Lisa L. Email & Phone Number

• Designed and implemented a CI (Continuous Integration) pipeline built onGitHub and Jenkins involves creating an automated workflow that integratescode changes, performs tests, and delivers reliable builds.• Improve the DevSecOps pipelines by integrating security scanning.• Designed and implemented the Continuous Deployment (CD) platform forWindows and Linux services built on Kubernetes, Docker, Flannel, and etcdinvolves creating an automated workflow to deploy applications efficiently.• Designed and implemented the DevOps tools including rolling update, rollback,A/B testing, grey release, blue green deployment, red black deployment,etc.• Designed and implemented the log system built on Elasticsearch, Logstash,and Kibana (commonly referred to as the ELK stack) involves utilizing thesetechnologies for log management and analysis.• Building a Kubernetes operator system involves developing a custom controllerthat manages the lifecycle of Kubernetes applications. • Designed and implemented IaaS/ PaaS/ SaaS on Azure, AWS and GCP, Openshift• Designed and implemented the APM cloud platform built on Kubernetes/Docker/Helm/Chart/Terraform.• Implemented Security information and event management system (SIEM).• Designed and implemented devops tools: rolling update, rollback, scalingout, data migration, etc.• Upgraded Helm2 to Helm3 in the production environment without downtime.• Set up monitoring system and logging system: Datadog, LogDNA, Elastic-Search, Jaeger, etc.• Designed and implemented cert management system: SSL certificates usingcert-manager and Let's Encrypt.• Designed and implemented secret management system: HashiCorp Vault.• Designed and implemented CICD workflows: Github Actions and ArgoCD.• Maintained Vertical, HDFS, Presto, CloudSQL, BigQuery, Snowflake etc.• Implemented big data ingestion, integration, and data automation tools andprocess.• Automated ETL process for cloud data warehouses: BigQuery, Snowflake,Vertica.

Beijing, China

• Designed and implemented the scheduler, executor, resource computingfunctions built on Kubernetes, Mesos, Docker to manage and allocate computingresources efficiently.• Designed and implemented service discovery, metric collector, Log centrefunctions.• Designed and implemented network bandwidth limitation function for isolatinghybrid cloud environments.• Implemented Redis cluster as a service platform built on Mesos andGolang .• Set up the distributed file system using Ceph and GlusterFS for log storage.• Designed and implemented the DAGFlow module for creating a system thatcan execute and manage Directed Acyclic Graphs (DAGs).• Designed and implemented an AI platform that offers TensorFlow as a serviceon Marathon, Mesos, Kubernetes, Python, Django, and Celery to create arobust and scalable platform.• Maintained the hybrid cloud environment involves managing and optimizingresources across multiple cloud providers such as AWS, Azure, and GCP.

Project Name: Platform for GatewayAs an IoT (Internet of Things) production, Wind River Platform for Gatewaysprovides original equipment manufacturers (OEMs) and original designmanufacturers (ODMs) a pre-integrated, fully supported reference platformto create products that aggregate and manage devices and services atthe network edge.Responsibilities:• Implemented networking features: Firewall, Layer 2/3 network packetfiltering, NAT, DDOS, IPSec, L2TP, GRE, PPPoE, IPv6, IGMP, QoS,VLAN. Operation System: Wind River Linux 4.3; ARMProject Name: IoT Home GatewayThe Wind River IoT Home Gateway is a commercial-grade Linux developmentplatform for original equipment manufacturers (OEMs) to launch smartservices that take advantage of cloud computing.Responsibilities:• Implemented Connection Daemon: It monitors all the types of connection(Ethernet/3G/WiFi) for network traffic controlling and auto switching.• Implemented GRSecurity: It allows the system administrator to define aleast privilege policy for the system, in which every process and user haveonly the lowest privileges needed to function.• Implemented mobile app features: 3G Connection:SIM Card Control,phone book management, SMS/ MMS management, IPv6 over IPv4 Tunnelling.Operation System: Wind River Linux 5.0; x86

Project Name: IoT Connected Home GatewayResponsibilities:• Implemented remote access module: A Home-to-Home (H2H) connectionis bidirectional which means that all UPnP devices in both networksare replicated to the other network. The VPN between the two ConnectedHome Gateways makes use of IPSEC in tunnel mode.• Maintain the TCP/IP stack in the kernel space of Broadcom involvesworking with the network drivers and firmware specific to Broadcom'shardware.• Implemented a firewall module between the Local Area Network (LAN)and the Wide Area Network (WAN) to protect the network from unauthorizedaccess and potential threats.Operation System: Linux (Ubuntu 8.04, Kernel version: 2.6.21.5)Project Name: Eudemon 8000E FirewallThe E8000E adopts the architecture of independent control modules, interfacemodules, and service processing modules. Responsibilities:• Implemented a TCP/IP stack for embedded security modules to handle Denialof Service (DoS) defence and developed software components that handlethe TCP/IP protocol suite and incorporated specific mechanisms to mitigateDoS attacks, such as TCP flood, UDP flood, ICMP flood, and TCP proxy.• Implemented NAT (Network Address Translation) and NAT server modulesto protect private IPs and enable connectivity to public networks.• Designed and implemented a blacklist module to drop network packetsfrom source IP addresses listed in the blacklist to enhance network security.Operation System: Vxworks 7.1; NP/RMI

Project Name: Packer Filter & Monitor ToolAs the a network packet filtering tool built on the Netfilter architecture (LinuxKernel Version: 2.4.31), it intercepts network packets and provide visibilityinto their contents, allowing you to analyze and manage them. They cancapture network traffic, display packet information (such as source and destinationIP addresses, ports, protocols), and provide filtering capabilities to focuson specific packets of interest.Responsibilities:• Modified kernel modules of network protocol in Linux. (Linux KernelVersion: 2.4.31)Project Name: Network Analysis & Monitor SystemThe product I designed and implemented includes advanced network trafficanalysis capabilities. It enables the identification of network applications beingused by clients, providing insights into the types of applications and protocolsbeing utilized on the network. By analyzing network traffic, it helpsorganizations gain a better understanding of their network usage patterns,identify potential security risks, and optimize network performance. (e.g:MSN, QQ, and other STUN protocol applications)Responsibilities:• Implemented network packet monitoring for specific applications to enhancenetwork security and performance. Operation System: FreeBSD 4.3

Master Of Operational Research

Bachelor Of Computer Science And Technology