Brandon Peskin, Developer in San Francisco, CA, United States
Brandon is available for hire
Hire Brandon

Brandon Peskin

DevOps Architect and Software Developer

San Francisco, CA, United States

Toptal member since September 24, 2020

Bio

Brandon is an experienced professional who has worked as a systems administrator and network engineer/architect. He has a strong passion for developing, implementing, and supporting the technologies used both yesterday and today to get the job done. Brandon has solid experience working with major vendors such as Fortinet, Cisco, Ubiquiti, and Palo Alto Networks.

Portfolio

Self-employed
Amazon Web Services (AWS), Google Cloud Platform (GCP), Cisco, Cassandra...
Self-employed
IPv6, IPv4, TCP/IP, SonicWall, Fortinet Firewall Configuration, Juniper, Cisco...
Yahoo! - Yahoo - Paranoids US
Google Cloud Platform (GCP), DevOps, Terraform, CI/CD Pipelines...

Experience

  • Cisco - 20 years
  • SonicWall - 20 years
  • Data Centers - 20 years
  • Firewalls - 20 years
  • Network Access Control - 20 years
  • Networking - 20 years
  • Fortinet Firewall Configuration - 10 years
  • Palo Alto Networks - 7 years

Preferred Environment

Amazon Web Services (AWS), TCP/IP, Kubernetes, Cisco, Google Cloud Platform (GCP), Interconnected Networks, PostgreSQL, Datadog, Sumo Logic, ELK (Elastic Stack)

The most amazing...

...thing I've ever supported is a multitenant Fortune 500 software as a service platform supporting 5+ billion transactions per day.

Work Experience

Senior DevOps/Site Reliability Engineer

2009 - PRESENT
Self-employed
  • Tasked for many years with keeping a multi-million dollar SaaS product online. This was first via bare metal servers, and in recent years, via AWS and GCP. Now, I'm supporting and migrating these applications to Kubernetes.
  • Implemented change management procedures, alerting tiers, incident management, and synthetic external tests to ensure the SaaS product remains online and operating within specifications.
  • Supported engineering efforts to break down monolithic repos and services into microservices.
  • Designed corporate and data center network footprints from architecture to implementation, support, and monitoring.
Technologies: Amazon Web Services (AWS), Google Cloud Platform (GCP), Cisco, Cassandra, Kubernetes, CentOS, NGINX, CI/CD Pipelines, Infrastructure as Code (IaC), PostgreSQL, Datadog, Monitoring, Linux

Network Architect

1999 - PRESENT
Self-employed
  • Designed and implemented large scale networks for both corporate and data center. Shared my knowledge on IPv4, and IPv6 and connecting large cloud providers directly to the data center for migratory or scaling purposes.
  • Managed scaling, procurement, and vendor relationships for networking equipment.
  • Worked with security teams to define network perimeter (firewall and intrusion detection) threat and security models.
  • Worked with major vendors (Fortinet, Cisco Ubiquiti, and Palo Alto Networks) with both their hardware offerings and some via the cloud (Prisma at Palo Alto and Meraki). Shared my knowledge on hardware appliance offerings, cloud, and open source implementations.
Technologies: IPv6, IPv4, TCP/IP, SonicWall, Fortinet Firewall Configuration, Juniper, Cisco, CentOS, Networking, Network Engineering, Network Access Control, Firewalls, VPN, Palo Alto Networks, Prisma, WAN, OSI Model

GCP Cloud Infrastructure Migration Engineer

2024 - 2024
Yahoo! - Yahoo - Paranoids US
  • Assisted with the migration of a cybersecurity application platform from on-premises to GCP.
  • Created a Terraform infrastructure from the ground up for GCP.
  • Helped converge on-premises types of resources and offerings by the cloud provider.
Technologies: Google Cloud Platform (GCP), DevOps, Terraform, CI/CD Pipelines, Cloud Migration, Linux, Kubernetes, Go, Large-scale Production Deployments, Infrastructure as Code (IaC), Datadog

Network Engineer

2023 - 2024
EyeCheq Inc.
  • Deployed a VPN system utilizing Tailscale to link field servers to the AWS VPC.
  • Worked with telecom providers (AT&T and Verizon) to establish a cellular private network (think MPLS but via cellular), linking the routers deployed in the field directly to AWS (and getting their internet access from there).
  • Deployed Cisco CSR routers in AWS to create a custom SD-WAN to satisfy the requirements of the client's technology.
Technologies: Networking, Amazon Web Services (AWS), VPN, IP Routing, IPsec, AWS VPN, Tailscale, Software-defined WAN (SDWAN)

Cisco Network Engineer

2022 - 2022
INTEGRITECH, LLC
  • Worked with telecommunications vendors to establish an eVPN (MPLS) cloud between three distinct geographic locations.
  • Connected a vendor-partner's network to the network of one of America's largest retailers.
  • Deployed Cisco routers, cross-connects, and a network topology with the help of data center technicians, point-of-sale experts, and network engineers.
Technologies: Cisco, System Administration, Border Gateway Protocol (BGP), Networks, Fiber Optics, Telecom Equipment & Solutions

DevOps and Security Engineer

2020 - 2021
Anthem [Now Elevance] - AI
  • Worked on service mesh and workload attestation mechanisms for various upcoming Anthem/Elevance initiatives. Co-developed a developer setup where the zero trust environment could be deployed in the development environment (and locally).
  • Helped develop the service platform for the division by deploying AWS resources with Terraform and configuring Kubernetes and resources with Helm.
  • Assisted developers in getting helm charts written for their applications and onboarded them into the CI/CD environment. Deployed and made them SPIRE/Zero trust configured.
Technologies: Python, Terraform, DevOps, Amazon Virtual Private Cloud (VPC), Kubernetes, Docker, Amazon Web Services (AWS), Site Reliability Engineering (SRE), Site Reliability, Linux Administration, IT, APIs, CA Network & Systems Management (NSM), Open Policy Agent (OPA), Amazon EKS, Kubernetes Operators, Kubernetes Security, Helm

Experience

Data Center to The Cloud

Led (as the technical lead) a team of SREs responsible for the maintenance of the hardware to support and the release of the company's SaaS product. Established direct connectivity to the cloud provider via Terraform/network infrastructure as code. Established all of the resources needed from the cloud provider via Terraform. Worked with engineering to set up a Spinnaker pipeline to deploy the code via Kubernetes pods which replaced our home-brew Bash script we used for years on bare metal.

Observability Platform Development, Rollout and Optimization with Datadog

As a site reliability engineer tasked with creating SLA/SLI/SLT, I was tasked with building out an observability platform.

• Completed vendor evaluation and developed selection criteria for a new observability platform. Evaluated all major vendors as well as the DIY model with an ELK stack. Datadog was the selected vendor.
• Over 6 months, scaled out an observability platform using Datadog. Also provided for the InfoSec team to use Datadog as a SIEM.
• The project was not as simple as installing the Datadog agent and key. I worked with engineers to reduce log volume and identify the signal-to-noise ratio. This was required because the current logging volume would have made Datadog very expensive. Reduced logging volume equivalent to $40,000 a month, Datadog spent before full onboarding.
• Identified key metrics and components for which visibility was required. Was able to leverage some of Datadog's built-in functionality, but the rest required a DogStatsD implementation so we could roll our own metrics.

The end result was that we were receiving far less frequent but more meaningful information about how the application stack was performing. Instituted a "if action cannot be taken, we should not be paged" policy around alerts.

Certifications

MARCH 2026 - MARCH 2029

AWS Certified Solutions Architect

Amazon Web Services

SEPTEMBER 2022 - SEPTEMBER 2025

Network+

CompTIA

SEPTEMBER 2022 - SEPTEMBER 2025

Cisco Certified Network Associate

Cisco

Skills

Libraries/APIs

Datadog API

Tools

VPN, Amazon EKS, Terraform, Sumo Logic, ELK (Elastic Stack), Google Kubernetes Engine (GKE), NGINX, Prisma, Amazon Virtual Private Cloud (VPC), Kubernetes Operators, Helm

Platforms

Linux, Google Cloud Platform (GCP), Kubernetes, Docker, Amazon Web Services (AWS), CentOS, Azure, Amazon

Storage

Data Centers, MySQL, Cassandra, PostgreSQL, Datadog

Languages

Bash Script, Perl, Go, Python, Bash, YAML

Frameworks

Hadoop

Paradigms

DevOps

Other

Cisco, TCP/IP, IPv4, IPv6, Data Center Migration, Capacity Planning, Servers, Direct Connect (DC), Interconnected Networks, Networking, Network Engineering, Network Access Control, Firewalls, Networks, Routing and Switching Protocols, CI/CD Pipelines, Monitoring, WAN, OSI Model, Apache Cassandra, Juniper, Fortinet Firewall Configuration, SonicWall, Purchasing, Website Performance, Palo Alto Networks, Infrastructure as Code (IaC), Site Reliability Engineering (SRE), Site Reliability, Linux Administration, IT, APIs, CA Network & Systems Management (NSM), Open Policy Agent (OPA), Kubernetes Security, System Administration, Border Gateway Protocol (BGP), Fiber Optics, Telecom Equipment & Solutions, IP Routing, IPsec, AWS VPN, Tailscale, Software-defined WAN (SDWAN), IP Networks, Cloud Migration, Large-scale Production Deployments

Collaboration That Works

How to Work with Toptal

Toptal matches you directly with global industry experts from our network in hours—not weeks or months.

1

Share your needs

Discuss your requirements and refine your scope in a call with a Toptal domain expert.
2

Choose your talent

Get a short list of expertly matched talent within 24 hours to review, interview, and choose from.
3

Start your risk-free talent trial

Work with your chosen talent on a trial basis for up to two weeks. Pay only if you decide to hire them.

Top talent is in high demand.

Start hiring