Ed Engelking

skills

What I've picked up along the way

Thirty years of hands-on work in cloud architecture, DevSecOps, and software development: standing systems up, hardening them, and being the one who got paged when they broke. Search for something specific below, or click a category to browse.

Full breakdown

135 matches

Cloud & Infrastructure

  • AWS (EC2, RDS, S3, EKS, Lambda, IAM, VPC, ECS)
  • AWS CloudWatch, Organizations & Cognito
  • AWS CloudFront
  • Google Cloud Platform
  • Microsoft Azure
  • DigitalOcean / Hetzner
  • Rackspace (Legacy)
  • Multi-Cloud Architecture
  • Multi-Region & High Availability Architecture (99.99% SLA)
  • Automated Failover & Geofencing
  • Disaster Recovery
  • Air-Gapped Deployments
  • On-Premise Virtualization (VMware, Proxmox, SUSE)
  • Cost Optimization (25-73% reductions)
  • Cloudflare CDN / WAF / DDoS

Containers & Platform Engineering

  • Kubernetes (Operators, CRDs, Helm, CSI, Calico CNI)
  • Docker / containerd / Podman
  • Docker Swarm
  • LXC / LXD
  • skopeo / crane (OCI Image Tooling)
  • Rancher MCM (5+ years)
  • ArgoCD / Flux / Rancher Fleet (GitOps)
  • Longhorn Distributed Storage
  • Immutable OS (bootc, Containerfile-Based Builds)
  • OS Image Generation (QCOW2, RAW, ISO)
  • Istio Service Mesh
  • Microservices Architecture
  • Internal Developer Platforms (self-service, pre-Backstage)

Security & Compliance

  • DevSecOps Practice
  • Security Architecture
  • Zero Trust Security
  • NIST 800-53 / NIST 800-171
  • STIG / DISA Compliance Automation (94-96% audit success)
  • SOC2 Type II
  • PCI-DSS
  • GDPR
  • CIS Benchmarks / OpenSCAP
  • NBDE — Network Bound Disk Encryption (Tang/Clevis/LUKS)
  • Container Security (Trivy, Grype, Twistlock/Prisma)
  • Runtime Security (Falco)
  • SAST (SonarCloud/SonarQube)
  • DAST (Detectify, Dell SecureWorks)
  • Cloud Security Posture (ScoutSuite, Prowler)
  • Supply Chain Attestation (cosign/Sigstore, SBOM, Build Provenance)
  • ATO / cATO Process
  • Classified Environment Deployments
  • IAM, RBAC, OIDC, SAML, LDAP / Active Directory, Okta SSO

Programming & Engineering Practices

  • Go
  • Python
  • TypeScript / JavaScript
  • PHP
  • Bash / Shell Scripting
  • SQL
  • Git & Version Control
  • Agile / Scrum / Kanban
  • Domain-Driven Design, CQRS, Event Sourcing
  • Multi-Stage Container Builds (60% size reduction)
  • A/B Testing Infrastructure

DevOps & CI/CD

  • GitLab CI/CD
  • GitHub Actions
  • Jenkins / Hudson / Microsoft TFS
  • Terraform
  • Ansible
  • Chef / Puppet
  • Crossplane
  • Kickstart Automated Provisioning
  • AWS CDK / Azure SDK / GCP Client Libraries
  • Harbor (OCI Artifact Registry)
  • Ephemeral Testing Environments
  • One-Button Production Deployments
  • Kubernetes CronJob Workflow Orchestration

Observability & Operations

  • Prometheus (Custom Exporters)
  • Grafana
  • Datadog (200+ Monitors)
  • Nagios / New Relic
  • ELK / EFK Stack
  • Loki / Fluentd / Fluent Bit
  • PagerDuty
  • Sentry.io
  • NOC-Style Monitoring Walls
  • MTTR/MTTD Optimization (2hr to 15min)
  • SRE Principles & 24/7 Incident Management

AI & Machine Learning

  • Multi-Agent LLM Platform Development
  • Prompt Engineering
  • Agent Orchestration
  • Anthropic Claude API / OpenAI API Integration
  • AI-Powered Development Workflows (Claude Code, Copilot, Cursor, Windsurf, ChatGPT)
  • ML-Based Threat & Anomaly Detection
  • Document Processing & OCR (Tesseract)
  • PII Detection & Dynamic Redaction
  • Structured Data Extraction

Databases & Data Engineering

  • PostgreSQL (Sharding, Clustering)
  • Elasticsearch (1B+ Records, Sub-200ms)
  • MariaDB / MySQL (Galera Replication)
  • Redis
  • RabbitMQ
  • MongoDB
  • DynamoDB
  • ETL Pipelines (AWS Glue, Apache NiFi)
  • Python / Pandas Data Processing

Systems, Networking & Virtualization

  • Linux (RHEL, SUSE SLES, Ubuntu, Debian)
  • systemd Service Management
  • Windows Server / Desktop, macOS
  • Routing, Switching, Firewalls, VPN, DNS
  • Kea DHCP / dhcpd / iPXE Network Boot
  • Nginx / Apache / Varnish / HAProxy
  • Cisco, Ubiquiti, HP ProCurve, Ruckus Wireless
  • VMware, Hyper-V, KVM, Proxmox, Multipass
  • Calico CNI / Open vSwitch

Leadership & Strategy

  • Engineering Management
  • Engineering Team Leadership (0 to 25+ engineers)
  • Founding Engineer / 0-to-1 Team Building
  • Technical Strategy & Roadmap
  • Executive Collaboration (CTO/CEO/CFO)
  • Cross-Functional Collaboration
  • Hiring & Performance Management
  • Mentoring & Succession Planning
  • Agile Transformation & Scrum Facilitation
  • Change Management
  • Budget Management ($1M-$2.8M)
  • Vendor Management & Negotiation
  • Business Development (RFP/RFI, Statements of Work)
  • SBIR Principal Investigator (DOE)
  • Technical Training Delivery (200+ personnel)
  • Conference Presentations & Technical Writing (SUSECon)
  • Open Source Contributions (Rancher, HobbyFarm)

Broadcast, ISP & Facilities Operations

  • Broadcast Automation (ENPS, iNews, Chyron, Vizrt, Master Control)
  • Satellite ISP Network Operations (Teleport Facilities)
  • PBX / VoIP Telecom Systems
  • Physical Security (IP Cameras, Door Access Control)
  • Data Center & Server Room Build-Out
  • Help Desk Platforms (ManageEngine ServiceDesk Plus)
  • Image Processing (ImageMagick, Tesseract OCR)
  • E-Commerce Payment Processing (Stripe, PCI-DSS)
  • Email Marketing Systems (StrongMail, SparkPost)