Ryan A. C. Email & Phone Number

Bozeman, Montana

Ongoing work with devops tooling (python3), internal api (ruby), public/internal api (kotlin), iOS (swift/objc), Android (kotlin/java) codebases. Tooling includes CFN, SQS, Terraform, ECS, GH Actions, EC2, Route53, Cloud Map, replicated S3, many more AWS technologies.- Implemented custom Cloud Map service discovery infrastructure for database service discovery using Lambda, CFN, python3, Route53.- Continued maintenance of custom certificate pinning in iOS and Android apps.Spare time: created injectlang config lang that allows storing encrypted secrets in git, ocaml, haskell, rust, Virtualization.framework and Rosetta2 on M1/M2.

Bozeman, Montana

Designed and implemented all cloud infrastructure for 9 month rewrite of product, including offline maps, map tile delivery, API, www marketing, and webmap end user application. Serving 400k+ monthly active users consuming 55k tiles per second with an availability of 99.9%. Blue/green deployment method used with Docker and Ansible on Google Cloud Platform. All apps are stateless, storing their state in our stateful services, such as MySQL and Redis. IPv4 and IPv6 both supported by all services. After more than 3 years in service, uptime (excluding third parties like Google Cloud) was 100%, unheard of in the industry.- vmtiles (openresty): designed and implemented backend service that is the authoritative source for vector and raster map tiles. Replaces Google Cloud Storage. Load tested to 30k req/sec with a 99p backend latency of 10ms, 50p latency of 5ms.- Tileserver (golang): designed and wrote service that is responsible for serving all raster and vector map tiles to more than 400,000 monthly active users. Supports JWT authentication and rate-limiting. Production traffic of up to 55k req/sec with a 99p backend latency of 150ms, 50p latency of 20ms.- ArcGIS: designed and built automation for autoscaling ESRI ArcGIS Server clusters in GCP that permits scaling to millions of users. This architecture differs from ESRI Cloud Builder in that it does not use NFS and thus does not have the Cloud Builder limit of 20 servers per cluster (about 400k users).- NAIP aerial (golang): designed storage system to process 60TB of NAIP aerial imagery using Google Bigtable and Google Cloud Storage (GCS). Wrote tools to concurrently transfer tiles from local disk to Bigtable and composite multiple county images from Bigtable to GCS.- Offline map service (Java): worked with developer on moving state to Redis so that service could autoscale; added JWT verification, custom metrics and json logging.- iOS app (Swift): added support for saving credentials in the Keychain

Bozeman, Montana

Worked on devops team to automate the deployment of front end servers in Amazon Web Services using SaltStack and Docker.Built physical access control system using HID pivCLASS and YubiKey NEO. To my knowledge, this was the first time anyone in the world had done a PIV based physical access control system with a YubiKey.Paper at http://blog.rchapman.org/posts/Yubikey_NEO_for_Physical_Access_Control/NYC network: worked on team to design new office network in NYC supporting several hundred users. IPv6 to desktop, 802.1X, Cisco AnyConnect VPN, BGPv4/v6, QoS, 10G collapsed core, user vlans based on role, intervlan ACLs, VPN to AWS VPCsIndividual contributions to NYC office project: Designed and implemented Cisco Service Discovery Gateway on core switch, allowing AppleTVs and other mdns devices to be discovered across vlans. Configuration takes security in mind, making sure only allowed devices and DNS names can be re-transmitted into specific VLANs. Set up internal Linux/openssl based certificate authority for 802.1X and VPN Designed and built servers with Linux KVM/openvswitch Site-to-site VPNs: built IPSEC tunnels between all offices and AWS VPCs using mix of Cisco ASA and Mikrotik RADIUS: designed and built redundant radius infrastructure using freeradius to authenticate wired/wireless/AnyConnect VPN clients DNS: designed and built redundant internal/external DNS infrastructure using dnsmasq. AWS Route 53 used for forward/reverse internal domains. Internal resolution traffic goes over the Amazon VPC IPSEC tunnel to protect it. Syslog: set up centralized syslog services WIFI: set up 802.1X WPA2-Enterprise EAP-TLS certificate based authenticationBozeman network: built 1G collapsed core for new office supporting up to 40 users using Juniper EX2200, Mikrotik CCR and Ruckus R710/vSZ.Developed process for converting tar.gz packages into signed debian .deb packages, which are distributed from a Debian repo serving only SSL traffic.

Bozeman, Montana

Oracle Service CloudWorked with Browser User Interface team in their effort to develop a new browser based user interface for the Oracle Service Cloud product. Automated the deployment of Oracle Database 12c so that it could be installed automatically. Provided systems help to the Performance, Scalability and Reliability (PSR) team. Wrote tool to automatically collect java statistics on memory usage (java_stats) of all WebLogic managed and admin server JVMs.

Bozeman, Montana

Oracle Service CloudWorked with team to automate the deployment of the Oracle Service Cloud environment. Dev and QA organizations frequently require new cloud environments to be created for new feature development and testing. This has been a time consuming task in the past, requiring two engineers three weeks to build. Now, it requires less than one day to build a new environment, with only an hour of engineering time.Sudo: created sudo_hooks, a plugin which provides access control over individual syscallsBuilt transparent https proxy. As part of Oracle standardization, we had to move to using proxy servers to connect to internet resources. Some applications in the RightNow cloud are not proxy aware, so on my own time, I built a transparent http/https proxy in Golang (available on GitHub). The proxy intercepts attempts to connect to internet http/https sites and forwards them to the corporate proxy. No data is decrypted by the transparent proxy, so the integrity of communications are not compromised. Later extended to include support for all tcp protocols.Development of Network Address Translation solution. At Oracle acquisition, we needed to NAT our address space into the Oracle address space. The most widely used solution is DNS split views served by ISC named. Unfortunately, that solution requires someone to manage two DNS zones, which leads to oversights and errors. To get around this, I modified the dnsmasq source code to rewrite DNS responses on the fly using NAT rules. This required 8 hours of coding and one hour of testing. It is still in use today, serving 3 million queries per day on the Oracle corporate network. After more than three years in production, it has had zero reported bugs.IPv6 environment: took IPv6 reference architecture and built the first complete IPv6 environment for development and testing of the RightNow product, including network, virtual machines, load balancers, memcache, db, and servers.

Bozeman, Montana

Bozeman, Montana

Clone queue: Worked on team to build a queuing system that copied customer sites from one geographic datacenter to another. A graphical interface provided a way for users to add sites to the queue and see progress. I wrote the daemon portion that pulled jobs off the queue, performed the copy of the site from the remote datacenter and then restored the site, including mysql database. One key feature of the system is progression. As jobs move through the system, their state is recorded and can be resumed after a reboot.

Bozeman, Montana

XML testing tool: after realizing that the frontline technical support staff had no ability to troubleshoot web services incidents, wrote a multithreaded GUI C# program that, given a URL and XML payload provided by the customer, would submit the query to the production site and show the response in the GUI.All clusters access: frontline support was not able to have more than one cluster of the LexisNexis Bridger Insight product installed at a time, meaning that if a customer had an incident on cluster 2, it required the agent to uninstall all clusters and then install cluster 2 in order to troubleshoot the issue. I wrote a script in PowerShell that allowed agents to install all clusters of the product, reducing resolution time for incidents.

Valdosta, Georgia

Provided design and maintenance of IT infrastructure for clients. Evaluated and recommended software, created software interfaces, designed and implemented small LANs and WANs using Cisco IOS, including IPSEC and SSL VPNs.Software: provided triage and communicated with clients and developer on incidents found in the fieldIPSEC VPN: for several clients, designed and implemented the ability for remote offices and agents to sign in remotely to main offices, providing full network connectivity. This was done using Cisco IOS products.

Valdosta, Georgia

Oversight of IT initiative for enterprise of 300 employees and 50 locations.Projects:-Project manager and software developer, migration of accounting and property management system to Timberline (now Sage) and Rent Roll, Inc. (now RealPage). After it was determined that the software in use at the time was not year 2000 compliant, I initiated a project to migrate to a different solution. Provided coordination and information to groups, such as management, accounting, and operations to ensure a smooth migration path. Contracted with Professional Services from Rent Roll and Timberline for installation and initial configuration. In the two cases where solutions were not available from third party vendors, wrote software to solve the problems in question. The first was a software stack to transport daily transaction data from remote sites to headquarters (HQ), written in a mix of C and Bash scripts, running on Linux and MS-DOS. Also included in this stack was automatic pushing of software and policy (e.g. chart of accounts) updates from HQ to remote sites daily. The second was a program to convert transaction data from the Rent Roll system to the Timberline Accounting package. Perl was used to solve this problem.-Project manager and network engineer, internet access to all remote sites. To cut telecom and data costs, initiated a project to install internet at all remote locations. Designed and installed Cisco Virtual Private Networks from all remote sites to headquarters.-Project manager, virtual private network to partner. After an audit of telecom bills, I found that the company was spending $30,000 per year on connectivity to a partner site. Oversaw the transition from to an internet VPN to the partner, saving the company $26,000 per year.

Valdosta, Georgia

Administration of servers and networks, provided help desk services, built interfaces between client programs and accounting software using C and Perl.