Brian Ji

Staff Site Reliability Engineer (SRE)

• Led backend architecture and secure implmentation of B2B SAML SSO with partners using Cognito and one-time-passcode authentication using Cognito Custom Auth Lambda Triggers.

• Led proactive load-testing of our APIs to identify bottlenecks at scale, and refactored problematic code and fine-tuned scaling configurations to ensure our APIs remain highly performant while serving millions of user and partner requests per day.

• Implemented expanded Cloudwatch metrics, alarms, and dashboards alongside automated integration tests. Implemented PagerDuty and on-call rotation to enable real-time alerting on service degradation.

• Implemented CI/CD pipeline optimizations resulting in 50% reduction in build/deploy times, and deployed additional pipelines eliminating the need for any manual deployment procedures.

• Analyzed AWS resources to identify high cost areas. Refactored inefficient architectures, cleaned up orphaned resources, and optimized sizing and scaling using expected peak load metrics resulting in more than $50k/yr recurring savings with no user impact.

Senior DevOps Engineer

• Responsible for leading most infrastructure, security, and CI/CD initiatives for a ~25 employee healthtech startup. Owned AWS architecture that leveraged Kubernetes (EKS), CloudFront, S3.

• Led mobile-app automated deployment pipeline implementation using Fastlane and Github Actions eliminating manual builds/deployments and 50% reduced build/deploy speed to Apple/Android app stores.

• Led a successful SOC 2 audit and advised leadership on information security (IT and cloud/platform). Also led implementation of company-wide SSO, MFA, MDM, and EDR to protect customer PII and PHI.

• Managed one direct report and assisted in technology leadership, strategy, and roadmap initiatives.

DevOps Consultant/Engineer

• Led the discovery, design, migration, and implementation of a telehealth startup's React/Node web application across greenfield AWS accounts (migrated from Digital Ocean) using entirely AWS-native services. Maintained DevOps best-practices and SOC 2 security requirements, with the entire engagement including production cutover/validation completed in 6 weeks.

• AWS Architecture components include:

Frontend: S3, CloudFront, ACM, Web Application Firewall
Backend: Elastic Load Balancer, EC2, RDS (Postgres), Elasticache (Redis), Web Application Firewall, VPC Peering, SSM Parameter Store
DevOps and CI/CD: CloudFormation, CodeBuild, CodeDeploy, CodePipeline, GitHub
Security and Observability: Control Tower, GuardDuty, Inspector, WAF, SNS, SSO, CloudWatch Logs, EventBridge, and more

• Led implementation of Thinkbox Deadline 2D/3D render farms on AWS deployed using CDK leveraging EC2 spot instances.

DevOps Consultant/Engineer

• Implemented features for an enterprise healthcare software client enabling developer self-service IAM in AWS using permissions boundaries, and automated AWS multi-account networking using cross-account Lambda functions with boto3 SDK API calls.

• Languages/technologies utilized: CloudFormation, CodePipeline, Python (boto3, Troposphere), and Service Catalog

Consultant, Software Solutions

• Advised a public biotechnology and life sciences client on best-practices IAM security including deploying Azure AD MFA with Conditional Access and Identity Protection Policies for 2000+ employees, while ensuring healthcare security standards (GxP) are met.

• Eliminated $200k/yr of recurring licensing spend using PowerShell and Azure Automation to automatically identify and remediate insecure, dormant, and occasionally privileged IAM accounts.

Consultant, Cloud and Infrastructure

• Led multiple cloud modernization initiatives for a financial investment firm leveraging Azure Automation (PaaS) and implemented cloud-native enterprise security and compliance products using Office 365 and Azure AD.

• Contributed to an enterprise data architecture assessment for a client preparing for IPO. Collaborated with a team of consultants to perform discovery meetings with client Directors and Executives and drafted an assessment/recommendation.

Information Technology Specialist

• Managed IT systems infrastructure supporting 90 employees across five locations in the US. Led multiple internal projects including PowerShell IAM automation, Exchange Online migration, and implementing SIEM dashboards.