||
Represent technical community perspectives on the RESF Advisory Board
|
||||
and help shape project direction and policy.
|
||||
- >-
|
||||
Advise on growth, sustainability, and alignment between corporate
|
||||
partners and community goals.
|
||||
- period: 2020—
|
||||
role: Contributor and Packager
|
||||
org: The Fedora Project
|
||||
url: 'https://fedoraproject.org'
|
||||
highlights:
|
||||
- Maintain and test packages in EPEL and Fedora branches.
|
||||
- >-
|
||||
Contributed to the Fedora RISC-V SIG, supporting alt-arch enablement and
|
||||
early ecosystem work.
|
||||
- >-
|
||||
Participated in Fedora CommOps, helping shape community engagement
|
||||
strategies and project visibility.
|
||||
- >-
|
||||
Advocate for upstream-first workflows and maintain contributor-friendly
|
||||
build/test automation.
|
||||
- period: 2015–2021
|
||||
role: 'DevOps Engineer, Senior Network Engineer'
|
||||
org: KAYAK Software Corporation
|
||||
location: Concord, MA
|
||||
location: 'Concord, MA'
|
||||
highlights:
|
||||
- Managed production and corporate networks across two data centers and 14+ global offices.
|
||||
- Re-architected core switching to a modern spine/leaf fabric using BigSwitch Cloud Fabric (OpenDaylight).
|
||||
- Replaced aging Juniper gear and unstable edge routers; improved interconnects with private links and a Boston POP for AWS Direct Connect.
|
||||
- Designed and implemented a PII "bubble" to segment sensitive workloads from general production traffic.
|
||||
- Led CDN modernization using Fastly + Varnish; built traffic shaping and A/B testing config.
|
||||
- Maintained RADIUS and SAML-based MFA proxies for secure access to network gear.
|
||||
- Owned alerting/on-call infrastructure; migrated incident workflows from PagerDuty to OpsGenie.
|
||||
- Introduced Apache Airflow for analytics engineering, improving billing/reporting pipelines.
|
||||
|
||||
- >-
|
||||
Managed production and corporate networks across two data centers and
|
||||
14+ global offices.
|
||||
- >-
|
||||
Re-architected core switching to a modern spine/leaf fabric using
|
||||
BigSwitch Cloud Fabric (OpenDaylight).
|
||||
- >-
|
||||
Replaced aging Juniper gear and unstable edge routers; improved
|
||||
interconnects with private links and a Boston POP for AWS Direct
|
||||
Connect.
|
||||
- >-
|
||||
Designed and implemented a PII "bubble" to segment sensitive workloads
|
||||
from general production traffic.
|
||||
- >-
|
||||
Led CDN modernization using Fastly + Varnish; built traffic shaping and
|
||||
A/B testing config.
|
||||
- >-
|
||||
Maintained RADIUS and SAML-based MFA proxies for secure access to
|
||||
network gear.
|
||||
- >-
|
||||
Owned alerting/on-call infrastructure; migrated incident workflows from
|
||||
PagerDuty to OpsGenie.
|
||||
- >-
|
||||
Introduced Apache Airflow for analytics engineering, improving
|
||||
billing/reporting pipelines.
|
||||
education:
|
||||
- period: "2013–2017"
|
||||
- period: 2013–2017
|
||||
role: B.S. in Computer Science
|
||||
detail: Minor in Computer Networking
|
||||
org: Wentworth Institute of Technology
|
||||
location: Boston, MA
|
||||
detail: Minor in Computer Networking
|
||||
location: 'Boston, MA'
|
||||
highlights:
|
||||
- Coursework in algorithms, compiler design, networking, security, software architecture, and systems programming.
|
||||
- >-
|
||||
Coursework in algorithms, compiler design, networking, security,
|
||||
software architecture, and systems programming.
|
||||
|
||||
Reference in New Issue
Block a user