Mingcong Qiu

- Design and develop terraform architecture including modules and regional templates for customer's Azure VDI platform automation. Develop self-serve pipelines using GitHub action and powershell to provision VDI resources and perform Day-2 operations. - Install and configure Jfrog xray server, migrate the database of Jfrog artifactory to postgreSQL to improve xray query performance. Design vulnerability scan pipeline on Jenkins groovy script and integrate with existing one. Provide documentation and guidance of Jfrog platform usage to customers. - Design Terraform Modules on AWS and Huawei Cloud, integrate with Terraform Cloud for resources provisioning. Provide consultancy service of terraform architecture review on Google Cloud Platform to customer. Deliver demos on new tools like tf-controller and setup devops tools such as gitlab community for internal user.

- Use terraform and terragrunt to set up and maintain AWS resources including EKS, Lambda, SQS, RDS, S3, Elasticache, VPC, and Transit Gateway in multi-accounts. Work in a scrum team to handle different tasks. Handle infrastructural projects such as designing EKS cluster and migrating workload from fargate to managed nodegroup; migrating message broker from AmazonMQ to self-hosted RabbitMQ; RDS PostgreSQL Version Upgrade from version 10 to 14. - Set up and maintain CI/CD pipelines using Gitlab CI and use shell scripts to automate nodejs applications’ deployment. Using helm chart to manage Kubernetes resource deployment. Set up logging and monitoring for applications using cloudwatch and fluent-bit. - Involve routine application deployments to different environments. Support the platform and troubleshoot application and pipelines’ issues in deployments or reported by other scrum teams.

- Use GitOps approach to manage CI/CD workflow from DEV to PRODUCTION stage for 1viu project. Jenkins works as CI part and argoCD is CD part to deploying helm charts to EKS cluster. Optimizing deployment using autoscaling and topology spread constraints. Using security groups, secret manager and IRSA to control cluster security. Manage EKS dependent service like RDS, Elasticache, SQS. - Provide solution, demo and implementation for EKS monitoring, logging and automation. Deployed blackbox exporter + kube-prometheus-stack + thanos stack for monitoring, loki-stack for logging. And for other production issues, such as DynamoDB cross-account & cross-region backup, achieving zero-downtime in deployment’s rolling update. - Write jenkinsfile and Dockerfile for CI compile and build images, promQL for grafana monitoring, shell scripts for process automation which serves PostgreSQL database creation, data backup and restore, secret manager history version recover. Use go language to consolidate extra resources of helm chart into values.yaml.

- Setup kubernetes cluster on Aliyun. Deploy middleware such as redis cluster, zookeeper via Helm version 3. Migrate stateless service from docker compose and expose service via ingress and SLB(Service Load Balancer). Integrate kubernetes with CI/CD by gitlab-runner. - Support ToC product AQUMON trading system running on docker compose. Use NGINX and HAproxy as reverse proxy. Manage and deploy AliCloud and AWS architecture including ECS, EC2, OSS, S3, SLB. Support CI/CD tools like Jenkins, gitlab. Use Jenkins pipeline and .gitlab-ci.yaml to automate deployment. - Manage VMware Horizon VDI architecture and network infrastructure (WAN and LAN) in Hong Kong office. In charge of WiFi replacement project in the Hong Kong office. Coordinate with vendor to make sure the deployment was on track. Collect and summarize the documents.

- Use AWX Ansible to perform configuration automation. Draft playbook to deploy configuration to specified set of hosts. - Perform MySQL architecture revamp and performance tuning. Setup Mysql multi-instances master-slave replication, write shell scripts to automate backup job and monitor replication status. - Setup new DNS platform with two-layer architecture. Use view to control different clients in zones synchronization and domain resolve. Responsible for daily DNS record changes. - Setup and manage compute engine, app engine in GCP. Coordinate with development team for domain customisations and auto-scale tuning.

- Setup new private cloud platform based on VMware. Design, Install and Configure VMware ESXi and vCenter, shared storage via iSCSI. Perform server consolidation using VMware vCenter Convertor. - Setup server architectures for new service requirement including Apache, Memcached, Redis, Mysql. - Involve in existing platform architecture revamp to achieve resilience and better performance.

- Involve in more than 10 projects as project manager, responsible for scope management, time management and resource management. Detailed project description can refer to attached document. - Work as system engineer deploy VMware architecture, Linux, Windows AD server and Exchange server, Cisco UCS Blade Server, Dell M1000e Blade Server, NetAPP storage and Huawei Oceanstor Storage.

- Setup and configure operation system on server; VM host; load-balancer; firewall; storage. Perform Virtual-to-Virtual (V2V) and Physical-to-Virtual (P2V) to achieve virtualization migration. Write shell script and setup monitoring on service level in HP sitescope and traffic monitoring in MRTG. - Support nowTV server platform with over 700 servers (Including 300 VMs). Manage applications in server like jboss, apache, tomcat, nginx. Troubleshooting problem. Analyze daily support issue to improve server performance and platform stability. - Coordinate with others parties (Product and Developer) to implement nowTV new service projects in order to catch the project schedule. Perform operation acceptance test (OAT) to meet operational requirement.

- Setup and configure operation system on server; VM host; load-balancer; firewall; storage. Perform Virtual-to-Virtual (V2V) and Physical-to-Virtual (P2V) to achieve virtualization migration. Write shell script and setup monitoring on service level in HP sitescope and traffic monitoring in MRTG. - Support nowTV server platform with over 700 servers (Including 300 VMs). Manage applications in server like jboss, apache, tomcat, nginx. Troubleshooting problem. Analyze daily support issue to improve server performance and platform stability. - Coordinate with others parties (Product and Developer) to implement nowTV new service projects in order to catch the project schedule. Perform operation acceptance test (OAT) to meet operational requirement.

Enter City University of Hong Kong for pursuing Master Degree in Information System Management area from Aug, 2015