resume-page: use generated data/resume.yml from @kneel/resume render-hugo

data/resume.yml is now the render-hugo output (phone dropped per pdf-only
visibility; experience ordered chronologically). Canonical source is the swamp
résumé model in ~/dev/personal/resume-swamp.
This commit is contained in:
2026-07-12 14:22:36 -04:00
parent ada87980bb
commit 21fa14a9e1
+159 -84
View File
@@ -1,18 +1,14 @@
# Résumé content for the /resume/ page. Structured mirror of the canonical
# LaTeX source (~/dev/personal/resume/resume.tex). Keep in sync with the PDF.
# Generated by @kneel/resume (render-hugo) — do not edit by hand.
# Canonical source: the swamp résumé model. Edit there and re-render.
summary: >-
Infrastructure consultant specializing in Linux systems, automation, and
reliable platform delivery. I help organizations build, migrate, and operate
production environments — and contribute upstream to the tools that power them.
pdf: https://shrugpw.com/resume.pdf
production environments — and contribute upstream to the tools that power
them.
pdf: 'https://shrugpw.com/resume.pdf'
contact:
email: neil@shrug.pw
location: Massachusetts
phone: "+1 978 432 9449"
skills:
- group: Open Source
items:
@@ -26,106 +22,185 @@ skills:
items:
- Secure Infra Architecture
- CDN + Edge Services
- "Cloud: AWS, Azure, GCP"
- 'Cloud: AWS, Azure, GCP'
- Infrastructure-as-Code
- Containers / OCI / K8s
- group: Networking
items:
- BGP, OSPF, Juniper
- 'BGP, OSPF, Juniper'
- Linux Routing / Firewalling
- Cisco ASA / R+S
- Arista EOS, Mikrotik
- 'Arista EOS, Mikrotik'
- IPv6 Transition
- SD-WAN
- Load Balancing / ADC
- group: Programming
items:
- Python, Bash, Golang
- Ansible, Puppet, Terraform
- Pulumi, Lua, Ruby, PHP
- 'Python, Bash, Golang'
- 'Ansible, Puppet, Terraform'
- 'Pulumi, Lua, Ruby, PHP'
- group: Tooling
items:
- Git / GitOps, CI/CD
- Prometheus, Grafana
- 'Git / GitOps, CI/CD'
- 'Prometheus, Grafana'
- rpm / mock / koji
- GNU/Linux, Ubuntu
- 'GNU/Linux, Ubuntu'
- Red Hat Enterprise Linux
experience:
- period: "2025—"
role: Owner, Principal Consultant
- period: 2025
role: 'Owner, Principal Consultant'
org: Shrug PW Consulting
location: Bedford, MA
url: https://shrugpw.com
location: 'Bedford, MA'
url: 'https://shrugpw.com'
highlights:
- Architect and deploy bare metal, containerized, and cloud infrastructure for clients across defense, education, and enterprise sectors.
- Design and build standardized Linux system images (Ubuntu, RHEL, Rocky) and deployment pipelines using Ansible, Puppet, and custom automation tooling.
- Lead complex infrastructure migrations and disaster recovery efforts, including crisis response and system restoration for time-critical environments.
- Build custom monitoring, alerting, and observability solutions delivering actionable insights while reducing alert fatigue.
- Design and deploy production network infrastructure including routing, firewalls, VLANs, wireless, and fiber connectivity for multi-site organizations.
- Develop provisioning documentation, runbooks, and support procedures for client handoff and knowledge transfer.
- Provide open source strategy consulting and technical governance for organizations adopting or contributing to FOSS ecosystems.
- period: "2020—"
role: Director, Infrastructure
org: Rocky Enterprise Software Foundation (RESF) — Rocky Linux
location: Remote (Volunteer)
highlights:
- Co-founded and lead infrastructure for the open source rebuild of CentOS Linux (Rocky Linux), coordinating a global team of more than thirty volunteers.
- Design and operate hybrid infrastructure spanning public cloud and physical data centers for global mirror distribution, CI/CD pipelines, and release engineering workflows.
- Build and maintain scalable public-facing services — Koji builders, HTTP/RSYNC pools, mirrorlist, and signing infrastructure — supporting **3 billion+ requests/month** and **1+ PB/month** of traffic.
- Develop and maintain **Peridot**, the open source build system powering Rocky Linux and CIQ's RHEL-derivative product lifecycle, for scalable, reproducible, secure builds.
- Build and maintain a cryptographic enclave for UEFI Secure Boot signing, enabling trusted boot for Rocky Linux and downstream derivatives.
- Architect secure-by-default systems and enforce best practices in CI/CD, credential management, artifact signing, and endpoint access control.
- Lead incident response and coordinate recovery for critical infrastructure outages across multiple time zones and providers.
- Manage infrastructure sponsorships and partner relationships for long-term project sustainability and cost-effective operations.
- period: "2020—"
role: Founding Board Member
org: Rocky Enterprise Software Foundation (RESF)
location: Remote (Volunteer)
highlights:
- Established the RESF to support community-driven governance, infrastructure, and lifecycle planning for Rocky Linux and other open source projects.
- Represent technical community perspectives on the RESF Advisory Board and help shape project direction and policy.
- Advise on growth, sustainability, and alignment between corporate partners and community goals.
- period: "2020—"
role: Contributor and Packager
org: The Fedora Project
location: Remote (Volunteer)
url: https://fedoraproject.org
highlights:
- Maintain and test packages in EPEL and Fedora branches.
- Contributed to the Fedora RISC-V SIG, supporting alt-arch enablement and early ecosystem work.
- Participated in Fedora CommOps, helping shape community engagement strategies and project visibility.
- Advocate for upstream-first workflows and maintain contributor-friendly build/test automation.
- period: "2021—2025"
- >-
Architect and deploy bare metal, containerized, and cloud infrastructure
for clients across defense, education, and enterprise sectors.
- >-
Design and build standardized Linux system images (Ubuntu, RHEL, Rocky)
and deployment pipelines using Ansible, Puppet, and custom automation
tooling.
- >-
Lead complex infrastructure migrations and disaster recovery efforts,
including crisis response and system restoration for time-critical
environments.
- >-
Build custom monitoring, alerting, and observability solutions
delivering actionable insights while reducing alert fatigue.
- >-
Design and deploy production network infrastructure including routing,
firewalls, VLANs, wireless, and fiber connectivity for multi-site
organizations.
- >-
Develop provisioning documentation, runbooks, and support procedures for
client handoff and knowledge transfer.
- >-
Provide open source strategy consulting and technical governance for
organizations adopting or contributing to FOSS ecosystems.
- period: 20212025
role: Senior Infrastructure Engineer
org: Ctrl IQ (CIQ)
location: Remote
highlights:
- Performed formally-sponsored contributions to Rocky Linux and RESF infrastructure, bridging company goals and upstream project sustainability.
- Led cross-functional efforts to scale CIQ's build and release infrastructure for RHEL-derivative products based on Rocky.
- Designed and maintained hybrid CI/CD pipelines for open and closed-source systems, integrating GitLab, Koji, and internal build/test runners.
- Championed upstream-first development practices, ensuring internal engineering work could be contributed back cleanly to RESF when appropriate.
- Provided technical leadership and emergency response across CIQ's internal infrastructure stack — networking, packaging, on-call rotation.
- Advised CIQ leadership on open source community dynamics, trust-building, and governance best practices.
- period: "2015—2021"
role: DevOps Engineer, Senior Network Engineer
- >-
Performed formally-sponsored contributions to Rocky Linux and RESF
infrastructure, bridging company goals and upstream project
sustainability.
- >-
Led cross-functional efforts to scale CIQ's build and release
infrastructure for RHEL-derivative products based on Rocky.
- >-
Designed and maintained hybrid CI/CD pipelines for open and
closed-source systems, integrating GitLab, Koji, and internal build/test
runners.
- >-
Championed upstream-first development practices, ensuring internal
engineering work could be contributed back cleanly to RESF when
appropriate.
- >-
Provided technical leadership and emergency response across CIQ's
internal infrastructure stack — networking, packaging, on-call rotation.
- >-
Advised CIQ leadership on open source community dynamics,
trust-building, and governance best practices.
- period: 2020
role: 'Director, Infrastructure'
org: Rocky Enterprise Software Foundation (RESF) — Rocky Linux
highlights:
- >-
Co-founded and lead infrastructure for the open source rebuild of CentOS
Linux (Rocky Linux), coordinating a global team of more than thirty
volunteers.
- >-
Design and operate hybrid infrastructure spanning public cloud and
physical data centers for global mirror distribution, CI/CD pipelines,
and release engineering workflows.
- >-
Build and maintain scalable public-facing services — Koji builders,
HTTP/RSYNC pools, mirrorlist, and signing infrastructure — supporting
**3 billion+ requests/month** and **1+ PB/month** of traffic.
- >-
Develop and maintain **Peridot**, the open source build system powering
Rocky Linux and CIQ's RHEL-derivative product lifecycle, for scalable,
reproducible, secure builds.
- >-
Build and maintain a cryptographic enclave for UEFI Secure Boot signing,
enabling trusted boot for Rocky Linux and downstream derivatives.
- >-
Architect secure-by-default systems and enforce best practices in CI/CD,
credential management, artifact signing, and endpoint access control.
- >-
Lead incident response and coordinate recovery for critical
infrastructure outages across multiple time zones and providers.
- >-
Manage infrastructure sponsorships and partner relationships for
long-term project sustainability and cost-effective operations.
- period: 2020
role: Founding Board Member
org: Rocky Enterprise Software Foundation (RESF)
highlights:
- >-
Established the RESF to support community-driven governance,
infrastructure, and lifecycle planning for Rocky Linux and other open
source projects.
- >-
Represent technical community perspectives on the RESF Advisory Board
and help shape project direction and policy.
- >-
Advise on growth, sustainability, and alignment between corporate
partners and community goals.
- period: 2020
role: Contributor and Packager
org: The Fedora Project
url: 'https://fedoraproject.org'
highlights:
- Maintain and test packages in EPEL and Fedora branches.
- >-
Contributed to the Fedora RISC-V SIG, supporting alt-arch enablement and
early ecosystem work.
- >-
Participated in Fedora CommOps, helping shape community engagement
strategies and project visibility.
- >-
Advocate for upstream-first workflows and maintain contributor-friendly
build/test automation.
- period: 20152021
role: 'DevOps Engineer, Senior Network Engineer'
org: KAYAK Software Corporation
location: Concord, MA
location: 'Concord, MA'
highlights:
- Managed production and corporate networks across two data centers and 14+ global offices.
- Re-architected core switching to a modern spine/leaf fabric using BigSwitch Cloud Fabric (OpenDaylight).
- Replaced aging Juniper gear and unstable edge routers; improved interconnects with private links and a Boston POP for AWS Direct Connect.
- Designed and implemented a PII "bubble" to segment sensitive workloads from general production traffic.
- Led CDN modernization using Fastly + Varnish; built traffic shaping and A/B testing config.
- Maintained RADIUS and SAML-based MFA proxies for secure access to network gear.
- Owned alerting/on-call infrastructure; migrated incident workflows from PagerDuty to OpsGenie.
- Introduced Apache Airflow for analytics engineering, improving billing/reporting pipelines.
- >-
Managed production and corporate networks across two data centers and
14+ global offices.
- >-
Re-architected core switching to a modern spine/leaf fabric using
BigSwitch Cloud Fabric (OpenDaylight).
- >-
Replaced aging Juniper gear and unstable edge routers; improved
interconnects with private links and a Boston POP for AWS Direct
Connect.
- >-
Designed and implemented a PII "bubble" to segment sensitive workloads
from general production traffic.
- >-
Led CDN modernization using Fastly + Varnish; built traffic shaping and
A/B testing config.
- >-
Maintained RADIUS and SAML-based MFA proxies for secure access to
network gear.
- >-
Owned alerting/on-call infrastructure; migrated incident workflows from
PagerDuty to OpsGenie.
- >-
Introduced Apache Airflow for analytics engineering, improving
billing/reporting pipelines.
education:
- period: "20132017"
- period: 20132017
role: B.S. in Computer Science
detail: Minor in Computer Networking
org: Wentworth Institute of Technology
location: Boston, MA
detail: Minor in Computer Networking
location: 'Boston, MA'
highlights:
- Coursework in algorithms, compiler design, networking, security, software architecture, and systems programming.
- >-
Coursework in algorithms, compiler design, networking, security,
software architecture, and systems programming.