Eric Hoffmann Email & Phone Number

Menlo Park, California, United States

South San Francisco, Ca, Us

Continue to manage and foster a highly performant, world class DevSecOps team.* Expand GxP strategy to include standard operating procedures (SOP) documentation and enforcement of continuous integration SOPs using GitHub actions and checks* Reduced overall AWS, security and alerting expenditures by an average $40,000 a month* Streamline engineering proposals using markdown template, marp and pull request process* Implemented test libraries using OpenAI prompts to expand GxP qualification framework* Built Amazon Q web experiences with corporate datasources for Gen AI proof-concept proposals* Implemented Few-shot prompt GenAI solution for Chef-Inspec testing libraries to support GxP requirements.* Designed LLM GenAI testing solution using DeepEval and Python to evaluate different AWS Bedrock models against metrics like relevancy, hallucination and bias.

South San Francisco, Ca, Us

Our “Analytics Control Tower” platform was showcased on stage at AWS Re:Invent Dec 2022 with Lyell being the first life-sciences company asked to present during a keynote. * Empowered the DevSecOps team to release 250+ product releases to production* Implement GxP IQ/OQ qualification tests for Moda-EM software’s infrastructure, qualifying RDS, AWS-Backup, EC2, ALB and WorkSpaces* Add Clinical Research Organization (CRO) S3, IAM role supporting infrastructure* Implement Clinical Data Analytics Platform (CDAP) infrastructure including AWS Transfer Family, S3, FSx, Storage Gateway and EC2* Add GxP IQ/OQ qualification tests for CDAP infrastructure* Incorporate GxP Validated AMI into CDAP infrastructure, add supporting IQ/OQ qualification tests* Implemented PagerDuty on-call program for DevSecOps and Software Engineering teams* Hired two more full-time DevSecOps engineers

South San Francisco, Ca, Us

Promoted to Manage DevSecOps team and three external consultant teams. Architect GxP qualification strategy for AWS infrastructure reducing qualification and validation efforts by 90%. This strategy qualifies AWS infrastructure on a per-commit basis, automatically generating configuration specification and IQ/OQ reports for every change.* Manage AWS consultants, design and architect GxP qualification strategy for AWS infrastructure leveraging ECS, Lambda, Dynamodb, S3 and Chef Inspec* As hiring manager, craft job description, coding challenge and decision process resulting in highly productive development based DevSecOps hires* Introduce end-to-end testing strategy for AWS infrastructure using Chef Inspec* Implemented GxP IQ/OQ qualification tests for “bedrock infrastructure”, qualifying VPC, Route53, AWS Secrets, IAM roles, CloudTrail and RAM* Implement Container image security scanning as part of CodeBuild CI/CD pipeline with Developer managed exception support* Implemented cross-account s3 replication* Enhance security program by implementing checkov and gitleaks as default pre-commit checks

South San Francisco, Ca, Us

Roll out AWS EKS strategy, CI/CD platform and continue to standardize Engineering-wide processes and tooling.* Lead and implement Cloud Security Platform evaluation, selection and purchase process* Present EKS strategy to AWS team at Re:Invent* Lead the creation of Engineering principles document w/Software and DevSecOps engineers* Design and architect nightly docker base-image CI/CD pipeline to ensure patched images* Implement CI for EKS clusters leveraging IAM roles for service accounts, Helm, Terraform, kuttl and flux* Create one-liner “dockerize” wrapper to build, test, tag and push docker images leveraging goss, checkov and other security checks* Create one-liner “k8s” wrapper to build, test, deploy EKS apps leveraging template manifests, kustomize, kubeval, kubesec and flux* Created template git repository to enable Software Engineering team to build, test and deploy EKS based apps within 1/2day* Created CodeBuild Terraform module and continuous deployment branching strategy* Rollout “ops-tasks”, a standardized gotask framework to share, manage and automate 20+ operational tools* Automate documentation for “ops-tasks” tasks and Terraform modules* Automate IAM policy creation for CodeBuild roles based on a projects Terraform configs

South San Francisco, Ca, Us

Begin Engineering-wide foundations for continuous integration/deployment best practices for AWS infrastructure* Standardized on using Terraform to create and manage git repositories w/governance enabled by default* Introduce unit testing with Chef Inspec to DevSecOps team* Introduce pre-commit hooks as baseline for overall testing strategy* Introduce gotask as Engineering wide replacement for Makefiles. Adds one-liner wrapper tasks with dependency, installation and testing support.* Add dad-joke task, because reading log files should elicit smiles and smirks* Create “bedrock” AWS account infrastructure such as VPC, S3 buckets and default IAM roles using Terraform

San Francisco, Ca, Us

Established and nurtured a DevSecOps-centric CI/CD culture within the Quality Engineering team, overseeing the transformation of the CI system into infrastructure-as-code to accommodate the expanding Development team. Demonstrated effective collaboration with local and UK-based Developers, strategically expanding and overseeing testing initiatives for significant software releases. Held a pivotal role in Engineering Leadership and Management, contributing to the successful implementation of key DevOps principles.Technical Leadership* Instilled a DevOps CI/CD culture in Quality Engineering to support a growing Software team, simplifying the management of 400+ Jenkinsfiles.* Rebuilt Jenkins system as infrastructure-as-code (IaC) using Kubernetes in GKE allowing for continuous improvement and reliability of the CI platform.* Managed testing effort for new K8s product which integrates with AWS CloudWatch, FlowLogs, RDS, ELB, VPC and Security Groups.* Manage all aspects of release testing/validation for monthly Calico releases and quarterly Tigera Secure Enterprise Edition.* Built ties with local and UK teams to broaden and oversee software release testing.* Managed day-to-day operations and hiring of Quality Engineering team.Security Leadership* Implemented CVE scans of Tigera's docker images using ClairOS and klar as part of their CI/CD pipelines.* Developed a unified installer for kops and EKS based clusters to ease testing of security features integrating with AWS VPCs, flowlogs and Security Groups.Compliance Leadership* Led the evaluation, selection, purchasing and implementation of FOSSA, managing open-source risk and protecting software against license violations, vulnerabilities, and supply chain threats.

San Francisco, California, Us

Led the development of a team of early adopters, initiating Engineering-wide process enhancements that effectively minimized deployment time with fewer issues. Transformed the automation engineering team, originally composed of manual testers and interns, into prominent thought leaders and highly sought-after staff across Engineering.

San Francisco, California, Us

* Managed overall recruiting efforts for QA team with Jobvite and external recruiters* Grew team to 8 full-time automation engineers with onshore outsourcing expansion* Set quarterly goals, objectives, and priorities for QA team members and assigned daily/weekly work activities for the team* Implemented execution of Flood.io performance testing framework as Jenkins jobs to simulate up to 25k agent payloads* Lead and facilitate daily triage meetings with Directors of Development, DevOPS and Product teams

San Francisco, California, Us

* Created QA training program for incoming junior engineers and interns* Owned testing cycle for new features from exploratory testing, to bug escalation to developing automated tests and helpers* Created production-deploy smoke test suite and implemented 22% of all tests and helpers* Designed, developed QA's automation framework using rake, minitest and selenium-webdriver for regression suites

Defined QA processes when needed, adopted from acquisitions when appropriate. Created innovative test lab to validate 250K host network requirements.Roles / Responsibilities:* Created and completed functional and regression tests across all aspects of the PCI ScanService, Benchmark and PureCloud SaaS products* Created Selenium based regression tests against Benchmark and PureCloud products* Defined HW requirements for nCircle’s acceptance lab for performing acceptance tests of Suite360 releases spanning multiple Engineering teams (IP360, CCM, SIH)

* Trained and mentored 4 QA engineers* Created and completed functional and regression tests across all aspects of the IP360 product* Automated creation of test plans and test result summaries through the Confluence API based on IEEE 730 standards* Defined and created IP360's performance benchmark suite of tools to validate functional requirements to scan 250,000 fully interactive host environments (VM’s, HW, honeyd)* Completed protocol analysis and created new application detection rules for ntp, Kazaz, http, (ethereal, netcat, telnet)

* Scoped and managed deployments at Patelco, Morgan Stanley Online, Hartford, Pillsbury Winthrop* Team lead for Visa's IDS pilot - nCircle's Traffic Monitor product comparison to Enterasys Dragon (Spirent smartbits)* Provided technical support and product expertise to Sales rep during customer meetings

Washington, Dc, Us

Successfully coordinated storage and transportation logistics for 50+ musicians for up to 500 performances a year. Forged a foundation of leadership-by-example management principles.Roles / Responsibilities:* Supervised, trained, scheduled and issued performance reviews for 15 Marines* Prepared and implemented Standard Operating Procedures for equipment and $650,000 instrument inventory* Responsible for instrument transport and storage logistics when traveling to remote performances* Managed remedial physical fitness training program including weight management and counseling