Hi there 👋
I am currently a Cloud Technical Specialist at Enfinity Solutions Limited, with my current role focused on:
- Architecting and delivering cloud-native solutions to our customers on AWS and Alibaba Cloud, and
- Daily operations and maintenance of our on-premises GitLab and Kubernetes infrastructure
Work Experience
Cloud Technical Specialist at Enfinity Solutions Limited (July 2023 - now)
2023 Q3:
- Integrated Flux v2 with Microsoft Teams for real-time alerts on cluster events
- Deployed MinIO and ScyllaDB on-premises for local cloud-native application development and testing
- Bootstrapped Flux v2 to on-premises RKE2 cluster for GitOps, automated Helm release management and upgrades
- Provisioned AWS CodePipeline and surrounding infrastructure for CI/CD pipelines with Terraform for a client
- Integrated Active Directory with GitLab for centralized identity management
- Migrated internal VCS from Gitea to GitLab for a fully standardized DevSecOps experience
- Migrated RKE2 cluster to CIS-1.23 compliant hardened profile for enhanced cluster-level security and compliance
- Implemented DevSecOps pipeline for AWS Lambda with automated unit tests, image build and image scan for a client
- Deployed Gitea to Kubernetes with Actions enabled to accelerate internal DevOps collaboration
- Provisioned RKE2 cluster in HA mode with Istio and MetalLB, Grafana and Prometheus for monitoring and observability
- Co-implemented monitoring and alerting solution across AWS and Azure with Amazon CloudWatch and SNS for a client
- Automated the lifecycle of Alibaba Cloud ECS instances with Function Compute
Specialist in IT consulting at China Resources Enterprise Limited (July 2021 - May 2023; 1 year 10 months)
Job rotation at Pacific Coffee (Hong Kong and Overseas) (November 2022 - May 2023; 7 months)
2023 Q2:
- Provisioned and secured Windows and Linux infrastructure for Power BI system on Alibaba Cloud ECS
- Provisioned Nagios for monitoring VPN connectivity between Sheung Wan headquarters (HQ) and 133 branch stores on openEuler 22.03 LTS server running atop VMware ESXi 6.x
2023 Q1:
- Oversaw the design and technical execution of HQ firewall (FW) replacement (Fortinet --> H3C) action plan proposed by Titanicom; performed technical validation tests afterwards during off-hours to ensure business continuity
- Provisioned Ansible for automated DNS client configuration and antivirus replacement (TrendMicro --> UES) across 50+ HQ and Yau Tong BLU kitchen Windows workstations on openEuler 22.03 LTS server running atop VMware ESXi 6.x
- Provisioned BIND9 for resolving longstanding DNS resolution issues involving China Resources' intranet domain names on openEuler 22.03 LTS server running atop VMware ESXi 6.x
2022 Q4:
- Enforced security best practices on Alibaba Cloud account via creation of RAM users, groups and roles; MFA enablement and enforcement
- Enforced security best practices on 5 Alibaba Cloud ECS CentOS Linux instances via automatic updates and reboots, locking the root account and enforcing public key authentication for SSH login
- Oversaw the replacement of intranet leased line by HKBN for improving HQ network topology; performed corresponding FW policy and static route migration during off-hours to ensure business continuity
China Resources Enterprise Limited (July 2021 - October 2022; 1 year 3 months)
Assisted in meeting room setup for videoconferencing, Windows desktop and laptop software installation, Windows and Outlook troubleshooting, printer troubleshooting at Wan Chai HQ office
Software Developer (Intern) at M-Labs Limited (May 2020 - November 2020; 6 months)
2020 Q4:
- Implemented sorting network for ARTIQ control system and formally verified its correctness via nMigen
2020 Q3:
- Ported Minerva RISC-V (RV32M) soft core from Verilog to nMigen and formally verified its correctness
Teaching Assistant (Intern) at BSD Education (formerly BSD Academy) (August 2016; 2 weeks)
Assisted in teaching duties for 2 classes of students aged 8-10 on frontend development with HTML5+CSS3+JS
Education
BEng. Computer Science and Engineering (4Y), The Hong Kong University of Science and Technology, Class of 2021, First Class Honors, GGA: 3.742
Community
- Appointed community moderator on deepin Forums for 2023 Q2 and 2023 Q3
- Submitted multiple pull requests to linuxdeepin in 2022 Q4, 3 merged
- I write technical articles on CSDN and dev.to
Contact
Please refer to my CV for contact details