Sjon-Paul Brown

I developed automation that would be used to orchestrate and automate network upgrades for the Flow blockchain. This automation was used to orchestrate the stopping and starting of our network while handling the execution of state extraction over TBs of execution data. This automation was responsible for orchestrating the upgrades while providing the necessary hooks to allow decentralized partners to upgrade their nodes. This automation created a stable process that resulted in a 90% reduction in downtime during network upgrades.

I developed and led a project to automate the bootstrapping and deployment of Flow blockchain networks to Kubernetes clusters. This project would be provided to partners and internal users to streamline the orchestration and deployment of networks so that they could benchmark and test changes in an isolated manner.

I managed and deployed a WAF solution across all public endpoints to ensure that malicious traffic was blocked before being delivered to our application. This required intense evaluation of existing traffic patterns to ensure that valid application traffic would not be blocked upon rollout. The entire solution was managed within the infrastructure as code to ensure the configurations could be enforced, audited, and automated.

I managed the creation and implementation of a configuration framework to standardize and enforce GitHub repo configurations to ensure that repositories were correctly configured with the proper settings. This framework also allowed for the definition and orchestration of various CI processes that allowed for the parallelization of various CI process that would need to be executed throughout the SDLC. This created a framework for creating and enforcing repository standards while also providing the necessary CI infrastructure to allow for easy integration and execution of various workflows.

I implemented a site-to-site IPsec VPN in a multi-region capacity. This IPSec VPN was configured from scratch and was configured to automatically recover from instance failures and rotations. This implementation ensured that the VPN was available in multiple regions and would automatically recover from failures while also ensuring that proper routing was dynamically configured.