• Designed and implemented a CI (Continuous Integration) pipeline built on GitHub and Jenkins involves creating an automated workflowthat integrates code changes, performs tests, and delivers reliable builds.• Improved the DevSecOps pipelines by integrating security scanning.• Built the Kubernetes operator system involves developing a custom controller that manages the lifecycle of Kubernetes applications. Theoperator system automates the packaging, deployment, and management of these applications.• Designed and implemented IaaS/PaaS/SaaS on Azure, AWS and GCP.• Designed and implemented the APM cloud platform built on Kubernetes/Docker/Helm/Chart/Terraform.• Designed and implemented snapshot and restore functions built on Cronjob.• Auto-scaling in a hybrid cloud environment (AWS, Azure, GCP, OpenShift) to dynamically adjust the allocation of computing resourcesbased on the workload demand.• Upgraded Helm2 to Helm3 in the production environment without downtime.• Set up monitoring system and logging system: Datadog, Log DNA, Elastic- Search, Jaeger, etc.• Designed and implemented disaster recovery environment.• Designed and implemented cert management system: SSL certificates using cert-manager and Let's Encrypt.• Designed and implemented secret management system: HashiCorp Vault.• Designed and implemented CICD workflows: GitHub Actions and Argo CD.• Implemented multi-cloud deployment: Anthos Discovery.• Maintained Vertical, HDFS, Presto, Cloud SQL, Big Query, Snowflake etc.• Implemented big data ingestion, integration, and data automation tools and process.• Automated ETL process for cloud data warehouses: Big Query, Snowflake, Vertica.• Designed and implemented next generation CICD pipeline based on Circle CI, Argo CD, Cross plane.• Lead SRE team and played a crucial role in bridging

• Designed and implemented the scheduler, executor, resource computing functions built on Kubernetes, Mesos, Docker to manage andallocate computing resources efficiently.• Designed and implemented service discovery, metric collector, Log centre functions.• Designed and implemented network bandwidth limitation function for isolating hybrid cloud environments.• Implemented Redis cluster as a service platform built on Mesos and Golang.• Set up the distributed file system using Ceph and Gluster FS for log storage.• Designed and implemented the DAG Flow module for creating a system that can execute and manage Directed Acyclic Graphs (DAGs).• Designed and implemented an AI platform that offers TensorFlow as a service on Marathon, Mesos, Kubernetes, Python, Django, andCelery to create a robust and scalable platform.• Maintained the hybrid cloud environment involves managing and optimizing resources across multiple cloud providers such as AWS,Azure, and GCP.

• Designing and implementing an intelligent cloud platform involves creating a comprehensive architecture and implementing the necessarycomponents to enable intelligent services and capabilities.• Implemented configuration management tools such as Ansible and Puppet to automate and streamline the configuration of systems andinfrastructure.• Set up the distributed file system by Ceph, Gluster FS.• Implemented a DevOps platform built on Mesos and Kubernetes.• Optimized the performance of the connection between container instances to enhance overall system efficiency.• Implemented disaster recovery system, logging system and alert system.• Developed DevOps tools, e.g.: rolling update, scale up, scale down.• Set up the monitor system using Heapster, Prometheus, Grafana.• Lead a team of developers to deliver a cloud platform within a tight timeline of 5 months.• Worked closely with designers and project managers, collaborating on planning, and troubleshooting activities to ensure smooth projectexecution.

Project: Platform for GatewayAs an IoT (Internet of Things) production, Wind River Platform for Gateways provides original equipment manufacturers (OEMs) and originaldesign manufacturers (ODMs) a pre-integrated, fully supported reference platform to create products that aggregate and manage devices and servicesat the network edge.Responsibilities:• Implemented networking features: Firewall, Whitelist, Blacklist, Layer 2/3 network packet filter, NAT, DDOS, IPSec, L2TP, GRE, IPv6,IGMP, QoS, VLAN. (Operation System: Wind River Linux 4.3; ARM)Project: IoT Home GatewayThe Wind River IoT Home Gateway is a commercial grade Linux development platform for original equipment manufacturers (OEMs) to launchsmart services that take advantage of cloud computing.Responsibilities:• Implemented Connection Daemon: It monitors all the types of connection (Ethernet/3G/Wi-Fi) for network traffic controlling and autoswitching.• Implemented Security: It allows the system administrator to define a least privilege policy for the system, in which every process and userhas only the lowest privileges needed to function.• Implemented mobile app features: 3G Connection: SIM Card Control, phone book management, SMS/ MMS management, IPv6 over IPv4Tunneling. Operation System: Wind River Linux 5.0; x86

• Implemented remote access module: A Home-to-Home (H2H) connection is bidirectional which means that all UPnP devices in bothnetworks are replicated to the other network. The VPN between the two Connected Home Gateways makes use of IPSEC in tunnel mode.• Maintaining the TCP/IP stack in the kernel space of Broadcom involves working with the network drivers and firmware specific toBroadcom's hardware.• Implemented a firewall module between the Local Area Network (LAN) and the Wide Area Network (WAN) to protect the network fromunauthorized access and potential threats. (Operation System: Linux Ubuntu 8.04, Kernel version: 2.6.21.5)• Implemented a TCP/IP stack for embedded security modules to handle Denial of Service (DoS) Defence and developed softwarecomponents that handle the TCP/IP protocol suite and incorporated specific mechanisms to mitigate DoS attacks, such as TCP flood, UDPflood, ICMP flood, and TCP proxy.• Implemented NAT (Network Address Translation) and NAT server modules to protect private IPs and enable connectivity to publicnetworks.• Designed and implemented a blacklist module to drop network packets from source IP addresses listed in the blacklist to enhance networksecurity. Operation System: VxWorks 7.1; NP/RMI• Modified kernel modules of network protocol in Linux. (Linux Kernel Version: 2.4.31)• Implemented network packet monitoring system for the applications to enhance network security and performance. (Operation System:FreeBSD 4.3)