{
  "basics": {
    "name": "Paul Durnien",
    "headline": "Hybrid Cloud Architect",
    "summary": "Hybrid cloud architect with 20+ years in large-scale enterprise and regulated-sector infrastructure, now designing and delivering on-prem and hybrid Kubernetes platforms. I take customer requirements, however complex, and turn them into a target architecture that fits the business roadmap, then break the work into deliverable stages so automation shows value early. My background spans Linux, networking, storage and automation, so I can solve problems across the whole stack with a cloud-by-default approach. I mentor teams and keep customers and project managers informed throughout.",
    "email": "paul.durnien@gmail.com",
    "location": "United Kingdom",
    "nationality": "British",
    "availability": "Open to contract and permanent roles, UK and beyond",
    "links": [
      {
        "label": "LinkedIn",
        "url": "https://www.linkedin.com/in/pauldurnien"
      },
      {
        "label": "GitLab",
        "url": "https://gitlab.com/pauldurnien"
      }
    ]
  },
  "skills": [
    {
      "group": "Architecture",
      "items": [
        "Hybrid and private cloud design",
        "Solution scoping and requirements definition",
        "Capacity planning",
        "Rack, logical and network diagrams",
        "Data centre procurement",
        "Technical documentation",
        "Confluence",
        "JIRA"
      ]
    },
    {
      "group": "Platforms",
      "items": [
        "Kubernetes",
        "OpenShift/OCP/OKD",
        "Helm",
        "Rook/Ceph",
        "Docker/Podman",
        "Linux"
      ]
    },
    {
      "group": "DevOps Practices",
      "items": [
        "GitOps/ArgoCD",
        "IaC",
        "CI/CD",
        "Terraform",
        "Jenkins",
        "Git"
      ]
    },
    {
      "group": "Automation, Configuration Management & Platform Build",
      "items": [
        "Ansible / AWX",
        "Puppet",
        "Foreman / Katello / Satellite",
        "Bash / ZSH",
        "YAML",
        "SQL"
      ]
    },
    {
      "group": "Linux & Virtualisation",
      "items": [
        "RHEL",
        "Rocky Linux",
        "CentOS",
        "Debian / Ubuntu",
        "SELinux",
        "VMware vSphere",
        "20+ years of Linux and UNIX"
      ]
    },
    {
      "group": "Networking",
      "items": [
        "Cisco",
        "Juniper",
        "Unifi",
        "pfSense / OPNsense",
        "BGP",
        "OSPF",
        "VPN",
        "iptables / netfilter",
        "tcpdump / Wireshark",
        "DNS",
        "NGINX",
        "Apache"
      ]
    },
    {
      "group": "Security",
      "items": [
        "PKI, CA",
        "OpenSCAP",
        "Linux hardening",
        "Audit and accounting",
        "FreeIPA / LDAP",
        "Active Directory"
      ]
    },
    {
      "group": "Design and Deploy Monitoring / Asset",
      "items": [
        "Prometheus",
        "Grafana",
        "CheckMK",
        "Nagios",
        "NetBox",
        "ServiceNow",
        "Salesforce",
        "HP Service Manager / CMDB"
      ]
    }
  ],
  "experience": [
    {
      "role": "Hybrid cloud architect and consultant",
      "company": "HPE",
      "start": "2022",
      "end": "present",
      "summary": "Designing and delivering on-prem and hybrid Kubernetes platforms for large regulated customers.",
      "highlights": [
        "Delivered an OKD-based private cloud for a large regulated programme, converting legacy applications to containers and migrating the whole service onto the new platform. The work involved distributed storage, demanding network requirements and a complex cut-over.",
        "Designed and built the platform on bare metal in an air-gapped environment, resolving the platform's many dependencies without internet access.",
        "Designed the storage architecture: deployed Ceph with Rook and integrated the customer's existing NetApp volumes.",
        "Implemented a GitOps-driven architecture with ArgoCD, so platform and application configuration is declarative and version-controlled.",
        "Designed and deployed Foreman for automated PXE provisioning of bare-metal builds.",
        "Built an Ansible framework covering the entire project for automated deployment and configuration management.",
        "Supported a customer's PKI deployments at scale, delivering automation to remove manual steps.",
        "Designed, deployed and led the replacement of an ageing Nagios estate with CheckMK.",
        "Drive a cloud-by-default approach so applications can move between on-prem and public cloud.",
        "Advise customers and project managers on priorities and progress, and mentor and support colleagues."
      ]
    },
    {
      "role": "Contract infrastructure engineer",
      "company": "Synectra Ltd",
      "start": "2013",
      "end": "2022",
      "summary": "Independent contractor through my own IT consultancy (sole director), delivering in secure, highly technical environments. Client names withheld.",
      "highlights": [
        "On a project running on RHEL systems (2013 to 2018): introduced Puppet Enterprise to bring configuration management to the estate.",
        "Replaced custom monitoring scripts with Nagios-based monitoring platforms.",
        "Managed a growing VM estate and procured Dell VRTX clusters chosen to fit the customer's requirements.",
        "Supported the customer's application and development teams, including XSLT.",
        "Bare-metal provisioning and new system architecture (2018 to 2021): led the introduction of Foreman provisioning with PXE for automated bare-metal builds.",
        "Integrated a Puppet server with Foreman and designed structured yaml data for consistent, maintainable configuration.",
        "Instrumental in the architecture design of a new system to the customer's requirements.",
        "Implemented storage build automation, and built automation in Ansible."
      ]
    },
    {
      "role": "Network engineer",
      "company": "Large enterprise network",
      "start": "2011",
      "end": "2013",
      "summary": "Large-team support of one of the biggest private networks in Europe.",
      "highlights": [
        "Remote administration under strict ITIL change control."
      ]
    },
    {
      "role": "Network engineer",
      "company": "Multinational infrastructure team",
      "start": "2010",
      "end": "2011",
      "summary": "Mission-critical UNIX, Solaris, VMware and Cisco infrastructure across UK, Canada and US teams.",
      "highlights": [
        "Designed and deployed a new Canada depot."
      ]
    },
    {
      "role": "Network engineer",
      "company": "Qualcomm",
      "start": "2007",
      "end": "2010",
      "summary": "UK member of a US team.",
      "highlights": [
        "Built a $1M London co-location environment from bare metal.",
        "Worked a 24/7 NOC shift."
      ]
    }
  ],
  "education": [
    "BSc(Hons) Computing and Internet Technology, Bournemouth University, 2006",
    "HNC/D IT (Networking), Cornwall College Camborne, 2003-2005"
  ],
  "certifications": [
    "Cisco CCNA Wireless (2019)",
    "Cisco CCNA Security (2016)",
    "Cisco CCDA (2013)",
    "Cisco CCNA (2013)",
    "Cisco CCENT (2012)"
  ]
}