Eric Hoffmann

Eric Hoffmann Email and Phone Number

Innovator | Security Compliance, GitOps, DevSecOps, CI/CD, AWS @ Mainspring Energy
Menlo Park, California, United States
Eric Hoffmann's Location
San Francisco Bay Area, United States, United States
Eric Hoffmann's Contact Details

Eric Hoffmann work email

Eric Hoffmann personal email

Eric Hoffmann phone numbers

About Eric Hoffmann

Automation. Testing. Security. That pretty much sums up my career, oh and Music. I started my professional career as a musician in the USMC. I always felt the contrast between the formality of taking orders as a Corporal vs the freedom of expression as a musician was an odd match. But, I think it parallels my career with software as well. Quality Assurance and Cloud Security are also a mixture of rigid specifications vs being creative enough to break software in unexpected ways to find the really important bugs. Turns out I have a knack for that.I think testing is the glue between good automation and good security. I feel fortunate that I’ve found companies that have allowed me to pursue my passions with automation, testing and security all while building some great infrastructure to boot.

Eric Hoffmann's Current Company Details
Mainspring Energy

Mainspring Energy

View
Innovator | Security Compliance, GitOps, DevSecOps, CI/CD, AWS
Menlo Park, California, United States
Employees:
511
Eric Hoffmann Work Experience Details
  • Mainspring Energy
    Mainspring Energy
    Menlo Park, California, United States
  • Lyell Immunopharma
    Staff Software Engineer, Devsecops
    Lyell Immunopharma Jan 2023 - Present
    South San Francisco, Ca, Us
    Continue to manage and foster a highly performant, world class DevSecOps team.* Expand GxP strategy to include standard operating procedures (SOP) documentation and enforcement of continuous integration SOPs using GitHub actions and checks* Reduced overall AWS, security and alerting expenditures by an average $40,000 a month* Streamline engineering proposals using markdown template, marp and pull request process* Implemented test libraries using OpenAI prompts to expand GxP qualification framework* Built Amazon Q web experiences with corporate datasources for Gen AI proof-concept proposals* Implemented Few-shot prompt GenAI solution for Chef-Inspec testing libraries to support GxP requirements.* Designed LLM GenAI testing solution using DeepEval and Python to evaluate different AWS Bedrock models against metrics like relevancy, hallucination and bias.
  • Lyell Immunopharma
    Staff Software Engineer, Devsecops
    Lyell Immunopharma Jan 2022 - Dec 2022
    South San Francisco, Ca, Us
    Our “Analytics Control Tower” platform was showcased on stage at AWS Re:Invent Dec 2022 with Lyell being the first life-sciences company asked to present during a keynote. * Empowered the DevSecOps team to release 250+ product releases to production* Implement GxP IQ/OQ qualification tests for Moda-EM software’s infrastructure, qualifying RDS, AWS-Backup, EC2, ALB and WorkSpaces* Add Clinical Research Organization (CRO) S3, IAM role supporting infrastructure* Implement Clinical Data Analytics Platform (CDAP) infrastructure including AWS Transfer Family, S3, FSx, Storage Gateway and EC2* Add GxP IQ/OQ qualification tests for CDAP infrastructure* Incorporate GxP Validated AMI into CDAP infrastructure, add supporting IQ/OQ qualification tests* Implemented PagerDuty on-call program for DevSecOps and Software Engineering teams* Hired two more full-time DevSecOps engineers
  • Lyell Immunopharma
    Staff Software Engineer, Devsecops
    Lyell Immunopharma Oct 2021 - Jan 2022
    South San Francisco, Ca, Us
    Promoted to Manage DevSecOps team and three external consultant teams. Architect GxP qualification strategy for AWS infrastructure reducing qualification and validation efforts by 90%. This strategy qualifies AWS infrastructure on a per-commit basis, automatically generating configuration specification and IQ/OQ reports for every change.* Manage AWS consultants, design and architect GxP qualification strategy for AWS infrastructure leveraging ECS, Lambda, Dynamodb, S3 and Chef Inspec* As hiring manager, craft job description, coding challenge and decision process resulting in highly productive development based DevSecOps hires* Introduce end-to-end testing strategy for AWS infrastructure using Chef Inspec* Implemented GxP IQ/OQ qualification tests for “bedrock infrastructure”, qualifying VPC, Route53, AWS Secrets, IAM roles, CloudTrail and RAM* Implement Container image security scanning as part of CodeBuild CI/CD pipeline with Developer managed exception support* Implemented cross-account s3 replication* Enhance security program by implementing checkov and gitleaks as default pre-commit checks
  • Lyell Immunopharma
    Software Engineer, Devsecops
    Lyell Immunopharma Jan 2020 - Oct 2021
    South San Francisco, Ca, Us
    Roll out AWS EKS strategy, CI/CD platform and continue to standardize Engineering-wide processes and tooling.* Lead and implement Cloud Security Platform evaluation, selection and purchase process* Present EKS strategy to AWS team at Re:Invent* Lead the creation of Engineering principles document w/Software and DevSecOps engineers* Design and architect nightly docker base-image CI/CD pipeline to ensure patched images* Implement CI for EKS clusters leveraging IAM roles for service accounts, Helm, Terraform, kuttl and flux* Create one-liner “dockerize” wrapper to build, test, tag and push docker images leveraging goss, checkov and other security checks* Create one-liner “k8s” wrapper to build, test, deploy EKS apps leveraging template manifests, kustomize, kubeval, kubesec and flux* Created template git repository to enable Software Engineering team to build, test and deploy EKS based apps within 1/2day* Created CodeBuild Terraform module and continuous deployment branching strategy* Rollout “ops-tasks”, a standardized gotask framework to share, manage and automate 20+ operational tools* Automate documentation for “ops-tasks” tasks and Terraform modules* Automate IAM policy creation for CodeBuild roles based on a projects Terraform configs
  • Lyell Immunopharma
    Software Engineer, Devsecops
    Lyell Immunopharma Sep 2019 - Jan 2020
    South San Francisco, Ca, Us
    Begin Engineering-wide foundations for continuous integration/deployment best practices for AWS infrastructure* Standardized on using Terraform to create and manage git repositories w/governance enabled by default* Introduce unit testing with Chef Inspec to DevSecOps team* Introduce pre-commit hooks as baseline for overall testing strategy* Introduce gotask as Engineering wide replacement for Makefiles. Adds one-liner wrapper tasks with dependency, installation and testing support.* Add dad-joke task, because reading log files should elicit smiles and smirks* Create “bedrock” AWS account infrastructure such as VPC, S3 buckets and default IAM roles using Terraform
  • Tigera, Inc.
    Senior Engineering Manager, Quality Engineering & Operations
    Tigera, Inc. Aug 2017 - Sep 2019
    San Francisco, Ca, Us
    Established and nurtured a DevSecOps-centric CI/CD culture within the Quality Engineering team, overseeing the transformation of the CI system into infrastructure-as-code to accommodate the expanding Development team. Demonstrated effective collaboration with local and UK-based Developers, strategically expanding and overseeing testing initiatives for significant software releases. Held a pivotal role in Engineering Leadership and Management, contributing to the successful implementation of key DevOps principles.Technical Leadership* Instilled a DevOps CI/CD culture in Quality Engineering to support a growing Software team, simplifying the management of 400+ Jenkinsfiles.* Rebuilt Jenkins system as infrastructure-as-code (IaC) using Kubernetes in GKE allowing for continuous improvement and reliability of the CI platform.* Managed testing effort for new K8s product which integrates with AWS CloudWatch, FlowLogs, RDS, ELB, VPC and Security Groups.* Manage all aspects of release testing/validation for monthly Calico releases and quarterly Tigera Secure Enterprise Edition.* Built ties with local and UK teams to broaden and oversee software release testing.* Managed day-to-day operations and hiring of Quality Engineering team.Security Leadership* Implemented CVE scans of Tigera's docker images using ClairOS and klar as part of their CI/CD pipelines.* Developed a unified installer for kops and EKS based clusters to ease testing of security features integrating with AWS VPCs, flowlogs and Security Groups.Compliance Leadership* Led the evaluation, selection, purchasing and implementation of FOSSA, managing open-source risk and protecting software against license violations, vulnerabilities, and supply chain threats.
  • Cloudpassage
    Principal Automation Engineer
    Cloudpassage Jul 2016 - Aug 2017
    San Francisco, California, Us
    Led the development of a team of early adopters, initiating Engineering-wide process enhancements that effectively minimized deployment time with fewer issues. Transformed the automation engineering team, originally composed of manual testers and interns, into prominent thought leaders and highly sought-after staff across Engineering.
  • Cloudpassage
    Director Of Qa
    Cloudpassage Jan 2014 - Jul 2016
    San Francisco, California, Us
    * Managed overall recruiting efforts for QA team with Jobvite and external recruiters* Grew team to 8 full-time automation engineers with onshore outsourcing expansion* Set quarterly goals, objectives, and priorities for QA team members and assigned daily/weekly work activities for the team* Implemented execution of Flood.io performance testing framework as Jenkins jobs to simulate up to 25k agent payloads* Lead and facilitate daily triage meetings with Directors of Development, DevOPS and Product teams
  • Cloudpassage
    Sr. Software Qa Engineer
    Cloudpassage Feb 2012 - Jan 2014
    San Francisco, California, Us
    * Created QA training program for incoming junior engineers and interns* Owned testing cycle for new features from exploratory testing, to bug escalation to developing automated tests and helpers* Created production-deploy smoke test suite and implemented 22% of all tests and helpers* Designed, developed QA's automation framework using rake, minitest and selenium-webdriver for regression suites
  • Ncircle - A Tripwire Company
    Qa Manager, Saas/Product Release Manager
    Ncircle - A Tripwire Company Jan 2010 - Feb 2012
    Defined QA processes when needed, adopted from acquisitions when appropriate. Created innovative test lab to validate 250K host network requirements.Roles / Responsibilities:* Created and completed functional and regression tests across all aspects of the PCI ScanService, Benchmark and PureCloud SaaS products* Created Selenium based regression tests against Benchmark and PureCloud products* Defined HW requirements for nCircle’s acceptance lab for performing acceptance tests of Suite360 releases spanning multiple Engineering teams (IP360, CCM, SIH)
  • Ncircle - A Tripwire Company
    Qa Team Lead/Qa Engineer
    Ncircle - A Tripwire Company Jan 2002 - Jan 2010
    * Trained and mentored 4 QA engineers* Created and completed functional and regression tests across all aspects of the IP360 product* Automated creation of test plans and test result summaries through the Confluence API based on IEEE 730 standards* Defined and created IP360's performance benchmark suite of tools to validate functional requirements to scan 250,000 fully interactive host environments (VM’s, HW, honeyd)* Completed protocol analysis and created new application detection rules for ntp, Kazaz, http, (ethereal, netcat, telnet)
  • Ncircle - A Tripwire Company
    Solutions Engineer
    Ncircle - A Tripwire Company Jan 2001 - Jan 2002
    * Scoped and managed deployments at Patelco, Morgan Stanley Online, Hartford, Pillsbury Winthrop* Team lead for Visa's IDS pilot - nCircle's Traffic Monitor product comparison to Enterasys Dragon (Spirent smartbits)* Provided technical support and product expertise to Sales rep during customer meetings
  • Marine Corps Recruiting
    Musician, Fire Team Leader, Transportation Assistant
    Marine Corps Recruiting Nov 1992 - Jan 1997
    Washington, Dc, Us
    Successfully coordinated storage and transportation logistics for 50+ musicians for up to 500 performances a year. Forged a foundation of leadership-by-example management principles.Roles / Responsibilities:* Supervised, trained, scheduled and issued performance reviews for 15 Marines* Prepared and implemented Standard Operating Procedures for equipment and $650,000 instrument inventory* Responsible for instrument transport and storage logistics when traveling to remote performances* Managed remedial physical fitness training program including weight management and counseling

Eric Hoffmann Skills

Network Security Ips Computer Security Vulnerability Assessment Pci Dss Firewalls Penetration Testing Information Security Freebsd Security Vulnerability Management Software Quality Assurance Ruby Python Cloud Computing Ids Information Security Management Quality Assurance Saas Virtualization Intrusion Detection Internet Security Identity Management Application Security Unix Cloud Security Linux Enterprise Software Agile Methodologies Testing Software Development Veterans Software As A Service Internet Protocol Suite Docker Apache Mesos Git

Eric Hoffmann Education Details

  • College Of Marin
    College Of Marin
    Computer Information Systems Microcomputer Programmer Specialty

Frequently Asked Questions about Eric Hoffmann

What company does Eric Hoffmann work for?

Eric Hoffmann works for Mainspring Energy

What is Eric Hoffmann's role at the current company?

Eric Hoffmann's current role is Innovator | Security Compliance, GitOps, DevSecOps, CI/CD, AWS.

What is Eric Hoffmann's email address?

Eric Hoffmann's email address is er****@****ail.com

What is Eric Hoffmann's direct phone number?

Eric Hoffmann's direct phone number is +141588*****

What schools did Eric Hoffmann attend?

Eric Hoffmann attended College Of Marin.

What skills is Eric Hoffmann known for?

Eric Hoffmann has skills like Network Security, Ips, Computer Security, Vulnerability Assessment, Pci Dss, Firewalls, Penetration Testing, Information Security, Freebsd, Security, Vulnerability Management, Software Quality Assurance.

Who are Eric Hoffmann's colleagues?

Eric Hoffmann's colleagues are Afroditi Georgiadi, Aaron Morrissey (Pmp)®, Kristin Hartsfield, Alberto Rivera, Alfredo Vazquez, Manvir Bal, Dennis Davis.

Free Chrome Extension

Find emails, phones & company data instantly

Find verified emails from LinkedIn profiles
Get direct phone numbers & mobile contacts
Access company data & employee information
Works directly on LinkedIn - no copy/paste needed
Get Chrome Extension - Free

Aero Online

Your AI prospecting assistant

Download 750 million emails and 100 million phone numbers

Access emails and phone numbers of over 750 million business users. Instantly download verified profiles using 20+ filters, including location, job title, company, function, and industry.