Aug 2025 — present
Associate DevOps Engineer · Real-Time Rail
IBM · embedded with Payments Canada
- Managed ArgoCD / OpenShift GitOps across 12 clusters, with 2 management instances each governing a set of datacenters, enabling GitOps-driven delivery for C&S and Exchange workloads across 16 environments.
- Standardized and maintained CI/CD pipelines across 16 environments, including snapshot and release pipelines for C&S teams and per-environment CD pipelines for both C&S and Exchange.
- Migrated and rebuilt CloudBees CI Jenkins from IBM Cloud to on-premises OpenShift using CasC, deploying in an active-passive configuration across 2 management clusters.
- Deployed and configured Kong Gateway (Control Plane and Data Plane) on OpenShift; built a custom plugin image pipeline; implemented Kong Deck config-as-code for version-controlled API infrastructure.
- Deployed ActiveMQ (AMQ) Broker via OpenShift operators, configuring Queue Federation and Mirroring across pre-production and production for cross-site message persistence.
- Installed and configured EDB PostgreSQL with synchronous commits between datacenters to achieve RPO=0 across production environments.
- Deployed CockroachDB as pods across the cluster fleet as part of the distributed data layer.
- Integrated LDAP (Red Hat Directory Server) with Artifactory, AMQ, Kong Gateway, and EDB PostgreSQL for centralized identity and access management.
- Engineered a Zero-Trust network model using OpenShift Network Policies for microsegmentation and Istio Service Mesh to enforce mTLS across all in-mesh microservices.
- Installed HashiCorp Vault operator across all clusters, configuring Kubernetes auth methods and managing 17 namespaces with automated certificate lifecycle management via the PKI engine.
- Deployed F5 CIS operators to provision Virtual IPs for platform components, collaborating with CGI's network team to define and validate network flows.
- Instrumented all platform components with Dynatrace via ActiveGate for metrics collection across the full cluster fleet.
- Configured backups for all platform components using Nooba storage connected to the SAN.
- Supported resiliency, performance, and functional testing — including 300 TPS load tests and 36-hour soak tests — serving as the platform layer interface between development, QA, and infrastructure teams.
OpenShiftArgoCDCloudBees CIKongAMQEDB PostgreSQLCockroachDBVaultIstioF5 CISDynatraceNooba