basics:
  name: Paul Durnien
  headline: Hybrid Cloud Architect
  summary: Hybrid cloud architect with 20+ years in large-scale enterprise and regulated-sector
    infrastructure, now designing and delivering on-prem and hybrid Kubernetes platforms.
    I take customer requirements, however complex, and turn them into a target architecture
    that fits the business roadmap, then break the work into deliverable stages so
    automation shows value early. My background spans Linux, networking, storage and
    automation, so I can solve problems across the whole stack with a cloud-by-default
    approach. I mentor teams and keep customers and project managers informed throughout.
  email: paul.durnien@gmail.com
  location: United Kingdom
  nationality: British
  availability: Open to contract and permanent roles, UK and beyond
  links:
  - label: LinkedIn
    url: https://www.linkedin.com/in/pauldurnien
  - label: GitLab
    url: https://gitlab.com/pauldurnien
skills:
- group: Architecture
  items:
  - Hybrid and private cloud design
  - Solution scoping and requirements definition
  - Capacity planning
  - Rack, logical and network diagrams
  - Data centre procurement
  - Technical documentation
  - Confluence
  - JIRA
- group: Platforms
  items:
  - Kubernetes
  - OpenShift/OCP/OKD
  - Helm
  - Rook/Ceph
  - Docker/Podman
  - Linux
- group: DevOps Practices
  items:
  - GitOps/ArgoCD
  - IaC
  - CI/CD
  - Terraform
  - Jenkins
  - Git
- group: Automation, Configuration Management & Platform Build
  items:
  - Ansible / AWX
  - Puppet
  - Foreman / Katello / Satellite
  - Bash / ZSH
  - YAML
  - SQL
- group: Linux & Virtualisation
  items:
  - RHEL
  - Rocky Linux
  - CentOS
  - Debian / Ubuntu
  - SELinux
  - VMware vSphere
  - 20+ years of Linux and UNIX
- group: Networking
  items:
  - Cisco
  - Juniper
  - Unifi
  - pfSense / OPNsense
  - BGP
  - OSPF
  - VPN
  - iptables / netfilter
  - tcpdump / Wireshark
  - DNS
  - NGINX
  - Apache
- group: Security
  items:
  - PKI, CA
  - OpenSCAP
  - Linux hardening
  - Audit and accounting
  - FreeIPA / LDAP
  - Active Directory
- group: Design and Deploy Monitoring / Asset
  items:
  - Prometheus
  - Grafana
  - CheckMK
  - Nagios
  - NetBox
  - ServiceNow
  - Salesforce
  - HP Service Manager / CMDB
experience:
- role: Hybrid cloud architect and consultant
  company: HPE
  start: '2022'
  end: present
  summary: Designing and delivering on-prem and hybrid Kubernetes platforms for large
    regulated customers.
  highlights:
  - Delivered an OKD-based private cloud for a large regulated programme, converting
    legacy applications to containers and migrating the whole service onto the new
    platform. The work involved distributed storage, demanding network requirements
    and a complex cut-over.
  - Designed and built the platform on bare metal in an air-gapped environment, resolving
    the platform's many dependencies without internet access.
  - 'Designed the storage architecture: deployed Ceph with Rook and integrated the
    customer''s existing NetApp volumes.'
  - Implemented a GitOps-driven architecture with ArgoCD, so platform and application
    configuration is declarative and version-controlled.
  - Designed and deployed Foreman for automated PXE provisioning of bare-metal builds.
  - Built an Ansible framework covering the entire project for automated deployment
    and configuration management.
  - Supported a customer's PKI deployments at scale, delivering automation to remove
    manual steps.
  - Designed, deployed and led the replacement of an ageing Nagios estate with CheckMK.
  - Drive a cloud-by-default approach so applications can move between on-prem and
    public cloud.
  - Advise customers and project managers on priorities and progress, and mentor and
    support colleagues.
- role: Contract infrastructure engineer
  company: Synectra Ltd
  start: '2013'
  end: '2022'
  summary: Independent contractor through my own IT consultancy (sole director), delivering
    in secure, highly technical environments. Client names withheld.
  highlights:
  - 'On a project running on RHEL systems (2013 to 2018): introduced Puppet Enterprise
    to bring configuration management to the estate.'
  - Replaced custom monitoring scripts with Nagios-based monitoring platforms.
  - Managed a growing VM estate and procured Dell VRTX clusters chosen to fit the
    customer's requirements.
  - Supported the customer's application and development teams, including XSLT.
  - 'Bare-metal provisioning and new system architecture (2018 to 2021): led the introduction
    of Foreman provisioning with PXE for automated bare-metal builds.'
  - Integrated a Puppet server with Foreman and designed structured yaml data for
    consistent, maintainable configuration.
  - Instrumental in the architecture design of a new system to the customer's requirements.
  - Implemented storage build automation, and built automation in Ansible.
- role: Network engineer
  company: Large enterprise network
  start: '2011'
  end: '2013'
  summary: Large-team support of one of the biggest private networks in Europe.
  highlights:
  - Remote administration under strict ITIL change control.
- role: Network engineer
  company: Multinational infrastructure team
  start: '2010'
  end: '2011'
  summary: Mission-critical UNIX, Solaris, VMware and Cisco infrastructure across
    UK, Canada and US teams.
  highlights:
  - Designed and deployed a new Canada depot.
- role: Network engineer
  company: Qualcomm
  start: '2007'
  end: '2010'
  summary: UK member of a US team.
  highlights:
  - Built a $1M London co-location environment from bare metal.
  - Worked a 24/7 NOC shift.
education:
- BSc(Hons) Computing and Internet Technology, Bournemouth University, 2006
- HNC/D IT (Networking), Cornwall College Camborne, 2003-2005
certifications:
- Cisco CCNA Wireless (2019)
- Cisco CCNA Security (2016)
- Cisco CCDA (2013)
- Cisco CCNA (2013)
- Cisco CCENT (2012)