Regenerate from @kneel/resume with three currently-active roles added (OpenStack-Ansible core reviewer; CentOS Cloud/NFV/Hyperscale SIGs incl. RDO PTL, dated 2020; ResolveX advisory board), the two closed RESF entries rewritten in past tense, and the experience timeline reordered so active roles list before ended ones. Updates the live /resume/ page and /resume.json.
257 lines
10 KiB
YAML
257 lines
10 KiB
YAML
# Generated by @kneel/resume (render-hugo) — do not edit by hand.
|
||
# Canonical source: the swamp résumé model. Edit there and re-render.
|
||
summary: >-
|
||
Infrastructure consultant specializing in Linux systems, automation, and
|
||
reliable platform delivery. I help organizations build, migrate, and operate
|
||
production environments — and contribute upstream to the tools that power
|
||
them.
|
||
pdf: 'https://shrugpw.com/resume.pdf'
|
||
contact:
|
||
email: neil@shrug.pw
|
||
location: Massachusetts
|
||
skills:
|
||
- group: Open Source
|
||
items:
|
||
- Rocky Linux Infra Lead
|
||
- Fedora / EPEL Contributor
|
||
- Community Governance
|
||
- Upstream-first Development
|
||
- Release Engineering
|
||
- OpenELA TSC
|
||
- group: Systems Engineering
|
||
items:
|
||
- Secure Infra Architecture
|
||
- CDN + Edge Services
|
||
- 'Cloud: AWS, Azure, GCP'
|
||
- Infrastructure-as-Code
|
||
- Containers / OCI / K8s
|
||
- group: Networking
|
||
items:
|
||
- 'BGP, OSPF, Juniper'
|
||
- Linux Routing / Firewalling
|
||
- Cisco ASA / R+S
|
||
- 'Arista EOS, Mikrotik'
|
||
- IPv6 Transition
|
||
- SD-WAN
|
||
- Load Balancing / ADC
|
||
- group: Programming
|
||
items:
|
||
- 'Python, Bash, Golang'
|
||
- 'Ansible, Puppet, Terraform'
|
||
- 'Pulumi, Lua, Ruby, PHP'
|
||
- group: Tooling
|
||
items:
|
||
- 'Git / GitOps, CI/CD'
|
||
- 'Prometheus, Grafana'
|
||
- rpm / mock / koji
|
||
- 'GNU/Linux, Ubuntu'
|
||
- Red Hat Enterprise Linux
|
||
experience:
|
||
- period: 2025—
|
||
role: 'Owner, Principal Consultant'
|
||
org: Shrug PW Consulting
|
||
location: 'Bedford, MA'
|
||
url: 'https://shrugpw.com'
|
||
highlights:
|
||
- >-
|
||
Architect and deploy bare metal, containerized, and cloud infrastructure
|
||
for clients across defense, education, and enterprise sectors.
|
||
- >-
|
||
Design and build standardized Linux system images (Ubuntu, RHEL, Rocky)
|
||
and deployment pipelines using Ansible, Puppet, and custom automation
|
||
tooling.
|
||
- >-
|
||
Lead complex infrastructure migrations and disaster recovery efforts,
|
||
including crisis response and system restoration for time-critical
|
||
environments.
|
||
- >-
|
||
Build custom monitoring, alerting, and observability solutions
|
||
delivering actionable insights while reducing alert fatigue.
|
||
- >-
|
||
Design and deploy production network infrastructure including routing,
|
||
firewalls, VLANs, wireless, and fiber connectivity for multi-site
|
||
organizations.
|
||
- >-
|
||
Develop provisioning documentation, runbooks, and support procedures for
|
||
client handoff and knowledge transfer.
|
||
- >-
|
||
Provide open source strategy consulting and technical governance for
|
||
organizations adopting or contributing to FOSS ecosystems.
|
||
- period: 2025—
|
||
role: Advisory Board Member & Technical Advisor
|
||
org: ResolveX Inc.
|
||
location: Remote
|
||
url: 'https://resolvex.com'
|
||
highlights:
|
||
- >-
|
||
Advise on infrastructure architecture and operational resilience for
|
||
advanced call-center software serving crisis helplines, including the
|
||
988 Suicide & Crisis Lifeline.
|
||
- >-
|
||
Provide scaling and reliability guidance for a team building
|
||
mission-critical systems for mental-health and crisis lines.
|
||
- period: 2022—
|
||
role: OpenStack-Ansible Core Reviewer
|
||
org: OpenStack
|
||
location: Remote (Volunteer)
|
||
url: 'https://opendev.org/openstack/openstack-ansible'
|
||
highlights:
|
||
- >-
|
||
Core reviewer for OpenStack-Ansible, maintaining and improving the
|
||
deployment tooling and automation for running OpenStack on enterprise
|
||
Linux.
|
||
- >-
|
||
Review patches, mentor contributors, and help keep releases stable and
|
||
secure.
|
||
- >-
|
||
Focus on test coverage, CI modernization, and tighter integration with
|
||
upstream OpenStack projects.
|
||
- period: 2020—
|
||
role: 'SIG Contributor — Cloud, NFV, and Hyperscale'
|
||
org: The CentOS Project
|
||
location: Remote (Volunteer)
|
||
url: 'https://www.centos.org'
|
||
highlights:
|
||
- >-
|
||
**Project Team Lead (PTL)** for RDO's transition into the CentOS Cloud
|
||
SIG, steering where RDO's OpenStack packaging lives and how it ships.
|
||
- >-
|
||
Maintain Open vSwitch (OVS) and Open Virtual Network (OVN) packages and
|
||
their dependencies for the NFV SIG — keeping working versions available
|
||
for EL9+ users, including Rocky Linux and AlmaLinux, insulated from
|
||
churn in CentOS Stream.
|
||
- Contribute packaging and maintenance effort to the Hyperscale SIG.
|
||
- Long-time CentOS user and community member since 2013.
|
||
- period: 2020—
|
||
role: Contributor and Packager
|
||
org: The Fedora Project
|
||
location: Remote (Volunteer)
|
||
url: 'https://fedoraproject.org'
|
||
highlights:
|
||
- Maintain and test packages in EPEL and Fedora branches.
|
||
- >-
|
||
Contributed to the Fedora RISC-V SIG, supporting alt-arch enablement and
|
||
early ecosystem work.
|
||
- >-
|
||
Participated in Fedora CommOps, helping shape community engagement
|
||
strategies and project visibility.
|
||
- >-
|
||
Advocate for upstream-first workflows and maintain contributor-friendly
|
||
build/test automation.
|
||
- period: 2021–2025
|
||
role: Senior Infrastructure Engineer
|
||
org: Ctrl IQ (CIQ)
|
||
location: Remote
|
||
highlights:
|
||
- >-
|
||
Performed formally-sponsored contributions to Rocky Linux and RESF
|
||
infrastructure, bridging company goals and upstream project
|
||
sustainability.
|
||
- >-
|
||
Led cross-functional efforts to scale CIQ's build and release
|
||
infrastructure for RHEL-derivative products based on Rocky.
|
||
- >-
|
||
Designed and maintained hybrid CI/CD pipelines for open and
|
||
closed-source systems, integrating GitLab, Koji, and internal build/test
|
||
runners.
|
||
- >-
|
||
Championed upstream-first development practices, ensuring internal
|
||
engineering work could be contributed back cleanly to RESF when
|
||
appropriate.
|
||
- >-
|
||
Provided technical leadership and emergency response across CIQ's
|
||
internal infrastructure stack — networking, packaging, on-call rotation.
|
||
- >-
|
||
Advised CIQ leadership on open source community dynamics,
|
||
trust-building, and governance best practices.
|
||
- period: 2020–2026
|
||
role: 'Director, Infrastructure'
|
||
org: Rocky Enterprise Software Foundation (RESF) — Rocky Linux
|
||
location: Remote (Volunteer)
|
||
highlights:
|
||
- >-
|
||
Co-founded and led infrastructure for the open source rebuild of CentOS
|
||
Linux (Rocky Linux), coordinating a global team of more than thirty
|
||
volunteers.
|
||
- >-
|
||
Designed and operated hybrid infrastructure spanning public cloud and
|
||
physical data centers for global mirror distribution, CI/CD pipelines,
|
||
and release engineering workflows.
|
||
- >-
|
||
Built and maintained scalable public-facing services — Koji builders,
|
||
HTTP/RSYNC pools, mirrorlist, and signing infrastructure — supporting
|
||
**3 billion+ requests/month** and **1+ PB/month** of traffic.
|
||
- >-
|
||
Developed and maintained **Peridot**, the open source build system
|
||
powering Rocky Linux and CIQ's RHEL-derivative product lifecycle, for
|
||
scalable, reproducible, secure builds.
|
||
- >-
|
||
Built and maintained a cryptographic enclave for UEFI Secure Boot
|
||
signing, enabling trusted boot for Rocky Linux and downstream
|
||
derivatives.
|
||
- >-
|
||
Architected secure-by-default systems and enforced best practices in
|
||
CI/CD, credential management, artifact signing, and endpoint access
|
||
control.
|
||
- >-
|
||
Led incident response and coordinated recovery for critical
|
||
infrastructure outages across multiple time zones and providers.
|
||
- >-
|
||
Managed infrastructure sponsorships and partner relationships for
|
||
long-term project sustainability and cost-effective operations.
|
||
- period: 2020–2026
|
||
role: Founding Board Member
|
||
org: Rocky Enterprise Software Foundation (RESF)
|
||
location: Remote (Volunteer)
|
||
highlights:
|
||
- >-
|
||
Established the RESF to support community-driven governance,
|
||
infrastructure, and lifecycle planning for Rocky Linux and other open
|
||
source projects.
|
||
- >-
|
||
Represented technical community perspectives on the RESF Advisory Board
|
||
and helped shape project direction and policy.
|
||
- >-
|
||
Advised on growth, sustainability, and alignment between corporate
|
||
partners and community goals.
|
||
- period: 2015–2021
|
||
role: 'DevOps Engineer, Senior Network Engineer'
|
||
org: KAYAK Software Corporation
|
||
location: 'Concord, MA'
|
||
highlights:
|
||
- >-
|
||
Managed production and corporate networks across two data centers and
|
||
14+ global offices.
|
||
- >-
|
||
Re-architected core switching to a modern spine/leaf fabric using
|
||
BigSwitch Cloud Fabric (OpenDaylight).
|
||
- >-
|
||
Replaced aging Juniper gear and unstable edge routers; improved
|
||
interconnects with private links and a Boston POP for AWS Direct
|
||
Connect.
|
||
- >-
|
||
Designed and implemented a PII "bubble" to segment sensitive workloads
|
||
from general production traffic.
|
||
- >-
|
||
Led CDN modernization using Fastly + Varnish; built traffic shaping and
|
||
A/B testing config.
|
||
- >-
|
||
Maintained RADIUS and SAML-based MFA proxies for secure access to
|
||
network gear.
|
||
- >-
|
||
Owned alerting/on-call infrastructure; migrated incident workflows from
|
||
PagerDuty to OpsGenie.
|
||
- >-
|
||
Introduced Apache Airflow for analytics engineering, improving
|
||
billing/reporting pipelines.
|
||
education:
|
||
- period: 2013–2017
|
||
role: B.S. in Computer Science
|
||
org: Wentworth Institute of Technology
|
||
detail: Minor in Computer Networking
|
||
location: 'Boston, MA'
|
||
highlights:
|
||
- >-
|
||
Coursework in algorithms, compiler design, networking, security,
|
||
software architecture, and systems programming.
|