04 / cv

Curriculum vitae.

Name Nicholaus Suprapto
Title Associate DevOps Engineer · IBM
Based Toronto, ON
Updated May 2026
01 / experience
Aug 2025 — present

Associate DevOps Engineer · Real-Time Rail

IBM · embedded with Payments Canada
  • Managed ArgoCD / OpenShift GitOps across 12 clusters, with 2 management instances each governing a set of datacenters, enabling GitOps-driven delivery for C&S and Exchange workloads across 16 environments.
  • Standardized and maintained CI/CD pipelines across 16 environments, including snapshot and release pipelines for C&S teams and per-environment CD pipelines for both C&S and Exchange.
  • Migrated and rebuilt CloudBees CI Jenkins from IBM Cloud to on-premises OpenShift using CasC, deploying in an active-passive configuration across 2 management clusters.
  • Deployed and configured Kong Gateway (Control Plane and Data Plane) on OpenShift; built a custom plugin image pipeline; implemented Kong Deck config-as-code for version-controlled API infrastructure.
  • Deployed ActiveMQ (AMQ) Broker via OpenShift operators, configuring Queue Federation and Mirroring across pre-production and production for cross-site message persistence.
  • Installed and configured EDB PostgreSQL with synchronous commits between datacenters to achieve RPO=0 across production environments.
  • Deployed CockroachDB as pods across the cluster fleet as part of the distributed data layer.
  • Integrated LDAP (Red Hat Directory Server) with Artifactory, AMQ, Kong Gateway, and EDB PostgreSQL for centralized identity and access management.
  • Engineered a Zero-Trust network model using OpenShift Network Policies for microsegmentation and Istio Service Mesh to enforce mTLS across all in-mesh microservices.
  • Installed HashiCorp Vault operator across all clusters, configuring Kubernetes auth methods and managing 17 namespaces with automated certificate lifecycle management via the PKI engine.
  • Deployed F5 CIS operators to provision Virtual IPs for platform components, collaborating with CGI's network team to define and validate network flows.
  • Instrumented all platform components with Dynatrace via ActiveGate for metrics collection across the full cluster fleet.
  • Configured backups for all platform components using Nooba storage connected to the SAN.
  • Supported resiliency, performance, and functional testing — including 300 TPS load tests and 36-hour soak tests — serving as the platform layer interface between development, QA, and infrastructure teams.
OpenShiftArgoCDCloudBees CIKongAMQEDB PostgreSQLCockroachDBVaultIstioF5 CISDynatraceNooba
Jul — Aug 2025

Associate DevOps Engineer · Release Mgmt Remediation

IBM · Wires Services
  • Led a compliance-driven decommission of the Wires Services Jenkins instance, migrating CI/CD infrastructure to IBM One Pipeline (1PL) — a Tekton-based framework — across development, platform, QA, and operations teams.
  • Migrated 40+ Jenkins pipelines to IBM One Pipeline, covering PR, CI, and CD pipelines across Stage, QA, and Production.
  • Connected IBM Cloud CD instances to AWS accounts to support deployment of CloudFormation infrastructure and Lambda-based microservices.
  • Reduced pipeline execution time by up to 3× by enabling concurrent stages for code scanning, vulnerability checks, and compliance, and optimizing base image sizes.
  • Migrated base images from AWS ECR to IBM Cloud Container Registry, remediating vulnerabilities surfaced by automated scanning.
  • Implemented RBAC to enforce access control across pipeline resources.
IBM One PipelineTektonJenkinsAWSCloudFormationIBM Cloud
Jan — Apr 2025

Cloud Engineer · Student-On-Call

IBM · Payments Center
  • Migrated 800+ platform base images from JFrog to IBM Cloud Container Registry, supporting the platform team's AMI build pipeline.
  • Provisioned EKS add-ons using Terraform to enhance existing Kubernetes clusters.
  • Developed a CloudWatch-based log monitoring system to detect critical patterns and trigger Instana alerts.
  • Enabled ELB access logs and implemented S3 cross-region replication for disaster recovery and compliance.
TerraformAWSEKSIBM CloudCloudWatch
May — Sep 2024

Cloud Engineer Intern

IBM · Payments Center
  • Automated IBM Cloud Toolchain provisioning with Terraform, reducing setup time by 80% — automation later reused as the foundation for the Wires Services CI/CD migration.
  • Developed CI/CD pipelines for Terraform projects using IBM Toolchain, improving deployment reliability and productivity.
  • Migrated Terraform CI/CD workflows from Jenkins to IBM Toolchain, reducing deployment times by over 20%.
  • Integrated Mend (WhiteSource) for automated code compliance and security scanning across pipelines.
TerraformIBM ToolchainJenkinsMend
Sep — Dec 2023

Cloud Engineer

Manulife Global
  • Implemented Azure Blob Storage lifecycle policies, reducing access costs by over 20%.
  • Built an Azure Function to automate ParkMyCloud credential rotation, replacing a manual secret management process.
  • Developed an Azure Function to forward Azure Health Alerts to Microsoft Teams for real-time observability across all resources.
  • Led development of an internal chatbot using Azure OpenAI and RAG architecture — adopted beyond PoC — enabling secure, role-based knowledge retrieval with team-level access controls.
AzureAzure FunctionsAzure OpenAIRAG
May — Aug 2023

Software Developer

Rhetoricon Research · University of Waterloo
  • Migrated a legacy MySQL database to PostgreSQL, optimizing queries to improve search and response times.
  • Integrated Redis caching for Zotero API calls, reducing redundant API calls and improving page load performance.
  • Built and optimized an admin frontend using client-side rendering and lazy data fetching.
  • Developed reusable pagination components to standardize UI/UX across multiple views.
PostgreSQLRedisJavaScript
Jan — Apr 2023

Cloud Engineer

State Street Corporation
  • Built Kibana observability dashboards on an ELK stack to monitor node health and log ingestion performance across 20–50 GB of daily log volume.
  • Designed AWS Lambda pipelines to stream logs from S3, CloudWatch, and CloudTrail into OpenSearch for centralized log aggregation.
  • Integrated Kinesis to optimize log streaming throughput, reducing Lambda invocation costs by 10%.
  • Refactored and tuned Lambda functions, cutting tail latency by 20% and preventing throttling through SQS optimization.
AWSOpenSearchLambdaKinesisSQS
May — Aug 2022

Software Developer

FarmLink Marketing Solutions
  • Refactored front-end components with standardized Vuetify components, eliminating code duplication.
  • Configured Vite and front-end code splitting, cutting load times by 26% and bundle size by 72%.
  • Optimized Django ORM queries with lazy loading to improve API response times.
  • Dockerized the application into microservices, streamlining development workflows and deployment.
Vue.jsDjangoViteDocker
02 / skills
Containers & Orchestration OpenShift · Kubernetes · Helm · ArgoCD · OpenShift GitOps · CloudBees CI
IaC & Automation Terraform · CloudFormation · Jenkins · IBM One Pipeline (Tekton) · Kong Deck
Cloud Platforms AWS · Azure · IBM Cloud
Networking & Security Istio Service Mesh · F5 BIG-IP (LTM/GTM) · F5 CIS · HashiCorp Vault (PKI/Secrets) · OpenShift Network Policies · LDAP
Messaging & Middleware ActiveMQ (AMQ) Broker · Kong Gateway
Data & Storage CockroachDB · EDB PostgreSQL · Nooba Storage · Redis
Observability & Scanning Dynatrace (ActiveGate) · SonarQube · JFrog Artifactory & Xray · Mend (WhiteSource)
Languages Python · Golang · C / C++ · Bash · JavaScript
Web Frameworks Svelte · Vue.js · Next.js · React
03 / education
2020 — 2025

Bachelor of Computer Science in Data Science · University of Waterloo

Graduated with Dean's Honours distinction. Cumulative GPA above 87%. Coursework in distributed systems, networks, machine learning, algorithms and data structures.

References available on request. Prefer to print this? The PDF is set on a single page in the same type.

Download résumé · pdf ↓