KARL-PATRICK DIGBEU

Configure Terragrunt.hcl files to deploy AppGate VPN backup stacks for compliance routine tasks.

• Leverage Terraform modules to deploy IaC stacks on AWS GovCloud.
• Use OPA and Conftest as a security compliance tool to configure CI/CD pipeline utilizing Rego compliance policies conform to the DoD security standards to perform scans against Terraform codes commit.
• Configure and deploy Platform One Big Bang containerized applications using Docker, Kubernetes, Helm and Flux.
• Configure Kubernetes secrets using SOPS encryption to encrypt application secrets.
• Automate Kubernetes secrets upload in Vault to tightly control applications access tokens and passwords.
• Configure, deploy and maintain Twistlock and NeuVector as the main tool to provide anomaly, signature-based runtime defense, vulnerability, and compliance scanning for ecosystem hosts and containers.
• Automate RDS backup as Kubernetes CronJob. Task involved: Postgres Docker build with pre-baked RDS dependencies, CronJob Helm chart configuration, Helm plugins configuration with SOPS encryption, CronJob deployment resulting in automated RDS backup dump in S3.
• Build and maintain private registry docker images to be conformed with Platform One ecosystem.
• Type up in-depth SOP's application deployment processes to pass on to Operations team to use as an internal guide line for client support.

• Deployed SEMOSS application per client request. Task involved: Installation and configuration of NGINX proxy, configuration of application databases on central server, creation of application docker containers, construction of standard configurations scripts, and testing DNS.
• Built Docker images to support Development and Testing teams.
• Maintained SEMOSS Docker scripts (tomcat, docker- r, docker -r-packages, docker -r-python, docker/SEMOSS) in Git by updating the necessary libraries to allow a successful build prior to major releases.
• Configured and deployed AWS EKS clusters to host MissionGraph core services for USAID.
• Deployed MissionGraph core services using Helm and ArgoCD.
• On call monitored and tuned MissionGraph core services through pods debugging sessions.
• Configured and attached Kubernetes persistent volume to application deployment YAML files to maintain users' data across production servers.
• Developed and promoted standard operating procedures for operation efficiency and new team members onboarding training materials.

• Performed LAMP and Drupal installations on Ubuntu and AWS Linux EC2 instances.
• Debugged LAMP installation on virtual machines hosting client's applications.
• Maintained AWS IAM roles and policies for internal project teams and provided access to AWS accounts to support internal projects' cloud adoption.
• Configured AWS Security Groups to allows MEPS (Medical Expenditure Panel Survey) users to connect to their virtual machines.
• Wrote technical documentation to support new projects cloud adoption.