Danny Hallwood Email & Phone Number

Vancouver, Bc, Ca

Vancouver, Bc, Ca

Global

Site Reliability Engineering (SRE) efforts at scale, overseeing the deployment of 50,000+ clusters per week across diverse modern technology stacks as a Platform-as-a-Service (PaaS) provider.Encompass managing Git-based Infrastructure-as-Code (IAC) processes across multiple cloud providers, ensuring multi-stack compatibility, and maintaining a fully managed infrastructure with four-nines reliability and strict compliance adherence. My focus lies not only on reliability but also on sustainability.In pursuit of world-class resource efficiency, we specialize in developing low-level bespoke daemons that optimize kernel, file system, and routing components. Sustainability is a core principle of our work, and we actively educate and empower our customers to make environmentally conscious choices, including selecting greener edge locations.We're abstracting the PaaS layer over a variety of cloud platforms, including AWS, Azure, GCP, OVH, and others. Our development workflow is streamlined, where a simple 'git push' triggers automated magic—each branch automatically deploys a stack, allowing for easy staging and testing before merging pull requests.

Leeds, England, United Kingdom

Chief engineer responsible for DevSecOps delivery, worked alongside BE as a senior Python developer, and acted as Scrum master. Developing GitOps SDLC across BE, FE, Test, and Automation. ● Created SW defined Kubernetes production and path to live environments. Production with guaranteed resource QOS ● Dev, Feature, and Test K8s Instances shared their own nodes with respective namespaces and network policies for logical separation and cost reduction. ● Built GitOps and Jenkins CI/CD for containers including OpenID(Oauth2), Kong API-GW, Monorepo/submodule Python pods, SPA React FE, Nginx, Redis, Vyos router, Hashicorp Vault, SSL-Offload, PostgreSQL ● Git/web-hook triggered static code quality analysis, linting, security review, unit and jmeter performance test. ● Utilised Prometheus sidecar containers and Grafana for observability ● Centralised ELK logging from all services, via a mixture of in-app python structlog writes and adapter pattern tail-forwarding to logstash ● Automated DB migrations, Alembic roll-back DB and stack containers on deployment failureThe product itself a customer on premise cloud solution, allowing businesses to craft their own on-premise VPCs, IPSec-VPNs, Subnets, FW Policies, deploy VMs from a catalogue of custom OS, DBs, and Network appliance images, and React GUI. The solution wrapped Nutanix. All services tied into Oauth2 for multi-tenancy safety, VPCs, FW rules, Subnets, IPSec VPNs defined in Vyos deployed as a container configured via Python.

Kyiv Ukraine

I successfully assembled and led a team of Python back-end, React front-end, and Automaton test as a hands-on Engineer as the Ukraine based technical arm for a UK company.● Built scale out AWS EC2 based Kubernetes for production, and shared instance for dev, test, and feature branches. ● AWS EC2, R53, Network Filters, IAM, S3, Gateway, RDS, defined in Terraform, configured with Ansible ● Developers provisioned with both minicube and compose stub environments with MinIO local S3 object storage● Automated CI/CD through combination of GitOps and CircleCI ●Git triggered static code quality analysis, linting, security review - unit test and volume and performance regression test execution●Custom containers for Api-gw, Keycloak Open-ID, Nginx FE / React SPA builds, Mono-Repo Python, Redis, Vault, and developer containers for Mysql, PostreSQL, MinIO●Database Orm models, fast-api, Alembic migrations pinned to release versions● Utilised Prometheus sidecar containers and Grafana for observability ●Centralised ELK logging from all services, via a mixture of in-app python structlog writes and adaptor pattern tail-forwarding to logstash The main product a responsive SPA learning platform with content from the UK focusing on raising awareness of bias, promotion of the benefits found in diversity and inclusion.

Doha, Qatar

DevSecOps, Lead Architect, SRE Lead for the National Controls and Data Centre project at Kahramaa (National Water Utilities Corporation Qatar). Responsible for the overall program, including budget, design, and delivery in addition to hands on technical lead. Key achievements included designing, testing, and deploying a hardened set of control services for the national water corporation. ● Secure hardening and protection in depth of national water utility● Automated deployment, policy configuration of SCADA Tofino Modbus/TCP PLC firewalls to all industrial control cabinets ● Firewall Policy testing, assurance, automated monitoring, updatingZero-day update automation ● Pen-test and security audit ● Centralised Security Information Even Management (SIEM) deployment and configuration of AlienVault OSS USM across all utility networks● Fortinet FW, Juniper FW, VPN, IDS configuration, deployment, integration between circuits ● Multi-Site VSphere Enterprise with load-balancing, v-motion resilience, off-site automated snapshot backups.

Doha, Qatar

Joined as tech lead/SME, for a transformation secure infrastructure project across the Salam conglomerate, I was later seconded as Head of IT by the customer. As the Head of IT service for eight major and all minor companies, I was responsible for improving corporate back-end services and facilitating and supporting company needs and other internal programmes.In parallel I was responsible for the technical delivery of a Secure Infrastructure refresh, roll-out, and migration across the $8B conglomerate, reporting to COO.The focus was on protecting corporate intellectual property, migration to central policy-based topology, and strong authentication to the network and network services.Technologies designed, deployed included. ● Cisco USC blade configuration, automated resilience, burstable compute, migration, multi-site resilience. ● Automated desktop refresh from W7, W8, Wvista to W10 EntMigration from LDAP/Solaris mail to AD/Exchange/Outlook● Creation of AD policy, enterprise wide● 802.1x network authentication ● Establish Log, Capacity, Threat, Incident observability tooling, wrapped into service management process and procedures

Derbyshire, England, United Kingdom

I held the position of Technical Project Manager, Lead Technical Architect, and Engineer in Rolls Royce. This role was within a project Shiftpoint PLC were delivering into Rolls RoyceAs Technical Project Manager, I was responsible for managing the technical delivery plan, budget, team availability, and overall delivery of the Secure Remote Office project. As a hands on role I led design, assurance, approval, and delivery of a highly secure 802.1x network, encrypted strongly authenticated storage, and VPN integration product for deployment into countries of concern, such as Russia. In addition, I managed a technical team of 8 and provided training on build and commissioning.The successful implementation of this project was delivered within budget, on time, and across 17 EMEA countries. The product became a standard reference architecture within Rolls-Royce. As a result the company went on to deploy this product across the USA region.

London, England, United Kingdom

As the Lead UNIX engineer for the solution, I was responsible for overseeing all aspects of the platform, including design, build activities, J2EE application packaging and deployment. I was assigned complex integration issues for resolution, as well as build tasks.The team efforts resulted in a highly successful implementation for Bupa

London, England, United Kingdom

Worked into E-Borders Automated Application Deployment/UNIX Engineer. As part of a small core team, we successfully turned around platform delivery for the E-Borders project replacing an existing delivery team. This achievement led to our winning the ongoing application delivery and deployment work and the 4th line support for the service organization.My core contributions included implementing secure and repeatable builds, automation across the UNIX estate, and debugging challenging technical issues. I was also responsible for conducting technical testing.The DC was classified as top-secret and builds were highly secure. ● Large RedHat deployments utilising automated Kickstart process / configuration● Multi-Vendor back-to-back FW, LB, IDS, IPS configuration as code via API itegration ● All Switch, Router, Core zones, rules, spans, filters, configuration software defined and deployed automatically from TFTFurther outside of E-Border project I provided technical and delivery assistance to other projects within Serco, demonstrating versatility and adaptability to new challenges.

Leeds, England, United Kingdom

As a Technical Design Authority for the national Change For Health programme, I was responsible for overseeing the Ready For Operations non-functional testing. In this role, I ensured that Site Reliability testing encompassed various aspects, such as resilience, recovery, security, regression, access-control, and repeatability. Additionally, I took a comprehensive approach to ensure the service organization was prepared for the product. This involved activities like monitoring, capacity visibility, training, and incident operations, beyond the scope of product testing.

Extensive experience as a Senior Unix Engineer, Technical Architect, Delivery Manager. I joined IOKO to deliver, and support EMI/Capital Records' new media platform, which served many tens of record labels and hundreds of artists. I progressed to work into BSkyB an IOKO client and there won new work for IOKO.During my tenure, I made contributions to the organization's growth and success by mentoring and appraising staff, leading technical teams by example, and performing Solaris and Linux migrations. I took part in winning new work through tenders.IOKO was a young, technically exceptional company, and I was fortunate to contribute to its deliveries and gain exposure to various technologies and delivery projects.Technologies included: Apache, Mysql, Postgres, Redhat, Debian, Cisco, F5, Solaris, J2EE, Exim. SNMP and Nagios monitoring. Autmation included Kickstart, Jumpstart, TFTP network configuration

Kidsgrove, England, United Kingdom

• SunOS, Solaris Sys-V, Linux Build and Service Engineer• As a mentored Unix Engineer, later Linux, worked in a small team that built and maintained ISPs and Virtual ISPs in Britain and the Netherlands.• The stack primarily used SysV Solaris with some older SunOS Unix for CRM and billing applications, along with Redhat 5.2 for MTAs, Bind DNS, User FTP, and Web accounts.• Network configuration was across Cisco switch and Firewall, and their Local directors for Load Balancing.• Responsible for the entire stack and life-cycle, this role was particularly formative as it was prior to the separation of engineer disciplines. As part of the "IT Team," handled sizing, stacking, building, configuring, connecting, securing, and maintaining the entire stack.