Experience

• 

  George mason university

  Jan 2021 - May 2021

  Code review project

  • Fixed syntax errors in code to allow for compiling and created flowchart of code with explanation of each function in the code.• Pinpoint vulnerabilities by manual code review and with static analysis tools like Cppcheck & Flawfinder.• Created a report on all vulnerabilities found in code explaining how it can be exploited and classified it as a real or potential vulnerability.• Lastly in same report fixed code to resolve vulnerabilities and explained how the fixes mitigates the vulnerabilities and exploits. Show less

• 

  George mason university

  Aug 2021 - May 2022

  Devsecops senior design project

  • Created and maintained CI/CD pipeline for building, testing, and deploying code using Gitlab• Used Docker and a Dockerfile to containerize custom HTML web application• Test tools utilized:o Selenium for web automation tool that will test the code across browsers for functionality checko SonarQube for static analysis test to detect bugs and security vulnerabilities in codeo OWASP for Dynamic Application Security Testing to detect vulnerabilities with deployed environmento After testing revised code and reran pipeline to improve security and code quality• Deployed containerized web application to Azure Container registry where Kubernetes can pull from • Kubernetes cluster would pull image into pod and distribute online using a load balancer• Terraform was used to create & manage our Azure container registry & Azure Kubernetes. Terraform also created necessary GitLab variables & established connection from Gitlab to Azure Kubernetes. • Terraform for AWS Kubernetes & container registry was also added to account for failover scenarios. • Azure Virtual machine was created to host docker container for tools like SonarQube.• Azure Monitor was used to keep track of logs to do error-handling when needed• Managed Gitlab repositories and permissions by branching and tagging• Created technical documentation to log processes of creating pipelineRepository link: https://gitlab.com/hchoi36/demo Show less

• 

  Antra, inc.

  Oct 2022 - Jan 2023

  Devops training curriculum

  • Worked with Jenkins in a Linux VM instance that was created & preconfigured with Vagrant. • Jenkins Plugins utilized for integration of 3rd party tools: • Git is used to connect Jenkins with our GitHub repository that stores our project-based files like the Jenkinsfile also utilized to trigger our pipeline whenever a change is committed. • Maven used to build our code by compiling and packaging our code to be deployable. • Wrote Ansible playbooks and roles to install Jenkins, ELK services, and change configurations on httpd services as well as automate security patching. • Cloned remote git repository to a local repository to manage repository via git commands like git branch, git log, git config, git add, git commit, and git push. • Troubleshooted ssh problems to connect Jenkins with worker nodes and ansible with target nodes by editing ssh configuration file and managing ssh service via systmctl command in Linux. • Wrote script for starting up applications and for bootstrapping to automate the process of setting up and configuring a software environment or application. • Built and deployed Docker containers to shift to microservices, improving developer workflow, increasing scalability, and optimizing speed. • Worked with Kubernetes to automate the deployment, management, and scaling of containerized applications. • Used JIRA for project management to track project progress and participated in agile scrum ceremonies like daily stand-up, sprint planning, and sprint reviews. Show less

• 

  Axle

  Mar 2023 - now

  Devops research associate

  • Participated in Requirements Gathering by actively engaging with stakeholders to understand their needs, documenting requirements, and ensuring technical solution aligns with objective.• Participated in System Architecture and Design to apply a deep understanding of infrastructure and DevOps principles to create a scalable and efficient solution to meet our requirements.• Used Terraform to create infrastructure.• Spearheaded the development and maintenance of a Jenkins Pipeline, automating the build and deployment processes for our containerized applications.• Expertly containerized our applications using Dockerfiles, streamlining the deployment and scalability of our software.• Implemented a secure secrets management system using HashiCorp Vault, ensuring sensitive information is securely accessed by Jenkins during the deployment process.• Successfully deployed applications to Kubernetes, harnessing the power of container orchestration for scalability and resilience.• Configured the Kubernetes ingress controller to expose our applications to the public using internal cluster IP, providing secure and controlled access to our services.• Configured CloudWatch and Fluent Bit to seamlessly send Kubernetes cluster-level, node-level, and application-level logs to CloudWatch Log Groups, empowering effective log analysis and review.• Implemented a robust configuration management system using Ansible, ensuring consistent package updates and maintaining the security and stability of our servers.• Utilized Crontab to schedule Ansible playbooks for patching, proactively maintaining our infrastructure by performing regular updates once a week.• Utilized a Kanban board to effectively manage and track project progress.• Engaged in daily stand-ups to give status updates and retrospectives sessions providing valuable insights for continuous improvement and team growth. • Created technical documentations to facilitate knowledge transfer and enhance team efficiency. Show less