Rizky Faza

Interested in SRE and DevOps area, mostly to manage on Software Development Life Cycle and Infrastructure. Excellency to improving infrastructure process with automation such as Infra-as-Code using Terraform and Monitoring using Grafana and Prometheus. Managing the cloud infrastructure within the environment of the substances. And do integration CI/CD to developers. With my last experiences of 3 years, I’m also improving my skills on tech stacks aligned with trending of the development.

Experience

Site Reliability Engineer

December 2023 - Present

PT Ordivo Teknologi Indonesia - Onsite - Contract

Infrastructure Collaboration:

Perform research and development to optimize Kubernetes (K8s) clusters, networking such ingress and egress, resulting in a 16% reduction in cloud costs
Monitored resource utilization and identified bottlenecks in K8s clusters, leading to a 10% increase in performance
Plan and Migrate product service DNS records from Route53 to AWS Cloudflare for improving security layer and SLAs.

Documentation and Communication:

Conduct to develop and research for services to improving K8s clusters,manage the process of deployment and streamline the apps management.
Monitor, develop, and improve the resources management in K8s clusters, which that can improve and reduce the cost usages on cloud.
Manage the migration of some services from one to other providers on costs overview.
Processing and collect every execution on the environment and mitigation to make sure every timeline was recorded on the company documentation
Create the process of K8s application setup from scratch to make sure any developers have knowledge to execute and develop their own application on the division
Create the Incident response form for recording every issues that detected on the company.

C-Level Communication:

Facilitate sessions with higher management to align infrastructure strategies with business goals.
Develop a streamlined communication process with C-level executives.
Provide periodic updates on the overall health and performance of the infrastructure.

Deployment and Configuration Management:

Streamline the process of deploying new Helm apps to K8s clusters.
Investigate and implement improvements for faster and more efficient deployments.
Manage to convert manual configuration on infrastructure to IaC on terms and condition.

Security and Monitoring:

Collaborate with senior DevOps to enhance security measures on K8s clusters.
Conduct regular security audits and implement necessary adjustments.
Monitor the K8s clusters for how many usages of resources on the nodes and make sure we could pinpoint the target of costs also lowering the financial point of view.
Troubleshoot the K8s nodes and pods that related of services always down and get known codes such as OOMKilled or Eviction
Using Grafana and Prometheus using Blackbox to get all information to make sure every services monitored. Mostly to crawl latency and status of the services.
Track every apps throwback error from Sentry and managed the application registered and management.
Using Crowdsec Integration into each server that using Wordpress on Public Cloud providers.

Server Management and Application Deployment:

Implement best practices for managing and maintaining WordPress server instances, including backup and recovery strategies.
Plan, execute, and optimize the deployment of the Room Meeting Booking Page Dockerfile to the SaaS environment.
Create Infrastructure automation using Terraform to deploy configuration onto third-party WAF Cloudflare to manage domains, create rate limiters, and manage the WAF on the account.
Manage infrastructure deployment to AWS, including Codepipeline, Codedeploy, Codebuild, and ECS services with load balancer ALB within the requested services.
Create the Helm Chart for K8s services endpoint to the requested division and deploy it using ArgoCD.
Manage the build and deployment base image to Google Artifact Registry using Drone CI and streamline base images for PHP services, pushing them to Harbor Private registry.

Collaborative Issue Resolution:

Strengthen collaboration with senior DevOps to efficiently resolve issues on K8s clusters.
Document and share lessons learned for continuous improvement.

Software Engineer - DevOps Analyst

May 2023 - Aug 2023

Cargo Community Network Pte. Ltd., Remote - Project Based

Research and Enhancement:

Conducted successful research on the REST API Endpoint of Azure DevOps Server, enabling targeted data retrieval to advance DevOps processes.
Initiate a research and assisted initiative that led to substantial improvements in the implementation of Nagios XI, enhancing its performance and capabilities.

Documentation and Guidelines:

Authored comprehensive documentation outlining software development procedures and DevOps Governance protocols, ensuring clarity and streamlined operations.

Security and Implementation:

Write an implemented Terraform scripts to update rule sets for Azure Web Application Firewall (WAF), aligning ARM Template resources with evolving security requirements.

Monitoring and Troubleshooting:

Assisted in resolving monitoring challenges within Nagios XI, ensuring uninterrupted operational oversight.

Medior DevOps Engineer

Jul 2022 - Mar 2023

Livecom B.V, Indonesia - Hybrid

Monitoring and Automation:

Monitored servers effectively using Grafana + Prometheus, ensuring performance insights.
Streamlined tasks with automation using Bash scripts for log and Docker management.
Automated log management and Docker orchestration using Bash scripts, saving 2 hours per week in manual work.

Development Collaboration:

Collaborated closely with developers to troubleshoot CI build issues spanning React.js, .NET, and Java.
Pioneered tailored CI/CD setups for project stacks, enhancing development efficiency.
Improved server monitoring using Grafana + Prometheus, providing actionable insights for performance optimization manually around 5%

Infrastructure and Deployment:

Orchestrated secure authentication via Keycloak for web apps
Managed on-premises servers, ensuring consistent operations.
Implemented routing domain strategies for Traefik Proxy, enhancing service accessibility.

Database and Expertise Showcase:

Managed robust DB backup and restoration protocols.
Collaborate with DevOps Team to integrate database versioning schema changes on Azure DevOps x dbForge to give efficiency around from 1 days to 4 hours
Showcased expertise by crafting Docker Images, seamlessly pushing them to Dockerhub.
Successfully managed email server, ensuring reliable communication infrastructure.
Conducted research on Kafka and Apache James for potential Visual Voicemail applications.

Jr. DevOps Engineer

Jun 2021 - Sep 2022

D-Shore B.V (Merge to Livecom B.V), Indonesia - Hybrid

CI/CD and Infrastructure Management:

Created and managed end-to-end CI/CD workflows on Azure DevOps.
Oversaw Windows Server environment to ensure seamless operations.
Managed infrastructure within Azure environment, including deploying app services and more.

Infrastructure as Code and Troubleshooting:

Developed and maintained Infrastructure as Code (IaC) using Bicep and ARM Templates for Azure environment.
Addressed technical challenges and troubleshooting issues in software development, particularly related to CI integration.

Integration and Source Control:

Integrated third-party tools for effective source code scanning and comprehensive code coverage within Azure DevOps.
Managed source database versioning through dbForge, synchronizing databases to Software Versioning Control (git) using scripts.

Skills

Architecture, & Concepts

DevOps
Configuration as Code
Infrastructure as Code
CI/CD

Operating System

Linux Server

CentOS
Ubuntu
Debian
Redhat OS
Oracle Linux

Windows Server

Windows Server 2019
Windows Server 2022

Programming Languange & DevOps Tools

Docker
Podman
Bash
Firebase
Powershell
Azure Bicep Template
GitKraken
Helm
Git
Azure DevOps
Github Actions
Drone CI/CD
CircleCI
Azure Resource Manager
NPM
Node.js
Python
MySQL
MongoDB
PostgreSQL
Ansible
Terraform
Pulumi
Nginx
Apache
Tomcat

Platform, Container & Cloud Administration

AWS
Azure
Google Cloud Platform
Digital Ocean
SonarCloud
Mend.io (Former Whitesource)
Cloudflare
Crowdsec
Kubernetes
Rancher
ArgoCD
Traefik Proxy
Grafana
Prometheus
Elasticsearch
Sentry
Keycloak
OAuth2 Proxy
Vault

Workflow

Cross Browser Testing & Debugging
Cross Functional Teams
Lean Agile Development & Kanban
Analyzing Issues & Critical Thinking

Workshop & Certifications

AWS Cloud Developing - AWS Academy
Badge
AWS Cloud Quest Badge - AWS Cloud Practicioner
Badge
Linux System Administration (Adinusa - Btech Academy)
Docker Fundamentals (Adinusa - Btech Academy)
Automation with Ansible (Adinusa - Btech Academy)
Container as a Service AKS Engine - Workshop (Indonesia Cloud Computing Association)
Cisco CyberOps Associate - Cisco Networking Academy
Badge

Projects

Azure DevOps REST API Research for DevOps Governance
This project purposed that with understanding the DevOps Governance which that will using REST API for get summarized data of Azure DevOps Server.
Docker Image for the Voicemail and Email server
This project purposes use SMTP, POP3, and also API on purpose to manage voicemail process.
Link to Docker Image
Kubernetes Laravel App
This project purpose for simulating the real world project cases; Why and how to use the Kubernetes, and manage the Laravel app.
Link to Repo
Azure DevOps - CI/CD for Microsoft Power Platform & Azure Infrastructure
Assist on developing CI/CD process for Microsoft Power Platform and manage the Terraform script for infrastructure deployment.
(Unofficial) Helm Chart for Documenso
Helm Chart for Documenso; The alternative Opensource for Docusign
Link to Artifacthub