Containers (Docker/Kubernetes)

• Developed and launched the company's first observability dashboard, providing real‑time system performance insights and data visualization on the large office TV.
• Deployed and maintained 20 Docker containerized applications, troubleshooting with Podman and Kubernetes, and managing R‑based apps on Google Cloud and AWS.
• Automated SSL/TLS certificate creation for 100 Docker applications, ensuring secure connections across Ubuntu Linux hosts.
• Built GitHub Actions CI/CD pipelines with a distroless production frontend image and multi‑environment promotion.
• Cut systemd sandbox exposure across every unit this platform installs — a dead‑man's‑switch service from 9.6 UNSAFE to 1.5, an internet‑facing git forge from 8.3 EXPOSED to 1.5 — and added a converge‑time parser check after finding a misspelled directive silently ignored in three unit templates.
• Deployed a container plane on Podman and Quadlet under systemd rather than Docker, because Docker publishes container ports above the host firewall's own rules — and gave deploys an unprivileged user with one fixed command instead of root.

This work is part of what we offer as Containerization & Orchestration, DevOps & CI/CD Automation, Security & Access Management, Cloud Infrastructure & Migration, Data Analytics & BI Dashboards, Infrastructure as Code, Site Reliability & Monitoring and System Administration.

Building something that needs this? Get in touch.