
About Me
I have a strong sense of ethics, and zealously advocate for and protect the privacy and security of the users and businesses that I support. I understand the tremendous power and responsibility that comes with my job, and I work hard to exceed expectations and ensure the company's success.
Computers have been a lifelong hobby and passion of mine. I am very fortunate to love the work that I do; coming up with an elegant solution to a complex problem is tremendously rewarding to me. And I get to learn something new every day.
Outside of the office I love to DJ house music and go on long fast bicycle rides, and I find my creative outlet in the Burning Man music/arts community in Brooklyn where I get to help build some really cool things. I enjoy body boarding during the summer, skiing during the winter, and recently learned to kite surf. I also enjoy riding my electric unicycle!
Some people love fast cars. I love fast computers.
Skills
Linux / UNIX
- Extensive knowledge of most major distros, including CentOS 6 & 7, Red Hat Enterprise Linux, Ubuntu/Debian, Gentoo, BSD, and Solaris.
- Kernel performance tuning.
- Strong experience diagnosing and troubleshooting system and application errors, poor performance.
Windows
- Extensive experience with the Windows operating system, from version 3.11 to Server 2012 R2.
- Active Directory implementation, configuration; group policy;
- Implemented a distributed Active Directory environment, incorporating Windows Server Update Service (WSUS)
Networking
- Extensive experience with the full network stack including ARP, TCP, DNS, DHCP, NTP, SNMP, SMTP, etc
- Experienced with NAT, subnetting, VLANs, and VPNs
- Cisco Catalyst, PIX, and ASA setup/configuration, ACL rules
- Cisco Nexus 5000-series 10G switch setup for SAN environments
- Secured proxy servers using Atomic Secured Linux
- Load-balanced, high-availability services using Kemp load balancers, and Apache as a proxy server
Amazon AWS / EC2
- Instance creation/installation
- Virtual network configuration, access lists
- Storage volume recovery and migration
- Snapshot creation & deployment
Performance Monitoring & Alerts
- Extensively customized/configured Zabbix to monitor servers, applications, websites, and tasks
- Created custom monitoring items using PowerShell and bash scripts
- Monitor Windows event logs and alert on specific event codes or user actions
- Monitor built-in and custom Windows performance counters
- Integrate with PagerDuty and StatusPage.io for internal and customer-facing notifications
- Integrated Sumologic, Pingdom, and Smokeping to monitor and analyze network traffic
- Monitor production, dev, QA, etc environments and notify appropriate team
- Experienced with SolarWinds, Wireshark
Application Development
- Managed project to create an iOS phone app; worked with client to identify needs, create mock application, hire a developer, and oversee project to completion.
- Interviewed, hired, and managed two Drupal development teams to create online workflow software for the New York City Clerk's Office and CUNY Macaulay Honors College.
- Developed full-fledged employer/employee management system - applications, hiring process, work assignments, online timesheets, hours tracking, reporting, and more, using Object-Oriented PHP5.
- Worked with the FDNY Developed online workflow for ___ of civilian casualties
- Developed full-fledged data collection, normalization, analysis, visualization, and reporting application for building HVAC automation systems.
- Developed fast, secure API endpoints for reporting and analysis of building data to affiliated researchers.
Security
- Familiar with "PCI" Payment Card Industry Data Security Standard (PCI DSS) security guidelines, architecture, auditing and remediation
- Use MailScanner, Atomic Secure Linux (ASL), Qualys, OpenVAS, Alienvault,
- Implemented two-factor authentication for VPN and e-mail
- SSL certificates for clients and servers (including Apache and VPN); Windows Certificate Server
Virtualization
- Built VMWare ESXi hosts, configured for Active Directory authentication
- Created and managed virtual networks within vCenter and on network devices.
- Provisioned and managed virtual machines on diverse operating systems including Linux and Windows, and virtual appliances including network and security servers.
- Familiar with the LVM logical volume configuration, migration and recovery
Scripting
- Strong experience with bash, PHP, and perl scripting
- Strong experience with regular expressions
- Incorporated 3rd-party applications, datasets, and modules into scripts
- Experience writing scheduled tasks and complex reports using Windows PowerShell
- Experience writing performance data collection scripts using Windows PowerShell
Storage & Filesystems
- Designed and implemented high-performance storage architectures (RAID, iSCSI, MPIO, failover domains, etc)
- Designed and implemented high-performance storage infrastructure (physical disks, disk arrays, 10G networking, etc)
- Knowledge of filesystems, inodes, block size, journaling, partitions, data recovery
- Extensive experience with Dell Compellent Enterprise Storage Center devices
Employment Highlights
November 2024 - Present
New York, New York
Hashicorp
Senior Site Reliability Engineer
- Led quarterly project to refine and implement Service Level Objectives (SLOs) within Datadog. Worked with product teams to identify the metrics which are most impactful to clients; automated the provisioning of SLO monitors using Terraform, and created dashboards that highlight SLO deficiencies. This optimized SLO monitoring made weekly ops review meetings more efficient by reducing the time spent looking at individual metrics and provided a data-based approach for prioritizing tasks.
- Automated the upgrade workflows for core HashiCorp products (Nomad, Consul, and Vault) to ensure security, compliance, and consistency across environments, with Python and Github Actions.
December 2019 - July 2024
New York, New York
ADP (Automatic Data Processing)
Senior Site Reliability Engineer
- Built and maintained multi-account, multi-region, globally-distributed systems in AWS using Infrastructure as Code tools like terraform and Helm, with hundreds of nodes and thousands of Kubernetes pods.
- Built and maintained multi-account, multi-region CI/CD pipeline using tools like Jenkins and BitBucket
- Created performance testing automation and orchestration framework in Python that runs in Kubernetes
- Spent extensive time on performance testing and tuning of AWS cloud environment
- Cost optimization of Kubernetes clusters
- Created/implemented an application performance monitoring library in NodeJs across entire platform using Datadog APM, with distributed tracing capabilities, to allow developers to correlate log events with detailed performance data, and troubleshoot and optimize their code.
December 2018 - October 2019
New York, New York
N26
Senior Site Reliability Engineer
- Built and maintained and automated a globally-distributed, highly-scalable, self-healing microservice environment hosted in AWS, provisioned with terraform, deployed with nomad and spotinst, and monitored by Datadog and ELK.
- Automated the provisioning and deployment of an entirely new environment including infrastructure, core services, credentials, configurations, monitoring, and DNS.
- Developed and maintained full end-to-end CI/CD pipeline, including Jenkins, Github, docker, vault, saltstack.
- Mentored junior SRE teammate in technical skills and best-practices, and especially "soft skills".
- Worked to automate/template the provisioning of an entire AWS region to speed expansion to new markets, while being mindful of the security and compliance regulations of other countries.
January 2017 - August 2018
New York, New York
SiriusXM Satellite Radio
DevOps Engineer
- Migrated all AWS infrastructure, including hundreds of instances and TBs of storage, from an existing to a new AWS account. Designed new environment following best practices for networking, security, and storage, and CI/CD.
- Containerized 20+ microservices using Docker, deployed on AWS Elastic Container Service (ECS) clusters in each environment. Integrated Jenkins with awscli and github to build, push, and deploy the new images.
- Implemented complete Zabbix monitoring solution, including the monitoring of custom datapoints, API endpoints, queues, AWS resources, JMX metrics, website performance.
- Leading Akamai CDN integration to serve audio and website content, to secure assets using Akamai access keys, and to boost the performance of our mobile users, while still preserving our ability to collect user metrics.
- Built and deployed an Elasticsearch-Logstash-Kibana (ELK) log collection cluster, including local collection proxies to improve performance, grok filters to parse logs, and separate Kibana dashboards/visualizations for engineers and developers.
- Build and support multiple database/NoSQL solutions including mongodb, Cassandra, MySQL, postgresql, and redis.
- Support development and production environments for Node, Python, Java, Scala, iOS and Android applications running on services like nginx and tomcat7.
March 2003 - Present
New York, New York
Hyperpipe Technologies
President & Proprietor
- Started as a website/server hosting company running Red Hat Linux 3, shifted to website design and web application development.
- Since 2009, provides technical consultation/resource planning services to the digital advertising/public relations industry.
April 2015 - July 2016
New York, New York
PEX Card
Senior Systems Engineer
- Designed, deployed and managed Dell Compellent Storage Center, iSCSI SAN devices using Cisco Nexus 10G switches for ESXi datastores and SQL Server failover cluster. Trained team-members on setup, administration and troubleshooting.
- Built high-performance Microsoft SQL Server database clusters, including API endpoints and reporting nodes.
- Proficient in CentOS and Ubuntu Linux - performance, kernel tweaks, security, devices, network, scripting, filesystems, etc.
- Built, deployed, and managed roughly 100 VMs on ~10 VMWare ESXi hosts. Configured virtual networks, datastores, vMotioned instances, recovered LVM filesystems. Primarily a Windows Server 2008, 2012, and CentOS 6, 7 environment.
- Familiar with Cisco switch, ASA configuration, VLANs, jumbo frame, network analysis, performance architecture.
- Built highly-available load balanced, failover systems in production and DR environments.
- Built and managed Windows and Linux instances in Amazon AWS EC2.
- Work closely with other team-members to resolve issues, share expertise, get suggestions and feedback, coordinate maintenance, assist with outages, and divide tasks amongst ourselves.
- Grow and administer a distributed Active Directory environment, including security groups and permissions, group policy, network shares, certificate server, RODCs, WSUS, LDAP, Kerberos, and OpenOTP integration.
- Familiar with PCI-compliant architecture, security guidelines, tools, and audit remediation.
- Implemented various logging and performance monitoring tools to analyze and alert on all network, server, and storage devices, including extensive Zabbix customization. Used data to focus on improving poor-performing equipment or services.
- Deployed various security tools including Atomic ASL and Alienvault to ensure cardholder data environment security.
- Wrote complex scheduled tasks, reports, tools, and cleanup scripts in bash, PowerShell, and PHP.
- Perform equipment maintenance and installation, cabling and inventory in the office and datacenter.
- Work with development and QA teams to provision resources, build servers, monitor services, and install software.
- Participate in weekly 24/7 on-call rotation; off-hours maintenance schedule.
- Began implementing Puppet to automate dev/QA deployments to filesystems and services like IIS, RabbitMQ, redis, Apache.
January 2010 - March 2015
New York, New York
City University of New York - Institute for Software Design and Development
Systems Engineer
- Design and maintain a 30-server research & development environment; Cisco PIX and ASA firewalls. VMWare and Xen virtualization; Zabbix monitoring. Red Hat & Ubuntu Linux, Windows IIS & SQL Server. Design IT systems for clients; purchase and install equipment on-site and in datacenter.
- Provide technical consultation on a wide variety of academic, scientific, and government-related projects. Create detailed technical project proposals for government contracts and academic grants: estimate budget and labor; GUI mock-ups, conceptual models, and live demos for clients. Projects have included air quality analysis, solar energy collection, building environmental systems, 3-dimensional dissection simulations, traffic analysis, and hand-held multisensory devices.
- Contribute technical and analytical expertise, provision computational resources for computer science-related Ph.D. research projects, including data collection and warehousing, operating system and application support, security, collaborative applications, visualization software, electronics, sensors, and RISC devices.
- Host and secure dedicated servers for an international collaborative research program with software and equipment from members including IBM, Raytheon, Honeywell, Oxford University, US Army Research Lab, and UK Ministry of Defense.
- Partnered with Intel, HP, and Red Hat to build and oversee the "New York City Open Source Solutions Lab", a RHEL cluster of 4 HP servers with SAN storage used to showcase open-source, "Open Government" applications to local government.
September 2005 - August 2009
Syracuse, New York
The Daily Orange
IT Director | Board of Directors
- Responsible for the IT operations of the independent student newspaper, a 4-floor office with a staff of 50 people. Network, server, workstation installation, troubleshooting, repair. On-call 24/7; addressed frequent night-time outages by implementing capital upgrade of all network and server systems. Directed purchase of all software and equipment.
- Planned, fundraised, and implemented a $30,000 IT infrastructure upgrade at a cost of $10,000, soliciting tools and materials donations. Built rack with Dell servers; SAN, backup storage, UPS, gigabit network, layer-3 switch, and router; rewired entire office with 80 drops of gigabit Ethernet. Virtualized six physical LAMP servers into one using VMWare.
- Improvements in network stability, user permissions, file shares, and server speed saved the editorial staff an average of two hours per night, reduced support calls by 80%, and saved more than $1000 in annual utility usage.
June 2008 - August 2008
Schenectady, New York
General Electric
Information Management Leadership Program Intern
- Optimized Apache, MySQL, Websphere, jBoss and Tomcat performance on Solaris UltraSPARC T2 servers.
- Consolidated disparate team documentation from various platforms onto Mediawiki; instructed teammates on how to migrate their documentation.
Education, Publications, and Certifications
October 2013
Montreal, QuebecOperational Effectiveness in Use of BAS (Building Automation Systems) [PDF]
Int'l Conference for Enhanced Building Operations
Bobker M, Brown T, Thorpe K, Joseph M, Ascazubi M, Essman J
Montreal, Quebec
Bobker M, Brown T, Thorpe K, Joseph M, Ascazubi M, Essman J
November 2011
New York, New YorkRed Hat Certified Technician
New York, New York
July 2005 - May 2009
Syracuse, New YorkSyracuse University
Bachelor of Arts, Political Science
Engineering coursework: Enterprise Systems, Advanced Networking, Systems Administration, CCNA, CWNA
Syracuse, New York
Engineering coursework: Enterprise Systems, Advanced Networking, Systems Administration, CCNA, CWNA
Projects & Research
ADP (2019 - 2024)
- Created performance testing automation and orchestration framework in Python that runs in Kubernetes
- Supports multiple performance testing tools like Locust, JMeter, and K6
- Orchestrates worker pods and nodes, collects, analyzes, reports, and persists output
- Integrates into CICD pipeline to automate performance testing and identify regressions
- Created SDK to enable development teams to create and automate their own tests
- Spent extensive time on performance testing and tuning of AWS cloud environment
- Tested numerous types of AWS and Kubernetes resources, software services, APIs, and more
- Benchmark various instance types/sizes for services like EC2, RDS, EKS, and ElasticSearch
- Determine the most performance and cost-efficient instance types to use for EC2, RDS, EKS, and ElasticSearch
- Reverse-engineered and automated the performance testing of our payroll calculation system. 'Nuff said.
- Cost optimization of Kubernetes clusters
- Create datadog dashboard to calculate/report on service and cluster utilization
- Adopted self-service architecture; document how to use this tool to optimize a service, demoed to entire department
- Worked with service owners to analyze the performance profile of their services and make informed recommendations
- Reduced the number of nodes running in the cluster and increased overall utilization, thereby reducing expense.
- Created/implemented an application performance monitoring library in NodeJs across entire platform using Datadog APM, with distributed tracing capabilities, to allow developers to correlate log events with detailed performance data, and troubleshoot and optimize their code.
PEX Card (2015)
- High-performance Microsoft SQL Server database cluster
- Designed and installed Dell Compellent Storage Center iSCSI SAN with 10G dedicated network and RAID 1
- Built a highly resiliant, distributed Active Directory environment with physically diverse servers that utilized Windows Server Update Services (WSUS), Windows Deployent Services (WDS), Read-Only Directory Controllers, Group Policy and nxlog among other tools for centralized administration.
PEX Card (2015)
Worked with business analysts to generate and import financial datasets, create live visualizations, and a graphical dashboard to display throughout the office.
CUNY Macaulay Honors College (2015)
Student activities fund online application, administrative review, and follow-up documentation and tasks.
City of New York City Clerk's Office Marriage Bureau (2015)
Implemented the OpenKM document versioning system to replace unreliable Subversion. Worked with the New York City DoIT (Department of IT) to deploy securely onto the New York City intranet.
City of New York City Clerk's Office Lobbying Bureau (2014)
Database of current and former (imported, manual entry) individuals and applicants who are certified to notarize documents within the 5 boroughs. Generates bulk and individual letters for legislative approval, notifications and renewals, and prints official cards on custom designed paper.
CUNY Queensboro - LaGuardia & Wagner Archives (2012)
"Fact Of The Day" database & iOS app
NYC Community Air Survey - Queens College (2011)
Normalize and import raw data of various formats into PostgreSQL database, quality control of data, reporting, future schedules.
CUNY IT Specialists Internship Program (2010-2013)
Employment management application written from the ground-up using Object-Oriented PHP5, managed the application and hiring process, improved work assignments closer to home by plotting employers and employees on a map, tracked and reported hours and electronic timesheets, and generated myriad reports.
Daily Orange Advertising Database (2006-2009)
Customer-relations management application written in PHP and MySQL.
Bitcoin market monitoring, analysis and alerting tools (2013)
Wrote a fully-functioning, RFC-compliant, socket-based IRC server (which accepted persistent client connections) and administrative bot using only mIRC script (2004)
Blacknova Traders (open-source turn-based online game in PHP/MySQL) (2003)
IRC weather reporting bot (2002)
Multi-tempo, multi-octave music composer program written in BASIC, run on DOS 6, and output through the PC speaker (1997)
"Big Data" - John Jay College Building Automation System
In 2012, the CUNY Institute for Software Design and Development (CISDD) partnered with the CUNY Building Performance Lab (BPL) and John Jay College (CUNY) to begin a study of the efficiency of the HVAC (heating, ventilation, and cooling) system of their newly-unveiled 12-story high-rise tower. Each group had a goal: CISDD's ultimate goal was to create a machine learning system that could predict the optimal settings for the system. BPL sought to develop, test, and document new methods of reducing utility usage. And John Jay sought to reduce utility usage, improve efficiency and responsiveness, and justify additional expenses. This presented several challenges: collecting the data, importing it into our system, storage to keep it on, a database powerful enough to query efficiently, and the software to analyze and report it with.
Opened in the fall of 2011, the John Jay College Extension is a 12-story glass tower with 4 basement levels. It's "building automation system" (BAS) was manufactured and installed by Siemens, which controls all segments of the heating/cooling system, including the cooling towers and chillers on the roof, the outside air intake in the "penthouse", the air handlers and damper controllers on each floor, and the steam heating system. The system is controlled by creating a policy on an administration server/console, and pushing that policy to the "field control units" over a TCP/IP management network. The field control unit implements the policy, and controls the actual opening and closing of the valves/circuits to meet the temperature setpoint for that zone in response to its temperature sensor data. The server/console used by the building engineer only performs two functions: manages and pushes temperature setpoints and control policies, and displays a live overview of current system sensor values; it is a very basic interface and application. Since the intelligence of the building automation system lies at the edge (field control units), these devices only have the memory space to collect a very limited number of datapoints, and they must be polled by the server/workstation by a report, that can only be run manually.
We sniffed the BAS management network to try and intercept sensor data packets, but were unable to decipher them. The Building Performance Lab has been working with Siemens to try and collect those packets independently, and the idea is to develop an appliance that sits on the network and live-polls all (requested) sensors. In the meantime, the only means to collect consistent data is to have an intern on-site to manually transfer the data to CISDD servers. A script that I developed then sanitizes, normalizes, catalogs, generalizes, and imports that data into a MySQL database. Towards the end of my tenure, we were exploring the MongoDB NoSQL database to expand our data model to new buildings, devices, and sensors at other campuses, like our new partnership with the City College of New York (CUNY).
The most fun part of the project for me was developing the software that we would use to collect and analyze the data. I built an entire catalog and visualization system that would import report files and record datapoints as a model of 'report'->'dataset'->'sensor'->'datapoint'. Using the d3, Highcharts, Chart.js, and jQuery libraries, I built a responsive AJAX application that organized buildings, floors, sensors, reports, and datasets in an easy-to-use interface. It can visualize data in many different types of formats, and generate visualizations and reports based on user-defined parameters. Some reports were tailored to output in a unique format for use with a different application used by the BPL.
Some of these novel visualizations included:
- Using a scatter plot to correlate sensors with a similar range of values. The minimum value is plotted on the X scale and the maximum value is plotted on the Y scale. It is most useful to plot this on two separate graphs: one using a logarithmic scale to identify sensors with high values (like 100,000 KWh), and one on a normal scale with maximum values of, say, 10000. For example, a sensor whose values range between -40 and 130, or especially between 0 and 110 is probably a temperature sensor. A sensor that has values between 0 and 100 is probably a percentage sensor, which probably indicates the amount that a valve/damper is open or closed or the percentage of maximum speed that a motor is operating at. A sensor that is in the +100,000 range is probably cumulative electrical usage of major system components, like the cooling towers on the roof.
- Use a 12-month calendar to visualize data health/completeness by using darker/lighter colors to indicate how many datapoints are available for each day.
- Use a rectangular heatmap to represent 0-24 hours / 365 days, to visualize the heating and cooling trends that take place from morning to night and from season to season, for every temperature sensor. This also visualizes the different heating/cooling patterns that take place on regular class days or on weekend/vacation days when there are fewer people in the building.
Air handler units (AHUs) are large blowers (typically 3 or 4 per floor) that contain several filters, and distribute fresh air coming from the outside air intake on the roof to a section of ducts. One novel way that we found to apply big data analysis was to identify dirty filters by comparing the air pressure on each side of those filters - a large discrepancy probably indicates a dirty filter.
An eventual goal of this project was to use predictive analysis and machine learning to try and use many years of building and weather data to estimate the utility usage and optimal system settings for use on hot/cold days, and in relation to solar exposure (the sides of the building on which the sun shines heat up more than the sides that do not, and at different times of day). I worked closely with our PhD researchers to define the best methods and datapoints to compute and best problems to try and tackle.
I created two APIs for our researchers: one that output JSON data describing the objects in the system (building, report, dataset, sensor, datapoint), and another that allowed them to run queries and custom reports, and returned values in CVS or JSON format. They used this to construct an elaborate R application that would output various scenarios based on historical data and recommend optimized setpoint values to reduce utility usage and speed up system responsiveness.
October 2013
Montreal, QuebecOperational Effectiveness in Use of BAS (Building Automation Systems) [PDF]
Int'l Conference for Enhanced Building Operations
Bobker M, Brown T, Thorpe K, Joseph M, Ascazubi M, Essman J
Montreal, Quebec
Bobker M, Brown T, Thorpe K, Joseph M, Ascazubi M, Essman J
NYC Taxi & Limousine Commission (TLC)
Trip Efficiency Study Use taxi trip data (one record per cab ride) to determine if cab drivers are taking the most efficient route, or if they are overcharging passengers.
Trip Search Engine Create a web interface and application controller capable of search of +1 billion records
Taxicab messaging system Created a web application through which the TLC can send text messages to taxi cab consoles based on their geographic (GPS) position to alert on traffic, accidents, and other important information.
Fire Department of New York (FDNY)
Civilian casualty report Electronic workflow efficacy to replace the 10+ page paper report that must be completed and approved by 5 ranks of officers, for each civilian casualty in an FDNY-involved incident.
NYC Metropolitan Transit Authority (MTA)
Express bus service How long can a traffic light remain yellow for a bus to pass through, without impact to the surrounding traffic grid? Analyzed the bus trip logs of the M1 Manhattan express bus over several months to determine constraints, rates of speed, and model traffic light timing under different scenarios.
CUNY - Queensboro Community College
Solar reflectance Wrote a proposal on tools and methods to collect solar reflectance data from the rooftop of Queensboro Community College, then determine the ideal placement of solar panels. The tools and methods that were developed were demonstrated to and shared with professors and officials at other universities to apply and improve upon.
CUNY - John Jay College
Building HVAC automation system Extensive "big data" research project that covered everything from the firmware on the data collection sensors in the ceiling, to the normalization and import of that data into various formats/databases, the development of a robust visualization and analysis application using the 'd3' and 'Highcharts' libraries among others. Generated a wide variety of visualizations and reports, managed datasets, tracked weather data, and much more. Utilized SQL and NOSQL solutions including mongodb. Worked with doctoral researchers within my department as well as at the CUNY Institute for Urban Systems to start implementation of machine learning and predictive analysis. This is a totally awesome project!







1
2
3
4
5
6
7
