Hi there 👋

I am currently a Cloud Technical Specialist at Enfinity Solutions Limited, with my current role focused on:

• Architecting and delivering cloud-native solutions to our customers on AWS and Alibaba Cloud, and
• Daily operations and maintenance of our on-premises GitLab and Kubernetes infrastructure

Work Experience

Cloud Technical Specialist at Enfinity Solutions Limited (July 2023 - now)

2023 Q3:

• Integrated Flux v2 with Microsoft Teams for real-time alerts on cluster events
• Deployed MinIO and ScyllaDB on-premises for local cloud-native application development and testing
• Bootstrapped Flux v2 to on-premises RKE2 cluster for GitOps, automated Helm release management and upgrades
• Provisioned AWS CodePipeline and surrounding infrastructure for CI/CD pipelines with Terraform for a client
• Integrated Active Directory with GitLab for centralized identity management
• Migrated internal VCS from Gitea to GitLab for a fully standardized DevSecOps experience
• Migrated RKE2 cluster to CIS-1.23 compliant hardened profile for enhanced cluster-level security and compliance
• Implemented DevSecOps pipeline for AWS Lambda with automated unit tests, image build and image scan for a client
• Deployed Gitea to Kubernetes with Actions enabled to accelerate internal DevOps collaboration
• Provisioned RKE2 cluster in HA mode with Istio and MetalLB, Grafana and Prometheus for monitoring and observability
• Co-implemented monitoring and alerting solution across AWS and Azure with Amazon CloudWatch and SNS for a client
• Automated the lifecycle of Alibaba Cloud ECS instances with Function Compute

Specialist in IT consulting at China Resources Enterprise Limited (July 2021 - May 2023; 1 year 10 months)

Job rotation at Pacific Coffee (Hong Kong and Overseas) (November 2022 - May 2023; 7 months)

2023 Q2:

• Provisioned and secured Windows and Linux infrastructure for Power BI system on Alibaba Cloud ECS
• Provisioned Nagios for monitoring VPN connectivity between Sheung Wan headquarters (HQ) and 133 branch stores on openEuler 22.03 LTS server running atop VMware ESXi 6.x

2023 Q1:

• Oversaw the design and technical execution of HQ firewall (FW) replacement (Fortinet --> H3C) action plan proposed by Titanicom; performed technical validation tests afterwards during off-hours to ensure business continuity
• Provisioned Ansible for automated DNS client configuration and antivirus replacement (TrendMicro --> UES) across 50+ HQ and Yau Tong BLU kitchen Windows workstations on openEuler 22.03 LTS server running atop VMware ESXi 6.x
• Provisioned BIND9 for resolving longstanding DNS resolution issues involving China Resources' intranet domain names on openEuler 22.03 LTS server running atop VMware ESXi 6.x

2022 Q4:

• Enforced security best practices on Alibaba Cloud account via creation of RAM users, groups and roles; MFA enablement and enforcement
• Enforced security best practices on 5 Alibaba Cloud ECS CentOS Linux instances via automatic updates and reboots, locking the root account and enforcing public key authentication for SSH login
• Oversaw the replacement of intranet leased line by HKBN for improving HQ network topology; performed corresponding FW policy and static route migration during off-hours to ensure business continuity

China Resources Enterprise Limited (July 2021 - October 2022; 1 year 3 months)

Assisted in meeting room setup for videoconferencing, Windows desktop and laptop software installation, Windows and Outlook troubleshooting, printer troubleshooting at Wan Chai HQ office

Software Developer (Intern) at M-Labs Limited (May 2020 - November 2020; 6 months)

2020 Q4:

• Implemented sorting network for ARTIQ control system and formally verified its correctness via nMigen

2020 Q3:

• Ported Minerva RISC-V (RV32M) soft core from Verilog to nMigen and formally verified its correctness

Teaching Assistant (Intern) at BSD Education (formerly BSD Academy) (August 2016; 2 weeks)

Assisted in teaching duties for 2 classes of students aged 8-10 on frontend development with HTML5+CSS3+JS

Education

BEng. Computer Science and Engineering (4Y), The Hong Kong University of Science and Technology, Class of 2021, First Class Honors, GGA: 3.742

Community

• Appointed community moderator on deepin Forums for 2023 Q2 and 2023 Q3
• Submitted multiple pull requests to linuxdeepin in 2022 Q4, 3 merged
• I write technical articles on CSDN and dev.to

Contact

Please refer to my CV for contact details