Alex Trull Technologist and Engineer +34 654 766 888 2026.public.cv.alex@trull.org https://github.com/atrull https://gitlab.com/atrull https://www.linkedin.com/in/atrull Show me a technical problem everyone's been quietly living with, and I'll show you a new way to solve it. I challenge and change IT culture. I work comfortably at every level, from CEO to Desktop Support - sometimes as a leader, sometimes as a specialist - with deep experience in cloud, security, release management and automation: eliminating repetitive processes and growing working proofs of concept into the foundations of sound architecture. Based in Spain (CET), I prefer remote but am open to time onsite for key milestones. EXPERTISE Mentoring & Coaching & Approach • Helping my colleagues level-up and overcome hurdles. • Promoting innate creativity but facilitating change as necessary. • Helping non-technical vibecoders think about tradeoffs and getting their work safely to production. • Bringing big picture thinking to the details. Systems/Configuration • Administration and Configuration management of common Linux, Unix, BSD derivatives and Windows. • Chef, Ansible Puppet, Salt, CFEngine, Opsware and Powershell DSC. • Flux2/ArgoCD/Kustomize + Gitops. Virtualization / Containerization / Imaging • Host-based Virtualization with K8S [EKS, AKS, GKE], ECS, Azure App, Docker, Jails and Zones. • Packer and general Image Development • Virtualbox / Vagrant / KVM / Qemu / BHYVE Development / Code Management / Build • Scripting from Bash/Shell to most modern interpreted glue languages including PHP/Python/Go/Ruby/Javascript etc. • Revision Control, Build, Continuous Integration/Deploy systems with Github, Gitlab, Jenkins, Azure, FluxCD Application and Database • Various Web/Mail/Network/Application and backends like SQL, NoSQL and Graph Databases. • Webserving Apache/NGINX, Lighttpd /IIS Network Architecture and Administration • V4/V6 networking, OSI layer and WAF/WAN/LAN/VPN/VPC/TGW, BGP/OSPF and DNS. • Switches/Routers/Loadbalancers from Cisco, Juniper, Nortel, Cloudflare and most Major vendors. Storage and Storage Area Networking • Numerous SANS and network/high capacity filesystems including ZFS/NFS. Common Cloud Blob/Object Storage et al. Monitoring • Extensive experience building with various OTC monitoring systems plus Grafana LGTM, Otel, Datadog and Cloud-based stacks (Cloudwatch et al). Application Routing & Mesh • Configured NGINX/K8S Ingress, Traefik, linkerd, HAProxy and Keepalived and most common Load balancer deployments Cloud Automation / Architecture • Azure, Amazon AWS, Google, Vultr, Openstack and on-prem hypervisors. • Terraform, Cloudformation, ARM and API Security/Protocols • X509, PKI, SSL, TLS, SSH, HTTP/REST, oAuth/OIDC, MTLS and CA Management • Hashicorp Vault / AWS secrets / Azure Vault. • Numerous IDS/NIDS/Code Quality tools. Side Projects • Quismon Monitoring Platform (go/rust). • Link G4X Power Predictor (python). • Joker DNS Provider for dnscontrol (go). • Overbuilt Getmyip Module (terraform). • declarativeaccess.net aka IAC4IAM CAREER November 2024 – Current, Tech Lead + Lead Platform Engineering (Contract) - Choreograph (WPP) Supporting high-value AdTech platforms across 5+ global regions, managing Flux2/ArgoCD GitOps deployments with KEDA autoscaling tuned for predictable traffic patterns like EU/US morning rushes and Black Friday. Working on distributed Kubernetes, tuning for variable daily global loads with service mesh and Kafka. Terraform/Terragrunt IaC across GKE, AlloyDB, BigQuery, Cloud Composer, and Cloud Run. Built out global monitoring with Datadog and Prometheus/Grafana including SLO-based alerting, anomaly detection, synthetic checks, and team-routed Slack notifications. Involved in AWS=>GCP Migration, consulting on DNS, database migration, and regional deployment strategy, cloud cost reduction. MLOps - Turned Algorithms into APIs - lead implementation on an API version of a key algorithm - FastAPI service with CI/CD and PyPI distribution, stateful with DBOS - Forming the paragon of ‘how to do it’ for other algorithms. Build out of ML datasets and data export pipelines for multiple DSPs including TTD, Amazon, and Xandr. Started using Claude in my daily work to speed up analysis and integrated Claude/Vertex and BQ, as well as general project management. As Tech Lead I have had leadership of teams 12 engineers. Working closely VPs, Heads of Engineering/DS, NOC, DevOps and Data scientists. Heavily involved in interviewing MLE/DS, MLOps, and DevOps. February 2021 – August 2024, Devops Engineer/Architect (Contract) - Dye & Durham International Built the first DevOps pipeline in the business. Lead on automating deployments related to: Direct Public Websites/Apps, API gateways, ETL. Automated 100 separate cloud accounts (involving 30 Products) - on AWS, Azure and GCP. SSL, WAF / Cloudflare. AWS Identity Centre. Integrated Hashicorp Vault for Database Management (SOC2 Rotation) and K8S/Azure AD/GCP access. Centralised IPAM solution to manage multiple clouds firewalls. App migration between clouds. Dev Environment Scheduling for Cost Control (finops). All completed and maintained in Terraform with GitOps. Mentored/lead other engineers and lead on architecture, outages and debugging. June 2018 – January 2021, Lead Devops Engineer/Architect (Contract) - Clearchannel International Helped build DevOps capacity for one of the leading Out of Home Advertising groups. Reporting directly to the CTO, environments were both Cloud-based deployments and stack for street-based physical advertising hardware (10K+ nodes). Working with a team of 5 engineers, providing strategic thinking on technology choices, standards for Security, CI, Testing, Deployments, Billing, Code Management, etc. Deployed Hashicorp Vault (cross-cloud secrets management). Introduced 12factor. Opensource contributions: The CINC module for AWS and wireguard AWS module. November 2017 – May 2018, Senior Engineer (Permanent) - Automation Logic Working embedded with Lloyds Bank on their critical Public Cloud project. Established strong standards for Automation as the Senior Engineer for Chef/Packer/Terraform - helping get the most out of the tools for the bank and occasionally feeding back improvements upstream. This has been creative work around building multi-environment multi-cloud infrastructure in a fully dynamic way. Extra focus on Testing and Compliance with Chef Automate and related tooling (inspec, rspec, chefspec, rubocop and others). Other Tools used - Github Enterprise, Jenkins, Vault – Cloud infra from Azure, AWS and GCE. March 2017 – November 2017, Embedded Automation Engineer (Contract) - Agilesphere Working with HMCTS/MOJ. Focus on improving infrastructure-as-code for the Common Platform project. Working with a large agile team with a high bar of excellence. One of the critical side-projects I’ve been involved with is delivering the Atlassian suite in Azure for this client, which I have recovered from near-disaster, and building a strong framework around the document redaction system. July 2015 – January 2017, Lead DevOps Architect (Contract) - McKinsey – Global, global clients. Working in the Digital Labs group. Focus on introducing strong workflow and infrastructure-as-code practices to operations and development teams all over the globe. Worked closely with clients to bring success and show new ways of working. AWS, Hashicorp products and various cloud services. Also prototyping for banking mainframe release management, encryption at rest in “unfriendly territory”. November 2014 - July 2015, DevOps / Infrastructure Consulting Engineer (Contract), DevOpsGuys Engaged with various Government Departments. Performing external assessments of existing projects at various stages. Guidance related to DevOps, typically as a Troubleshooter helping salvage projects and boost success in planning phases. March 2014 - July 2014, Automation Consultant (Contract) - Chef (Opscode / Progress) Technical consultancy training customers on how to integrate their processes with Chef – mapping infrastructure to Chef’s paradigms, promoting DevOps best practices and scale deployment. Covering both the fundamentals as well as advanced subjects such as cookbook and infrastructure testing. 
May 2012 - March 2014, Devops/Cloud Engineer (Permanent) - Medidata Solutions Working in the DevOps department as lead ‘Convergence’ engineer. Responsible for 90% of the software deployed by the company. Rails/Tomcat on EC2 and configuration management with Opscode Chef. October 2010 - October 2011, Lead Architect/Release Eng - Truvo [Yellow Pages for .BE .IE .PT .ZA] Acting as the “DevOps” bridge between between developers and external sysadmins. Designed and built a Lab environment (Kickstart/Puppet/PXE boot). Automated deployments and enforced standards. January 2010 - August 2010, Infrastructure Architect/Security Engineer - Encore Tickets Rearchitected client’s network to pass PCI-DSS, with new network, firewall and systems configuration.
 September 2007 - December 2009, Technical Consultant - S2S, part of NG Bailey Group Systems/Security/Network expert in a Cisco Reseller/Professional Services company, in addition to managing internal infrastructure I worked on projects in Banking, Brokerage, Investment, Legal and Retail. Monitoring with Nagios, Opsware to manage Switches, Routers, Firewalls and SANS. February 2006 - September 2007, Lead Systems Engineer - Cable & Wireless Access Systems engineer in the Data Operations Team. Responsible for maintaining and supporting all Bulldog's internet services (mail, dns), sign-on authentication (radius, LDAP), Juniper Routers. June 2005 - February 2006, Services Support Engineer - Easynet Responsible for maintaining and supporting all Easynet UK's customer-facing Unix & Windows based services (Traditional pre-google ISP) as well as the back ends (Oracle, MySQL, LDAP, Radius) and SANs. April 2002 - June 2004, Systems and Network Administrator - Hybyte Solutions & Services Managed infrastructure for an SMS aggregator with secure connections to large provider gateways. May 2001 - April 2002, Internet Consultant & Systems Administrator: Unity Design (Saatchi & Saatchi) Managed Hosting for Clients such as MOD, RN and Xerox. April 2000 - May 2001, Open Source Researcher & Engineer: Trigenix (Qualcomm) The startup’s first engineer. WAP/SMS gateway (Alligata based on Kanel) and RPM builds. Qualifications and Clearances 2018: DBS 2017: DBS, BPSS (x2) 2015: DBS 2009: Enterasys ECIE-C,ECIE-D,ESE,ESSE-D,DID 2007: CCNA 2006: LogicaCMG Voicemail 2005: Juniper (Siemens) SDX, SteelBelted (Juniper) Radius, SunOne/Fedora Directory, Juniper NSM. 1999: MCSE, A+ MISCELLANY Nationality: British Primary Language: English Functional Language: French/Spanish/Afrikaans/German/Dutch Beginner: Catalan/Ukrainian/Russian/Polish PGP: 4104 BB9C A39E 1250 8BF2 28E5 7B2E 26EB F796 C534 | https://keybase.io/atrull