David Yang

1. SharePoint Build server upgrade project Backgroud: The current sharepoint build pipelines run in Jenkins server and the Jenkins server is ready to retire. Implementation: Migrate SharePoint release pipelines from Jenkins server to Azure DevOps pipelines for sharepoint team and document the process. Also write the power automation flow to send notification to Teams channel when site build is done. 3. Azure Synapse Analytics project Background: Ontario gov data center has lots of data in the legacy system. Implementation: a. Use Bicep to spin up Azure keyvault, log analytics, storageaccount, azure synapse analytics, and sql pool with application insight. b. Create CI pipeline for artifacts, CD pipelines for sql pool, wheel job and synapse workspace c. Create fact table and dimension tables for data analysis purpose d. Develop Azure data factory pipelines to extract data from various data sources, transform it according to the business rules. e. Implement source control for Azure data factory pipeline using Azure DevOps f. Work with Azure data lake storage for loading data into azure data warehouse g. Create CostPerQuery query to track the synapse queries and costs of them in different workspaces (Dev, QA, Staging and Prod). h. Create different Azure AD groups and assign the different role assignments to them using RBAC. i. Use Azure monitor to monitor Metrics (Azure datafactory), and create alerts. j. Use Dynamic Data Masking to secure the PII data in SQL pool. 4. OpenShift Integration and Management Background: Enhancement of containerized application management and orchestration. Implementation: Deployed and managed Azure RedHat OpenShift clusters to streamline container orchestration and application deployment. Automated deployment processes and integrated CI/CD pipelines within OpenShift for efficient application delivery. Implemented monitoring, logging, and security practices within OpenShift environments to ensure robust operations

1. Digital Info Management Analyst project Background: MTO legacy system contains lots of data and current data processing time is very long and not efficient. This project aims to improve data process efficiency with security measurement in place. Implementation: a. Architect and write terraform scripts to spin up DIMA (Digital Info Management Analyst) portal infrastructure using Azure application gateway(WAF), app service, Azure datafactory, API management, storage account, Azure monitor. b. Data migration of moving old data from Oracle database to Azure Synpase analytics: access current data env, define migration strategy(rehost/refactor/rebuild), create migration plan(phases) and execute (ETL process with data pipeline) and valid the migration. c. Use packer and ansible to build customized PowerBI VM images for Dev, UAT, Prod environments d. Build and deploy CICD pipelines to deploy Azure cloud infrastructures to Dev, UAT, Prod envs. e. Build and deploy Data pipelines to deploy the database changes to Dev, UAT, Prod envs.

 Technical lead for SRE/DevOps 1. Built Gitlab CI/CD pipelines using YAML for frontpage and backend APIs. The front page: build and deploy Angular website into AWS S3 bucket with CloudFront; the backend: docker build and push the docker image into AWS container registry and deploy the docker image into Kubernetes cluster. 2. Hands on setup AWS infrastructure using AWS CDK (S3, ALB, API management, EKS, Fargate, Lambda, DynamoDB, VPC, Security Group, Internet Gateway, Route53) for Dev and Prod environments. 3. Harden the Kubernetes clusters by using the network policy, RBAC, and least pod privilege. And also harden the build pipeline by adding Snyk scan in the build pipeline. 4. Study the current cluster setup and migrate current K8S cluster managed by Rancher to AWS ECS Fargate (Serverless) with autoscaling capability using AWS CDK (Cloud Development Kit) to rewrite dev/prod infrastructures. 5. Fixed the production performance monitoring issue in Elastic cloud by increase instance type and monitor the cluster metrics 6. Wrote lambda functions: 1) automatically backup EC2 instances in AWS, 2) Backend APIs using Node.js to process the frontpage incoming requests to API Gateway 7. Production support: Fixed/monitor the 504 error of redirect service using cloudwatch with S3 bucket; Fixed the mongodb slow response issue by create/update indexes; Fixed Gitlab CI/CD pipeline and restored the gitlab server from crash using snapshot image; Fixed the kubernetes pod OOMKilled issue. 8. Load testing for Dev env to establish the baseline and monitor Dev and Prod envs using Grafana.  Technical lead for Lucid BuySideAPI project. 1. Develop RESTful APIs to process the incoming msgs in AWS SQS and deploy it into API Gateway to start/stop surveys on third party servers using Angular and node.js. 2. Create stories of project and then arrange them to sprints with estimated hours of each story. 3. Organize Scrum and Grooming meetings to address road block with developers

 New function development/modification using ASP.net, C#, VB.net  Developed automatic continuous integration/deployment pipelines using Jenkins  Build Docker images for development, staging and production servers  Use SonarQube to test source code quality  Deploy Docker images to AWS EKS (Kubernetes) cluster with ALB (load balance) for auto scaling.  Use Ansible and Packer to create customized image for Ec2 instance.  Write shell scripts to configure and integrate the new machines using Ansible.  Developed new functions (Standard based inspection, Catch the Ace inspection, etc) to AGCO LEIRS, LOTS web-based applications using C#, VB.Net, ASP.Net  Software performance testing using JMeter to address potential system bottleneck.

 Technical leader for Bally, Konami, KCMS, IGT Megabucks and source code security review  Performed penetration testing for Casino backend control system (KCMS) and wide-area linked progressive system (Megabucks) 1. Use john to crack login password 2. Use Openvas for vulnerability scanning 3. Use SQLman to perform SQL injection attack 4. Use Nmap to scan open ports 5. Use SSLscan, SSLyze to scan SSL connection weakness for Https attack  Developed field verification tools (MAPSX, BLL) using Visual C++ to verify the critical server file signatures using SHA1 algorithm (data security).  Designed and developed critical MediaVerify tool for AGCO EGI daily field inspection task using Java, Linux and embedded database Derby.  Migration and cleaning data from SQL Server database into embedded database using ETL process: extraction, transformation and loading.  Extensive multiple platforms testing experience: Bally, Konami, WMS, IGT, Atronic.  Technical exposure to information security, encryption/decryption.  Training of ISO 17025 and familiarity with SQA environment

 Responsible for the requirement analyst, design, implementation and testing phases of the SMC(System Management Centre) external interfaces using TCP/UDP/Serial link(RS-232).  Developed Perl testing scripts to simulate remote external system sockets for testing purpose.  Developed the GDG(Guideway Data Generator) software. The GDG software uses highly flexible Excel spreadsheets to input guideway data. The repository is saved by XML. The GDG not only generates C files, but also creates the AutoCAD compatible DXF file.  Writing Perl scripts to automatically test SMC GUI.  Enhanced the TVS(Track Vehicle Simulator) software: Fixed the C++ memory leak problem. The TVS software is used to test other vital software.  Performed source code merge and code check between different baselines using Rational Clearcase.  Performed software requirement change/update using Rational DOORS.  Performed the software bug tracks using Rational ClearQuest.