
Brandon Peskin
Verified Expert in Engineering
DevOps Architect and Software Developer
San Francisco, CA, United States
Toptal member since September 24, 2020
Brandon is an experienced professional who has worked as a systems administrator and network engineer/architect. He has a strong passion for developing, implementing, and supporting the technologies used both yesterday and today to get the job done. Brandon has solid experience working with major vendors such as Fortinet, Cisco, Ubiquiti, and Palo Alto Networks.
Portfolio
Experience
- Cisco - 20 years
- SonicWall - 20 years
- Data Centers - 20 years
- Firewalls - 20 years
- Network Access Control - 20 years
- Networking - 20 years
- Fortinet Firewall Configuration - 10 years
- Palo Alto Networks - 7 years
Preferred Environment
Amazon Web Services (AWS), TCP/IP, Kubernetes, Cisco, Google Cloud Platform (GCP), Interconnected Networks, PostgreSQL, Datadog, Sumo Logic, ELK (Elastic Stack)
The most amazing...
...thing I've ever supported is a multitenant Fortune 500 software as a service platform supporting 5+ billion transactions per day.
Work Experience
Senior DevOps/Site Reliability Engineer
Self-employed
- Tasked for many years with keeping a multi-million dollar SaaS product online. This was first via bare metal servers, and in recent years, via AWS and GCP. Now, I'm supporting and migrating these applications to Kubernetes.
- Implemented change management procedures, alerting tiers, incident management, and synthetic external tests to ensure the SaaS product remains online and operating within specifications.
- Supported engineering efforts to break down monolithic repos and services into microservices.
- Designed corporate and data center network footprints from architecture to implementation, support, and monitoring.
Network Architect
Self-employed
- Designed and implemented large scale networks for both corporate and data center. Shared my knowledge on IPv4, and IPv6 and connecting large cloud providers directly to the data center for migratory or scaling purposes.
- Managed scaling, procurement, and vendor relationships for networking equipment.
- Worked with security teams to define network perimeter (firewall and intrusion detection) threat and security models.
- Worked with major vendors (Fortinet, Cisco Ubiquiti, and Palo Alto Networks) with both their hardware offerings and some via the cloud (Prisma at Palo Alto and Meraki). Shared my knowledge on hardware appliance offerings, cloud, and open source implementations.
GCP Cloud Infrastructure Migration Engineer
Yahoo! - Yahoo - Paranoids US
- Assisted with the migration of a cybersecurity application platform from on-premises to GCP.
- Created a Terraform infrastructure from the ground up for GCP.
- Helped converge on-premises types of resources and offerings by the cloud provider.
Network Engineer
EyeCheq Inc.
- Deployed a VPN system utilizing Tailscale to link field servers to the AWS VPC.
- Worked with telecom providers (AT&T and Verizon) to establish a cellular private network (think MPLS but via cellular), linking the routers deployed in the field directly to AWS (and getting their internet access from there).
- Deployed Cisco CSR routers in AWS to create a custom SD-WAN to satisfy the requirements of the client's technology.
Cisco Network Engineer
INTEGRITECH, LLC
- Worked with telecommunications vendors to establish an eVPN (MPLS) cloud between three distinct geographic locations.
- Connected a vendor-partner's network to the network of one of America's largest retailers.
- Deployed Cisco routers, cross-connects, and a network topology with the help of data center technicians, point-of-sale experts, and network engineers.
DevOps and Security Engineer
Anthem [Now Elevance] - AI
- Worked on service mesh and workload attestation mechanisms for various upcoming Anthem/Elevance initiatives. Co-developed a developer setup where the zero trust environment could be deployed in the development environment (and locally).
- Helped develop the service platform for the division by deploying AWS resources with Terraform and configuring Kubernetes and resources with Helm.
- Assisted developers in getting helm charts written for their applications and onboarded them into the CI/CD environment. Deployed and made them SPIRE/Zero trust configured.
Experience
Data Center to The Cloud
Observability Platform Development, Rollout and Optimization with Datadog
• Completed vendor evaluation and developed selection criteria for a new observability platform. Evaluated all major vendors as well as the DIY model with an ELK stack. Datadog was the selected vendor.
• Over 6 months, scaled out an observability platform using Datadog. Also provided for the InfoSec team to use Datadog as a SIEM.
• The project was not as simple as installing the Datadog agent and key. I worked with engineers to reduce log volume and identify the signal-to-noise ratio. This was required because the current logging volume would have made Datadog very expensive. Reduced logging volume equivalent to $40,000 a month, Datadog spent before full onboarding.
• Identified key metrics and components for which visibility was required. Was able to leverage some of Datadog's built-in functionality, but the rest required a DogStatsD implementation so we could roll our own metrics.
The end result was that we were receiving far less frequent but more meaningful information about how the application stack was performing. Instituted a "if action cannot be taken, we should not be paged" policy around alerts.
Certifications
AWS Certified Solutions Architect
Amazon Web Services
Network+
CompTIA
Cisco Certified Network Associate
Cisco
Skills
Libraries/APIs
Datadog API
Tools
VPN, Amazon EKS, Terraform, Sumo Logic, ELK (Elastic Stack), Google Kubernetes Engine (GKE), NGINX, Prisma, Amazon Virtual Private Cloud (VPC), Kubernetes Operators, Helm
Platforms
Linux, Google Cloud Platform (GCP), Kubernetes, Docker, Amazon Web Services (AWS), CentOS, Azure, Amazon
Storage
Data Centers, MySQL, Cassandra, PostgreSQL, Datadog
Languages
Bash Script, Perl, Go, Python, Bash, YAML
Frameworks
Hadoop
Paradigms
DevOps
Other
Cisco, TCP/IP, IPv4, IPv6, Data Center Migration, Capacity Planning, Servers, Direct Connect (DC), Interconnected Networks, Networking, Network Engineering, Network Access Control, Firewalls, Networks, Routing and Switching Protocols, CI/CD Pipelines, Monitoring, WAN, OSI Model, Apache Cassandra, Juniper, Fortinet Firewall Configuration, SonicWall, Purchasing, Website Performance, Palo Alto Networks, Infrastructure as Code (IaC), Site Reliability Engineering (SRE), Site Reliability, Linux Administration, IT, APIs, CA Network & Systems Management (NSM), Open Policy Agent (OPA), Kubernetes Security, System Administration, Border Gateway Protocol (BGP), Fiber Optics, Telecom Equipment & Solutions, IP Routing, IPsec, AWS VPN, Tailscale, Software-defined WAN (SDWAN), IP Networks, Cloud Migration, Large-scale Production Deployments
How to Work with Toptal
Toptal matches you directly with global industry experts from our network in hours—not weeks or months.
Share your needs
Choose your talent
Start your risk-free talent trial
Top talent is in high demand.
Start hiring