1. Responsible for the company's SRE (K8s in various environments), DevOps (automated CI/CD pipeline), MIS (company network environment and MDM device management), and cybersecurity roles.2. Managed and built various GKE production and testing environments, including Develop, Staging, PreProd, and Production.3. Replaced K8s Ingress with GKE Gateway and utilized free certificates provided by Google and CloudFlare, ensuring website reliability and stability through DNS challenge methods.4. Established on-premises virtual machine environments and introduced a hybrid cloud architecture, reducing overall expenses by over 40%, thus increasing the Production budget share from 30% to 65%. With the improved efficiency, this allowed the company to use the remaining infra budget to doubled the redundancy and performance of the original Production MySQL.5. Redesigned the company's CI/CD pipeline, enabling smooth deployment of applications to global cloud and on-premises environments without vendor lock-in, reducing Git monthly maintenance costs by 66%.6. Implemented serverless solutions on GCP, such as Cloud Run and Cloud Functions, reducing static website maintenance costs by nearly 80%.7. Virtualized the original Taiwan on-premises Dev data center to a Japan data center, ensuring all network traffic uses Japanese IPs and routes.8. Redesigned the company's VPN architecture, introducing a self-built SD-WAN (mesh Wireguard VPN), reducing VPN monthly maintenance costs by over 90%, increasing connection speeds by 5 times (over 200mb/s), and enabling users to switch exit networks and change IPs at will.

SRE1. Planned and established the company's Lab and PreProd environments using Docker Compose.2. Upgraded Lab environment from Docker Compose to K8s architecture compatible for GitOps management.3. Managed and maintained cloud and on-premises integration (AWS / GCP / Azure).4. Architected a VPN mesh (WireGuard) with ACL control to connect multi-cloud environments.5. Implemented OpenLDAP, FreeIPA, UCS AD LDAP services, and KeyCloak for identity synchronization and containerization.6. Replaced Jenkins and Ansible with Gitea, Drone CI, Terraform, and ArgoCD for the CI/CD architecture (Go environment).7. Established monitoring with Grafana (Prometheus, InfluxDB with Telegraf).8. Evaluated the introduction of JetBrains Space's ChatOps solution to replace the JIRA ticketing system.9. Wrote Jenkins deployment scripts and optimized the CI/CD process.Infrastructure1. Established a hyper-converged infrastructure using Proxmox VE or vCenter as foundation (Ceph or vSAN).2. Utilized link aggregation with 1Gb * 8 and 10~25Gb * 2 connections as the basis for high-intensity distributed storage.3. Optimized network throughput performance for virtual or physical layers using multiple technologies such as DPDK, SR-IOV, RDMA, or RoCE.4. Employed VLAN tag (trunk) multiplexing to allow a single network cable to transmit multiple MTU sizes and protocols simultaneously.5. Implemented network fail-over mechanisms to prevent distributed storage downtime arising from single switch failures.6. Leveraged VRRP to enhance single software router to become multiple softer routers to protect against the risk of external connectivity loss.

1. Established a hyper-converged environment using 10G networks, isolating the Ceph public network from the cluster network, enabling failover and rapid live migration capabilities.2. Set up a Darktrace analysis environment to continuously monitor abnormal network packet traffic.3. Created a fully wireless office environment using Mikrotik CCR1072 and UniFi XG AP, with WPA-Enterprise (802.1x RADIUS) authentication, automatically connecting employees to their department VLAN.4. Configured firewall rules to manage the network of VLANs in the company. Created dedicated VLANs for every department, shared VLANs for cross-department use, and an isolated VLAN for network device. This design also prevents non-R&D departments from obtaining fixed external IPs.5. Implemented the use of M365 Teams to prevent the use of instant messengers like LINE or Telegram, which could lead to information leakage when employees leave the company. This implementation addresses the security vulnerability of unencrypted temporary storage of discussion attachments on devices.6. Implemented Intune, allowing company to extend management of laptop devices beyond the office where traditional AD could not.7. Mandated the use of MFA to ensure the security of internal services.8. Utilized Defender for Business to establish a EDR environment.9. During the COVID pandemic, set up an OpenVPN server with RADIUS authentication capable of servicing all company employees to work remotely and securely.

1. Managed Alibaba Cloud, AWS, and GCP, with company systems primarily using Docker Compose architecture.2. Handled daily repetitive Linux tasks using crontab scheduling and Shell script/Python.3. Set up GitLab and Jenkins to trigger Ansible for automated maintenance tasks.4. Established dual hyper-converged environments with Proxmox VE, Ceph, and GlusterFS.5. Implemented Infrastructure as Code using Cloud-init templates and Terraform.6. Set up dual bastion hosts with Jumpserver and Teleport for Linux and Windows servers.7. Established monitoring and alert systems with Prometheus/Grafana.8. Integrated logs using EFK (Fluentd).9. Introduced wireless network VLAN with 802.1X (RADIUS) authentication.10. Used WireGuard VPN and SS/SSR technologies to bypass great-firewalls.

1. Conducted a comprehensive analysis of M365 and GWS, implementing the best solution for the company.2. Managed the company's fully wireless office environment using UniFi Controller.3. Established email architecture using GWS Gmail features, to create group mailboxes, shared mailboxes, system email sending/receiving, and forwarding services for company.4. Created group permission management with GWS shared cloud drives, replacing traditional NAS.5. Implemented Synology ABB to complete daily automated differential backups of employee main systems.6. Set up a company virus alert and threat warning system with NOD32 Enterprise Edition central control.7. Replaced the original VMware vCenter (cracked version) environment with Proxmox VE.8. Replaced the original unsubscribed Fortigate 100D with Mikrotik CCR Router.9. Responsible for procurement of IT equiment, conducting price comparisons and computure upgrade evaluation needs (performance, memeory, SSD, etc.) prior to purchasing.10. Established the company's internal VPN environment.

1. Served overseas VIP clients (in Chinese/English) with financial-related issues such as forex, withdrawals, and account opening progress.2. Handled client investment order issues, providing technical analysis and explanations.3. Coordinated client issues via email and online LiveChat.4. Implemented Microsoft CRM and collaborated with various departments to resolve issues.5. Assisted VIP clients with system operations and usage, responding to inquiries and providing explanations.6. Managed major customer complaints.7. Supervised the China team.