Rupert is currently unavailable
Rupert Bryant-Greene
Verified Expert in Engineering
DevOps Engineer and Cybersecurity Developer
Wellington, New Zealand
Toptal member since October 23, 2019
Bio
Rupert delivers success in DevOps and cybersecurity. With 10+ years of experience in freelance IT, he's worked with leading SaaS, financial software, banking, and transport companies, from small startups to large enterprises. Rupert has significant experience with AWS, from managing a large AWS organization to building continuously deployed applications. He also integrates threat modeling and risk assessments into agile and lean workflows.
Portfolio
Toyota Research Institute Advanced Development
Amazon Web Services (AWS), Terraform, CI/CD Pipelines, IT Security...
Kmart Australia
Amazon Web Services (AWS), Network Architecture, API Architecture...
Bank of New Zealand
Amazon Web Services (AWS), Jira, AWS CloudFormation, Python, DevSecOps...
Experience
- Linux - 14 years
- JavaScript - 12 years
- Amazon Web Services (AWS) - 11 years
- Amazon Elastic Container Service (ECS) - 10 years
- DevSecOps - 9 years
- DevOps - 9 years
- Python - 8 years
- GitHub Actions - 6 years
Work Experience
AWS Security Engineer (via Toptal)
2021 - 2021
Toyota Research Institute Advanced Development
- Deployed automation to deliver just-in-time access across a massive AWS IAM Identity Center (SSO) deployment designed to scale to thousands of accounts.
- Designed and implemented the IAM controls to fit the security and usability requirements.
- Contributed to the custom IAM policy feature that was well-received, with developers quickly adopting it to grant custom access to peers in their own AWS accounts.
Technologies: Amazon Web Services (AWS), Terraform, CI/CD Pipelines, IT Security, Cloud Networking, Network Security, Networking, Firewalls, Routing, VPN, Virtual Private Cloud (VPC), Infrastructure as Code (IaC), REST APIs, OWASP, Information Security Management Systems (ISMS), Cloud Infrastructure, System Administration, Infrastructure, Site Reliability Engineering (SRE), AWS DevOps, Kubernetes, Containerization, AWS CloudTrail, AWS Secrets Manager, Amazon CloudWatch, AWS IAM
Principal Cloud Architect (via Toptal)
2021 - 2021
Kmart Australia
- Worked across the business and engaged with engineering, architecture, security, and management teams to design a future-state architecture for the use of AWS, with a specific focus on internal customer experience.
- Developed state-of-the-art patterns for networking, SaaS integration, and application architectures.
- Introduced and supported security teams with AWS native tooling that improves visibility of security compliance in the cloud.
Technologies: Amazon Web Services (AWS), Network Architecture, API Architecture, Web Architecture, Cloud, Identity & Access Management (IAM), Linux, DevOps, Amazon S3 (AWS S3), AWS CloudFormation, Redis, GitHub Actions, CI/CD Pipelines, Kubernetes Security, IT Security, ISO 27001, Cloud Networking, Network Security, Networking, Firewalls, Routing, VPN, Virtual Private Cloud (VPC), Azure, Terraform, Infrastructure as Code (IaC), REST APIs, OWASP, Information Security Management Systems (ISMS), Cloud Infrastructure, System Administration, Infrastructure, MacOS, AWS DevOps, Kubernetes, Containerization, SOC 2, AWS CloudTrail, AWS Secrets Manager, Amazon CloudWatch, PostgreSQL, AWS IAM
Cybersecurity Consultant
2019 - 2021
Bank of New Zealand
- Developed a vulnerability management approach for the use of AWS.
- Completed risk assessments and worked with a team to deliver projects onto AWS securely.
- Assessed architecture submissions to design the governance committee for security designs.
Technologies: Amazon Web Services (AWS), Jira, AWS CloudFormation, Python, DevSecOps, Identity & Access Management (IAM), Linux, DevOps, GitHub, Amazon S3 (AWS S3), CI/CD Pipelines, Penetration Testing, Kubernetes Security, IT Security, ISO 27001, Cloud Networking, Network Security, Networking, Firewalls, Routing, VPN, Virtual Private Cloud (VPC), Azure, Terraform, Infrastructure as Code (IaC), REST APIs, OWASP, Information Security Management Systems (ISMS), Cloud Infrastructure, System Administration, Infrastructure, AWS DevOps, Google Cloud Platform (GCP), Kubernetes, Containerization, SOC 2, AWS CloudTrail, AWS Secrets Manager, Amazon CloudWatch, PostgreSQL, AWS IAM
DevOps Consultant
2017 - 2021
Evnex
- Migrated an entire AWS environment to multi-account design with separate development, test, and production accounts.
- Built and supported back-end applications. Rebuilt deployment to utilize a functional and extendable CI/CD design.
- Assisted newcomers to build and understand systems so that they could take the company further.
Technologies: Amazon Web Services (AWS), Cloud, Amazon Cognito, Docker, Amazon DynamoDB, JavaScript, DevSecOps, Identity & Access Management (IAM), Linux, Node.js, DevOps, Python, React, Amazon S3 (AWS S3), AWS CloudFormation, Redis, CI/CD Pipelines, IT Security, ISO 27001, Cloud Networking, Network Security, Networking, Firewalls, Routing, VPN, Virtual Private Cloud (VPC), Infrastructure as Code (IaC), REST APIs, OWASP, Cloud Infrastructure, System Administration, Infrastructure, Site Reliability Engineering (SRE), MacOS, AWS DevOps, Kubernetes, Containerization, AWS CloudTrail, AWS Secrets Manager, Amazon CloudWatch, PostgreSQL, AWS IAM
Team Lead — Security Engineering
2017 - 2019
Xero
- Developed access management software with workflow automation and privileged access control for AWS on AWS.
- Led the security engineering teams, consulting heavily with architecture teams to develop best practices and up-skill others to understand and lead themselves.
- Rebuilt four critical pipelines for deploying critical infrastructure from Jenkins onto AWS CodePipeline in a month.
- Assessed the information quickly and pinpointed the issue of a lengthy outage to have global service resolved.
Technologies: Amazon Web Services (AWS), Docker, AWS Key Management Service (KMS), Identity & Access Management (IAM), JavaScript, Check Point, Akamai, Imperva Incapsula, Python, DevSecOps, Linux, Node.js, DevOps, React, Amazon S3 (AWS S3), AWS CloudFormation, CI/CD Pipelines, Penetration Testing, Kubernetes Security, IT Security, ISO 27001, Cloud Networking, Network Security, Networking, Firewalls, Routing, VPN, Virtual Private Cloud (VPC), Infrastructure as Code (IaC), REST APIs, OWASP, Information Security Management Systems (ISMS), Cloud Infrastructure, System Administration, Infrastructure, Site Reliability Engineering (SRE), AWS DevOps, Google Cloud Platform (GCP), Kubernetes, Containerization, SOC 2, AWS CloudTrail, AWS Secrets Manager, Amazon CloudWatch, PostgreSQL, AWS IAM, Vanta
Project History
OCPP EV Charging Back End
https://www.evnex.comWorking with EVNEX, a Christchurch-based electric vehicle charging startup, Rupert built an Open Charge Point Protocol-compliant back-end solution that utilizes WebSockets to communicate with charge points, has current load balancing functionality and runs in containers on AWS. Rupert wrote the software, pipeline, and infrastructure automation for the project, which makes up the core offering of EVNEX.
Xero - Platform Access Control Manager
https://tinyurl.com/y3khuuclRupert built, deployed, and maintained the security infrastructure that protects Xero. This includes web application firewalls, content delivery and caching, and identity and access management.
He built a containerized, privileged access control system on AWS during this time.
Rupert presented at an AWS Summit in Sydney at the invitation of AWS to discuss secrets management, identity and access management, and what was being built at Xero.
He built a containerized, privileged access control system on AWS during this time.
Rupert presented at an AWS Summit in Sydney at the invitation of AWS to discuss secrets management, identity and access management, and what was being built at Xero.
Vineyard - AWS Root Account Management
Managing a hundred AWS accounts can be challenging. During his time at Xero, Rupert built an electron-based desktop application to make it easier for engineers to manage AWS root accounts while keeping security the top priority.
After leaving Xero, Vineyard became a staple part of the identity and access to the team's workflow.
After leaving Xero, Vineyard became a staple part of the identity and access to the team's workflow.
HeyCaller - Visual Voicemail
New Zealand lacked a visual voicemail provider, so Rupert built HeyCaller, a web service that replaces your existing voicemail service, with features like voicemail-to-email and voicemail sharing. Preview access will be available soon.
YES3 - Event-driven S3 Bucket Security
https://github.com/rupertbg/YES3Public S3 Buckets are among the most common data ex-filtration vectors of recent times. To avoid S3 Buckets becoming public unexpectedly, Rupert wrote an event-driven Lambda that will monitor and automatically remediate non-compliant buckets according to a supplied YAML policy.
Wireguard on AWS
https://github.com/rupertbg/aws-wireguard-linuxWireguard is a state-of-the-art VPN created by Edge Security LLC. After needing to run Wireguard on AWS, Rupert wrote an open-sourced architecture for deploying Wireguard with auto-scaling and load-balancing on AWS.
AWS Cloud Directory IDE
https://github.com/rupertbg/aws-cloud-directory-uiAfter needing to work with AWS Cloud Directory heavily for building an authorization database, Rupert found a need for a visual development environment for the GUI-less AWS. The Cloud Directory IDE is available on Github pages for free and allows developers to iterate quickly on AWS Cloud Directory.
Certifications
AUGUST 2018 - AUGUST 2021
AWS Security – Specialty
Amazon Web Services (AWS)
FEBRUARY 2017 - FEBRUARY 2020
AWS SysOps Administrator – Associate
Amazon Web Services (AWS)
FEBRUARY 2017 - FEBRUARY 2020
AWS Solutions Architect – Associate
Amazon Web Services (AWS)
Skills
Libraries/APIs
Node.js, REST APIs, React
Tools
AWS CloudFormation, AWS Key Management Service (KMS), Amazon Cognito, Amazon Elastic Container Service (ECS), AWS ELB, Amazon Elastic Block Store (EBS), Amazon Elastic Container Registry (ECR), AWS SDK, AWS CodeBuild, GitHub, AWS IAM, VPN, AWS CloudTrail, Amazon CloudWatch, Terraform, Jira, Xero, WireGuard, Amazon Virtual Private Cloud (VPC)
Languages
Python, JavaScript, SAML, TypeScript, Ruby
Paradigms
Web Architecture, DevOps, DevSecOps, API Architecture, Penetration Testing, Agile, Functional Programming
Platforms
Docker, Amazon EC2, Amazon Web Services (AWS), Linux, AWS Lambda, MacOS, Kubernetes, Vanta, Windows Server, Google Cloud Platform (GCP), Azure, Imperva Incapsula, Twilio
Storage
Amazon S3 (AWS S3), Redis, NoSQL, Amazon DynamoDB, PostgreSQL, Graph Databases
Frameworks
Electron
Other
Security, Identity & Access Management (IAM), APIs, AWS CodePipeline, GitHub Actions, Content Delivery Networks (CDN), Web Application Firewall (WAF), Cloud Security, CI/CD Pipelines, IT Security, Cloud Networking, Network Security, Networking, Routing, Virtual Private Cloud (VPC), Infrastructure as Code (IaC), OWASP, Cloud Infrastructure, System Administration, Infrastructure, Site Reliability Engineering (SRE), AWS DevOps, Containerization, AWS Secrets Manager, Network Architecture, Risk Assessment, Threat Modeling, Akamai, Web Security, OAuth, Kubernetes Security, Firewalls, Information Security Management Systems (ISMS), SOC 2, Check Point, Cloud, Cryptography, AWS WAF, Amazon API Gateway, Failure Mode Effects Analysis (FMEA), ISO 27001
Collaboration That Works
How to Work with Toptal
Toptal matches you directly with global industry experts from our network in hours—not weeks or months.
1
Share your needs
Discuss your requirements and refine your scope in a call with a Toptal domain expert.
2
Choose your talent
Get a short list of expertly matched talent within 24 hours to review, interview, and choose from.
3
Start your risk-free talent trial
Work with your chosen talent on a trial basis for up to two weeks. Pay only if you decide to hire them.
Top talent is in high demand.
Start hiring