Byron Kim

Jenkins is still a widely used CI/CD but often requires a lot of maintenance. With the use of Docker, I set up Jenkins to be fully immutable. The plugins are installed at build time, and with the use of Groovy, I can pre-seed all the jobs beforehand. The build logs are then exported to a central platform. This allows the Jenkins configuration to live in source control, and updates and rollbacks can be handled gracefully.

When I started with a client, they had a single EC2 instance running cron jobs for all their ingestion processes. While there were backups of the configuration, if the instance failed, bringing back the server would take a considerable amount of effort. I helped convert all of the applications to Docker and leveraged ECS, Lambda, and Cloudwatch Events to make the infrastructure immutable. All stateful data was stored in S3 or RDS, and the client did not have to worry about a single point of failure of their EC2 instance. This also helped reduce costs since ECS instances could scale based on need.

A client had a requirement to achieve ISO 27001 Certification to acquire more client accounts. Various projects were completed, such as rotating AWS IAM access keys for all users, implementing Hashicorp Vault for secretS storage, segmenting environments (multiple VPCs), and adding a VPN server with RBAC for developers and administrators. These projects were completed on a tight deadline and passed the audit to gain ISO 27001 certification.