Leland Kraatz

• Managed Infrastructure-as-Code (IaC) codebase for tens of thousands of different AWS resources including over 4,000 EC2 instances, over 5,000 EBS volumes, over 500 autoscaling groups (ASGs), over 300 Elastic Load Balancers (ELBs) comprised of both Network (NLBs) and Application Load Balancers (ALBs), over 100 S3 Buckets, over 200 IAM roles and policies, over 40 EKS clusters, over 200 SNS topics, over 200 SQS queues, over 200 Lambda functions, and more.
• Saved customer over $150,000 per month on AWS bill by optimizing size of over-provisioned EBS volumes. Developed Python scripts that queried usage information of over 5,000 EBS volumes across customer AWS accounts and produced reports in CSV format detailing EBS storage usage organized by customer-defined instance groupings. Delivered report to customer chief engineer and presented plan for right-sizing volumes. Created automation written in Terraform, Python, and Ansible to apply downsizing of volumes and RHEL file systems without losing any data.
• Saved customer over $100,000 per month on AWS bill by designing, developing, and testing IaC to migrate customer's containerized application hosting infrastructure from Rancher clusters running on customer-managed EC2 instances to EKS clusters with node groups in autoscaling groups (ASGs). Use of EKS improved application reliability, reduced work hours spent on maintaining Kubernetes control plane, and saved customer over $100,000 per month on AWS bill due to adoption of autoscaling groups. IaC written in Terraform with supporting automation written in Python, Ansible, and Bash.
• Performed role of subject matter expert (SME) for customer's AWS cloud environment needs. Provided consistent and routine consulting and advice to customer's chief architects and engineers regarding decisions to optimize their cloud computing architecture to improve cost, efficiency of applications, and reliability of infrastructure.

• Managed Apache Tomcat 9 build that was deployed on over 60 web servers running on RHEL 6 and RHEL 7 operating systems, supporting tens of web applications in private network environment.
• Designed and wrote bash scripts that checked and enforced over 80 STIG controls, automating previously manual and tedious processes for securing web servers.
• Coordinated and executed migration of web applications to new web servers.
• Planned, scheduled, and executed releases of new application versions into Development, User-Acceptance-Testing, and Production environments.

Technical skills leveraged: Apache Tomcat, Red Hat Enterprise Linux, Shell Scripting, Bitbucket

• Optimized customer satisfaction by providing technical support and troubleshooting assistance

• Created CI/CD reference pipeline using GitLab, Terraform, Terragrunt, Node.JS, and Bash to automate launching AWS EC2 instances with custom RHEL AMI in private AWS environment, with user data scripts to install web services at launch.
• Created and configured GitLab server on AWS EC2 instance with custom RHEL AMI in AWS Gov. environment. Documented step-by-step process for replicability. Wrote user data scripts to automate installation and configuration process.
• Developed user data scripts for AWS EC2 instances. Written in Bash, these scripts performed Linux administrative tasks such as installing necessary software, automating configuration settings specific to VPC environment, managing firewall settings, and standing up web services in custom RHEL AMI in private AWS environment.
• Wrote how-to articles in Confluence describing how to perform various administrative tasks on custom RHEL AMI in AWS Gov. environment.

Technical skills leveraged: AWS (EC2, ECR, S3, Lambda, CodeDeploy), Terraform, GitLab, Bitbucket

• Designed, implemented, and maintained custom operating system images in Red Hat and other Linux operating systems for embedded systems product. Designed user privileges, file directory structures and permissions, background services, and applied Security Technical Implementation Guides (STIGs) to operating system for DISA standard resilience to cybersecurity threats. This drastically improved automation and efficiency of software deployment to company product.
• Sole developer of graphical user interface for proprietary network security device. Application allowed company to market underlying product, leading to multi-million dollar contract award. Back-end written in Node.JS using Express framework and JSON objects for local data storage and manipulation. Front-end written in Pug, CSS3, and JavaScript. Project used SSH and SCP connections to allow users to communicate with remote information systems and make key configuration changes.
• Designed and implemented software features for existing embedded systems product in C that improved product performance and expanded its capability.

Technical skills leveraged: Node.JS, Express.JS, JavaScript, Pug, CSS, HTML, Shell Scripting, C, GitLab

• Assisted senior engineers develop and maintain Linux web applications written in C.
• Developed bash scripts to automate Linux administrative tasks such as installing software and creating web services.