Rizky Faza

Bandung, West Java | rizkyfaza-remove-@tutanota.com

Interested in SRE and DevOps area, mostly to manage on Software Development Life Cycle and Infrastructure. Excellency to improving infrastructure process with automation such as Infra-as-Code using Terraform and Monitoring using Grafana and Prometheus. Managing the cloud infrastructure within the environment of the substances. And do integration CI/CD to developers. With my last experiences of 3 years, I’m also improving my skills on tech stacks aligned with trending of the development.


Experience

Site Reliability Engineer

December 2023 - Present

PT Ordivo Teknologi Indonesia - Onsite - Contract

Infrastructure Collaboration:
  • Perform research and development to optimize Kubernetes (K8s) clusters, networking such ingress and egress, resulting in a 16% reduction in cloud costs
  • Monitored resource utilization and identified bottlenecks in K8s clusters, leading to a 10% increase in performance
  • Plan and Migrate product service DNS records from Route53 to AWS Cloudflare for improving security layer and SLAs.
Documentation and Communication:
  • Conduct to develop and research for services to improving K8s clusters,manage the process of deployment and streamline the apps management.
  • Monitor, develop, and improve the resources management in K8s clusters, which that can improve and reduce the cost usages on cloud.
  • Manage the migration of some services from one to other providers on costs overview.
  • Processing and collect every execution on the environment and mitigation to make sure every timeline was recorded on the company documentation
  • Create the process of K8s application setup from scratch to make sure any developers have knowledge to execute and develop their own application on the division
  • Create the Incident response form for recording every issues that detected on the company.
C-Level Communication:
  • Facilitate sessions with higher management to align infrastructure strategies with business goals.
  • Develop a streamlined communication process with C-level executives.
  • Provide periodic updates on the overall health and performance of the infrastructure.
Deployment and Configuration Management:
  • Streamline the process of deploying new Helm apps to K8s clusters.
  • Investigate and implement improvements for faster and more efficient deployments.
  • Manage to convert manual configuration on infrastructure to IaC on terms and condition.
Security and Monitoring:
  • Collaborate with senior DevOps to enhance security measures on K8s clusters.
  • Conduct regular security audits and implement necessary adjustments.
  • Monitor the K8s clusters for how many usages of resources on the nodes and make sure we could pinpoint the target of costs also lowering the financial point of view.
  • Troubleshoot the K8s nodes and pods that related of services always down and get known codes such as OOMKilled or Eviction
  • Using Grafana and Prometheus using Blackbox to get all information to make sure every services monitored. Mostly to crawl latency and status of the services.
  • Track every apps throwback error from Sentry and managed the application registered and management.
  • Using Crowdsec Integration into each server that using Wordpress on Public Cloud providers.
Server Management and Application Deployment:
  • Implement best practices for managing and maintaining WordPress server instances, including backup and recovery strategies.
  • Plan, execute, and optimize the deployment of the Room Meeting Booking Page Dockerfile to the SaaS environment.
  • Create Infrastructure automation using Terraform to deploy configuration onto third-party WAF Cloudflare to manage domains, create rate limiters, and manage the WAF on the account.
  • Manage infrastructure deployment to AWS, including Codepipeline, Codedeploy, Codebuild, and ECS services with load balancer ALB within the requested services.
  • Create the Helm Chart for K8s services endpoint to the requested division and deploy it using ArgoCD.
  • Manage the build and deployment base image to Google Artifact Registry using Drone CI and streamline base images for PHP services, pushing them to Harbor Private registry.
Collaborative Issue Resolution:
  • Strengthen collaboration with senior DevOps to efficiently resolve issues on K8s clusters.
  • Document and share lessons learned for continuous improvement.

Software Engineer - DevOps Analyst

May 2023 - Aug 2023

Cargo Community Network Pte. Ltd., Remote - Project Based

Research and Enhancement:
  • Conducted successful research on the REST API Endpoint of Azure DevOps Server, enabling targeted data retrieval to advance DevOps processes.
  • Initiate a research and assisted initiative that led to substantial improvements in the implementation of Nagios XI, enhancing its performance and capabilities.
Documentation and Guidelines:
  • Authored comprehensive documentation outlining software development procedures and DevOps Governance protocols, ensuring clarity and streamlined operations.
Security and Implementation:
  • Write an implemented Terraform scripts to update rule sets for Azure Web Application Firewall (WAF), aligning ARM Template resources with evolving security requirements.
Monitoring and Troubleshooting:
  • Assisted in resolving monitoring challenges within Nagios XI, ensuring uninterrupted operational oversight.

Medior DevOps Engineer

Jul 2022 - Mar 2023

Livecom B.V, Indonesia - Hybrid

Monitoring and Automation:
  • Monitored servers effectively using Grafana + Prometheus, ensuring performance insights.
  • Streamlined tasks with automation using Bash scripts for log and Docker management.
  • Automated log management and Docker orchestration using Bash scripts, saving 2 hours per week in manual work.
Development Collaboration:
  • Collaborated closely with developers to troubleshoot CI build issues spanning React.js, .NET, and Java.
  • Pioneered tailored CI/CD setups for project stacks, enhancing development efficiency.
  • Improved server monitoring using Grafana + Prometheus, providing actionable insights for performance optimization manually around 5%
Infrastructure and Deployment:
  • Orchestrated secure authentication via Keycloak for web apps
  • Managed on-premises servers, ensuring consistent operations.
  • Implemented routing domain strategies for Traefik Proxy, enhancing service accessibility.
Database and Expertise Showcase:
  • Managed robust DB backup and restoration protocols.
  • Collaborate with DevOps Team to integrate database versioning schema changes on Azure DevOps x dbForge to give efficiency around from 1 days to 4 hours
  • Showcased expertise by crafting Docker Images, seamlessly pushing them to Dockerhub.
  • Successfully managed email server, ensuring reliable communication infrastructure.
  • Conducted research on Kafka and Apache James for potential Visual Voicemail applications.

Jr. DevOps Engineer

Jun 2021 - Sep 2022

D-Shore B.V (Merge to Livecom B.V), Indonesia - Hybrid

CI/CD and Infrastructure Management:
  • Created and managed end-to-end CI/CD workflows on Azure DevOps.
  • Oversaw Windows Server environment to ensure seamless operations.
  • Managed infrastructure within Azure environment, including deploying app services and more.
Infrastructure as Code and Troubleshooting:
  • Developed and maintained Infrastructure as Code (IaC) using Bicep and ARM Templates for Azure environment.
  • Addressed technical challenges and troubleshooting issues in software development, particularly related to CI integration.
Integration and Source Control:
  • Integrated third-party tools for effective source code scanning and comprehensive code coverage within Azure DevOps.
  • Managed source database versioning through dbForge, synchronizing databases to Software Versioning Control (git) using scripts.

Skills

Architecture, & Concepts
  • DevOps
  • Configuration as Code
  • Infrastructure as Code
  • CI/CD

Operating System
Linux Server
  • CentOS
  • Ubuntu
  • Debian
  • Redhat OS
  • Oracle Linux
Windows Server
  • Windows Server 2019
  • Windows Server 2022

Programming Languange & DevOps Tools
  • Docker
  • Podman
  • Bash
  • Firebase
  • Powershell
  • Azure Bicep Template
  • GitKraken
  • Helm
  • Git
  • Azure DevOps
  • Github Actions
  • Drone CI/CD
  • CircleCI
  • Azure Resource Manager
  • NPM
  • Node.js
  • Python
  • MySQL
  • MongoDB
  • PostgreSQL
  • Ansible
  • Terraform
  • Pulumi
  • Nginx
  • Apache
  • Tomcat

Platform, Container & Cloud Administration
  • AWS
  • Azure
  • Google Cloud Platform
  • Digital Ocean
  • SonarCloud
  • Mend.io (Former Whitesource)
  • Cloudflare
  • Crowdsec
  • Kubernetes
  • ArgoCD
  • Traefik Proxy
  • Grafana
  • Prometheus
  • Elasticsearch
  • Sentry
  • Keycloak
  • OAuth2 Proxy
  • Vault

Workflow
  • Cross Browser Testing & Debugging
  • Cross Functional Teams
  • Lean Agile Development & Kanban
  • Analyzing Issues & Critical Thinking

Workshop & Certifications

  • AWS Cloud Developing - AWS Academy
    Badge
  • AWS Cloud Quest Badge - AWS Cloud Practicioner
    Badge
  • Linux System Administration (Adinusa - Btech Academy)
  • Docker Fundamentals (Adinusa - Btech Academy)
  • Automation with Ansible (Adinusa - Btech Academy)
  • Container as a Service AKS Engine - Workshop (Indonesia Cloud Computing Association)
  • Cisco CyberOps Associate - Cisco Networking Academy
    Badge

Projects

  • Azure DevOps REST API Research for DevOps Governance

    This project purposed that with understanding the DevOps Governance which that will using REST API for get summarized data of Azure DevOps Server.

  • Docker Image for the Voicemail and Email server

    This project purposes use SMTP, POP3, and also API on purpose to manage voicemail process.
    Link to Docker Image

  • Kubernetes Laravel App

    This project purpose for simulating the real world project cases; Why and how to use the Kubernetes, and manage the Laravel app.
    Link to Repo

  • Azure DevOps - CI/CD for Microsoft Power Platform & Azure Infrastructure

    Assist on developing CI/CD process for Microsoft Power Platform and manage the Terraform script for infrastructure deployment.

  • (Unofficial) Helm Chart for Documenso

    Helm Chart for Documenso; The alternative Opensource for Docusign
    Link to Artifacthub