Jonathan Baugh

- Software development of the ROIKOI Refer platform using Python and Django with Postgres, ElasticSearch, and Redis. - Transitioned to Docker containers orchestrated with Amazon ECS on Fargate and EC2 instances to balance cost and scalability. - Continuous integration using Jenkins. Our testing pipeline included static analysis, vulnerability scanning, unit testing, and integration testing for web and Android app using Selenium and Appium. - Load testing using JMeter and BlazeMeter. Using SumoLogic, AWS dashboards, and New Relic we were able to identify performance bottlenecks and ultimately improve performance and lower infrastructure costs. - Implemented a web application firewall (WAF), nightly vulnerability scanning, automated security updates, and security testing integrated with our build pipeline. - Facilitated multiple security audits and penetration testing. Worked alongside the development team to implement fixes for security findings and verified their resolution. - Fully automated our environment provisioning using Ansible and Terraform. Dedicated environments for customers or testing can now be provisioned in about 30 minutes instead of 3 days.

- Built dashboards and monitoring for Splunk and provided training to the engineering teams. - Worked with the DevOps team to adopt Agile practices which are most useful to DevOps teams. This included more structured retrospectives, documenting postmortems, and moving to “Scrumban” which is better suited to DevOps workflows. - Assisted with the setup and deployment of a Redis cluster by creating custom tests for measuring the throughput and resiliency of the cluster. - Developed a Python command framework for managing many day-to-day tasks such as managing DNS records in Cloudflare, validating proprietary configuration files, and interacting with the on-premise v-cloud solution.

- After seeing lots of common issues among other development teams in my first year at Whole Foods I worked with management to build up a DevOps team of 7 engineers. - Developed a custom tool for programmatically assessing our AWS setup according to the CIS AWS recommendations. Approximately 75 tests could be run against all resources in every region to ensure configuration conformed to best security practices. - Evaluated tools related to log aggregation, application performance monitoring, and alerting. After tools were selected I provided guidance to other DevOps engineers and developers regarding how to best implement the solution. I provided training where necessary so that we could get the most out of the tools. - Provided security training for the development teams and larger IT organization.