×
Andy Pandaan

Andy Pandaan

DevOps Engineer / SRE / Cloud Architect


Background


About

About

Worked as Engineer at The Executive Office of His Highness Sheikh Mohammed Bin Rashid Al Maktoum, Vice President and Prime Minister of the UAE and Ruler of Dubai. I have fifteen years of experience in the IT industry. My experience spans across cloud infrastructures, SRE, DevOps, systems, cyber security and full stack web development.

Work Experience

Work Experience

  • Site Reliability EngineerThe Pump Factory

    Apr, 2024 - Present

    The Pump Factory is a fitness brand located in Iloilo city, Philippines.

    • Helped develop the Gym Management Solution System (PumpApp) written in JavaScript and other backend frameworks.

    • Created custom configurations and deployment templates using Ansible, Terraform, and Vagrant to provision resources at speed.

    • Structured complete CI/CD workflows with Jenkins, and Azure Pipelines to automate builds, tests, deploys, and releases of NPM packages, containers, and other build artifacts hosted on Azure Container Registry, Dockerhub, and storage services like S3.

    • Manage resource deployments in Azure and AKS using ARM templates / Bicep, and Terraform.

    • Established robust monitoring with Prometheus Operator and Grafana to proactively detect issues.

    • Build K8s clusters (bare-metal and on-cloud) and manage its resources by writing our own Helm charts.

    • Design different branching and deployment strategies (canary, blue-green) with the dev team.

    • Implement service mesh architectures on all k8s clusters using Istio, Cilium, and other instrumentation tooling to simplify microservices management by unifying traffic routing, scaling, network policies, observability, and service discovery.

  • DevOps EngineerThe Executive Office

    Feb, 2018 - Mar, 20246 years 1 month

    His Highness Sheikh Mohammed's office.

    • Led the automation of CI/CD pipelines, ensuring consistency and efficiency across development, staging, and production environments.

    • Architected scalable and highly available cloud solutions on Azure and AWS, optimizing cloud resource utilization.

    • Designed and deployed containerized applications using Docker and orchestrated environments using Kubernetes with Helm and Git-Ops (Argo CD), improving deployment speed.

    • Developed and implemented Infrastructure as Code (IaC) practices using Terraform, Bicep and CloudFormation, streamlining infrastructure provisioning for multi-cloud environments.

    • Applied configuration management using Ansible, automating deployment processes and system configurations across Linux-based infrastructure.

    • Integrated observability and alerting with Prometheus, Grafana, and AlertManager for centralized logging and DataDog for comprehensive monitoring.

    • Collaborated with different dev teams in implementing Agile and DevSecOps, embedding security and testing protocols into the CI/CD workflows.

    • Utilized Bash for scripting automation and created custom scripts to optimize deployment and management processes.

    • Documented and standardized deployment processes, along with infrastructure configurations, providing comprehensive technical documentation and improving cross-team collaboration.

  • Senior System EngineerThe Executive Office

    May, 2015 - Feb, 20182 years 9 months

    • Successfully deployed several cloud platforms in conjunction with the TEO team such as Smart Dubai, MBRMajlis, MBRCLD, Arab Strategy Forums, and Area2071.

    • Migrated several on-premises environments to Azure and AWS to significantly cut expenses.

    • Enhanced security standards by implementing IAM / RBAC policies, SSL/TLS encryption, and firewall configurations complying with industry regulations.

    • Administered Windows Server environments, managing Active Directory with LDAP, multi-domain setups, and Group Policies for user access.

    • Deployed and managed virtual environments using Hyper-V and VMware, performing backups, and implementing disaster recovery solutions.

  • System Engineer, Chronix Automotive Services

    Oct, 2012 - Dec, 20131 year 2 months

    As System and Network Engineer at Chronix Automotive Services

    • Managed Cisco devices, configuring VLANs, OSPF, EIGRP, and security policies.

    • Configured and maintained CentOS and RHEL servers, automated tasks with Bash/Python scripting, and ensured system reliability through regular monitoring and patching.

  • System and Network EngineerIplus Intelligent Networks

    Feb, 2010 - Aug, 20122 years 7 months

    Worked for a cruising company as Systems and Network Engineer.

    • Designed disaster recovery plans and backup schedules for critical services, ensuring data protection and minimizing downtime.

    • Developed scripts to automate tasks like user provisioning and backup routines across Windows and Linux, improving efficiency and reducing manual work.

    • Implemented network security policies, firewalls, and VPNs, and monitored system health and performance to quickly resolve threats and issues.

  • Technical Support EngineerTeleTech Management

    Aug, 2008 - Feb, 20096 months

    • Acted as Technical Support for clients. The work also involved network monitoring, asset tracking, and software audits.

  • Desktop Engineer, Jardine Direct Company Inc.

    Oct, 2005 - Apr, 20071 year 6 months

    • Worked as Desktop Engineer responsible for first level escalation support. Mostly dealt with desktop issues as well as AS400 operational issues.

Skills

Skills

  • SRE / DevOps tools

    CI/CD

    Jenkins

    Azure Pipelines

    Argo CD

    GitOps

    Observability

    Automation

    Service Mesh

    Ansible

    Vagrant

  • Kubernetes & Containerization

    Kubernetes

    Helm

    Istio

    Cilium

    Calico

    Docker

    Openshift

    Azure AKS

    AWS EKS

  • Infrastructure as Code (IaC)

    Terraform

    CloudFormation

    Bicep

    Azure Resource Manager (ARM) Templates

  • Cloud Platforms

    Microsoft Azure

    Amazon Web Services (AWS)

    Google Cloud Platform (GCP)

  • Security & Networking

    RBAC

    IAM

    SSL/TLS

    PKI

    VPN

    Firewall Configuration

    Fortigate

    Network Policies

    Cisco

  • Operating Systems

    Linux

    Windows Server

    CentOS / Rocky

    RHEL

    Ubuntu

  • Virtualization & Cloud Infrastructure

    VMware

    Hyper-V

    SDN

    Disaster Recovery Planning

    NginX

  • Development

    MERN Stack

    Node.js

    Go

    Python

    GraphQL

    MongoDB

    SQL

    Git

    GitHub

    GitLab

    SonarQube

    Unit Testing

    SDLC

  • Scripting & Automation

    Bash

    Python

    PowerShell

Education

Education

  • Computer Engineering, Bachelors, AMA Computer University

    Jun, 2000 - Dec, 2004

Certificates

Certificates

Interests

Interests

  • Climbing / Outdoors

  • AI / ML

  • DevOps

  • Web Development

  • Open Source