adds MBTA and DNSFilter

This commit is contained in:
Wxcafé (Clem Hertling) 2026-03-09 00:14:46 +01:00
parent 3f85c0902c
commit e93b638870

View File

@ -7,13 +7,10 @@
\usepackage[utf8]{inputenc}
\usepackage[scale=0.75,top=1cm,bottom=1cm,right=1cm,left=2cm]{geometry}
\name{Clem}{HERTLING}
\address{2126 Menahan St Apt 1C}{Ridgewood, NY 11385}{USA}
\phone{+1~646~750~0728}
\name{Clem}{HERTLING FOIGNE}
\address{24 rue Joseph Serlin}{69001 Lyon}{France}
\phone{+33~6~86~59~84~41}
\email{clem.hertling@wxcafe.net}
\homepage{wxcafe.net}
\social[twitter]{wxcafe}
%\extrainfo{Citizenship: French}
\begin{document}
@ -21,10 +18,32 @@
\vspace{-1cm}
\section{Work Experience}
\cventry{2017-}{Gandi}{Systems and Network Administrator}{Paris / NYC}{}
\cventry{2024--2026}{DNSFilter}{Platform Engineer}{New York City then Lyon (remote)}{}
{
\emph{4 years}, Network engineering and system administration. \\
{\scriptsize \emph{Outils:} Ansible, Puppet, Python, Packet Journey, Cisco IOS/IOS-XR, Juniper JunOS, PfSense, Quagga, RIPE Atlas, RT and Phabricator, \dots} \\
\emph{1.5 years}, Network Engineering and IaC
General Platform Engineering tasks for an anycasted worldwide network of DNS filtering servers - maintenance, deployments, migrations, upgrades, etc \\
Work on Ansible for infrastructure management with various traditional hosting providers, as well as terraform with AWS EC2 \\
Docker deployments and configuration, including writing new containers for software, deployment procedures, management on the nodes, etc \\
BGP configuration for the anycast services (with Quagga), debugging of network events and international routing \\
On-Call handling for the whole anycast infrastructure, managing incidents internally but also directly with clients when necessary \\
100\% remote workplace for the entire work period \\
}
\cventry{2022--2024}{MBTA}{Transit Data Engineer}{New York City (remote)}{}
{
\emph{2 years}, Data Management and Python Development \\
{\scriptsize \emph{Tools Used:} Python, Poetry, Pandas, Elixir, HASTUS, Terraform, Github Actions, AWS S3,\dots} \\
Management of the GTFS feed for the entire MBTA transit system, including communication with transit partners (Keolis, Google, Apple, etc) and internal teams from varied backgrounds \\
Improvements to internal systems performance, including optimizing Pandas code and refactoring the codebase \\
Regular day-to-day integration of service disruptions into software systems (using Python and Pandas) producing GTFS data \\
Adjustment work on other software systems, including real time train \& bus tracking, public-facing displays, etc \\
100\% remote workplace for the entire work period \\
}
\cventry{2017--2022}{Gandi}{Systems and Network Engineer}{Paris / NYC (remote)}{}
{
\emph{5 years}, Network engineering and system administration. \\
{\scriptsize \emph{Tools Used:} Ansible, Puppet, Python, Packet Journey, Cisco IOS/IOS-XR, Juniper JunOS, PfSense, Quagga, RIPE Atlas, RT and Phabricator, \dots} \\
Migration of production from an older datacenter to four newly-spawned ones: backend change, automation of the migration (ansible), live-migration of clients with 0 interruption, network spawn from scratch, etc \dots \\
Running day-to-day production on Gandi's network (oncall, ticket management) from offices to transit and peering management \\
Participation in the planification of the new Luxembourg PoP architecture, including equipement replacement, architecture switch, complete redundancy, automation of the public and corp migration, \dots \\
@ -34,35 +53,22 @@
100\% remote workplace with 6 hours time difference, since november 2018. \\
}
\cventry{2016--2017}{FranceIX Services}{Systems and Networks Administrator (part time)}{Paris}{}
\cventry{2016--2017}{FranceIX Services}{Intern, then Systems and Networks Engineer }{Paris}{}
{
\emph{1 year}, Administration of the whole infrastructure. \\
\emph{1.5 years}, Administration of the whole infrastructure. \\
{\scriptsize \emph{Tools Used:} Ansible, Gitlab \& Gitlab CI, Duplicity, Bash on Windows, Python \& Ruby scripting, Brocade SLX-OS, \dots} \\
Development of new services (backups, lab automation, internal git forge, CI and tests, \dots). \\
Work on improving the security of the infrastructure (User separation and management automation, \dots). \\
Development of new services ((Network equipment configuration backups, log centralization with ELK, VPN setup
upgrade, email smarthost, backups, lab automation, internal git forge, CI and tests\dots). \\
Work on improving the security of the infrastructure (deployment of AAA, user separation and management automation, \dots). \\
Minor work on backbone upgrade \\
Minor work in datacenters, day-to-day support to end users \\
}
\cventry{2016}{FranceIX Services}{Intern}{Paris}{}
{
\emph{10 weeks}, Systems and Networks Administration and Automation \\
{\scriptsize \emph{Tools Used:} Ansible, Elasticsearch/Logstash/Kibana, OpenVPN, OpenBSD, Postfix, Exim4, Tacacs+, Elastalert, \dots} \\
Development of new services (Network equipment configuration backups, log centralization with ELK, VPN setup upgrade, email smarthost, \dots) \\
Work on the security of the infrastructure (deployment of AAA, log-based alerting, \dots) \\
Minor work in datacenters \\
}
\cventry{2015}{PMC (Pari Mutuel Computing)}{Intern}{St-Maur des Fossés (near Paris)}{}
{
\emph{2 months}, Systems Integration \\
{\scriptsize \emph{Tools Used:} bash, debootstrap, C, debian packaging tools, perl, perldoc, svn, \dots} \\
Development of a software platform for the generation of system images for embedded platforms (Raspberry Pi 2, other ARM boards), including integration of domain-specific software in the system images and development of a web-based management platform for the resulting system, in Perl \\
}
\newpage
\subsection{\underline{Associations and Open-Source}}
\cventry{2017}{Mastodon}{Collaborator}{}{}
\cventry{2017--2025}{Mastodon}{Collaborator}{}{}
{
{\scriptsize \emph{Tools Used:} Puppet, Qemu/KVM, Nginx (reverse proxy/load balancer), Ruby (Rails), Javascript, \dots} \\
(Mastodon is a decentralized and federated social media platform, resembling Twitter) \\
@ -71,7 +77,7 @@
Submitted a few patches, maintaining (small) forks for personal use \\
}
\cventry{2013--2017}{Cryptoparties}{Organizer}{}{}
\cventry{2013--2019}{Cryptoparties}{Organizer}{}{}
{
{\scriptsize \emph{Tools Used:} \LaTeX, GPG, Tor, secure communication tools (Signal), TAILS, \dots} \\
(``Cryptoparties'' are social events where people can learn about privacy and technology) \\
@ -79,14 +85,6 @@
Multiple other planned cryptoparties over 2017/2018 \\
}
\cventry{2013--2016}{Association \href{http://nos-oignons.net}{Nos-oignons}}{Systems Administration Team Member}{}{}
{
{\scriptsize \emph{Tools Used:} Debian, Prosody, Postfix/Dovecot, Schleuder, Ikiwiki, Mailman, Tor, \dots} \\
(Nos-Oignons is an association for the promotion and deployment of privacy tools in France) \\
Work on the initial setup of the association (first node setup, email, XMPP, ...) \\
Implementation of the following node deployments \\
}
\cventry{2013--2017}{Association Gconfs (Epita)}{Speaker \& Member}{}{}
{
{\scriptsize \emph{Tools Used:} \LaTeX, Pitivi, Open Broadcasting Software (OBS), pandoc, \dots} \\
@ -97,37 +95,33 @@
}
\section{Education}
\cventry{2020}{RIPE NCC Certified Professional IPv6 Analyst}{}{}{}{}
\cventry{2021}{RIPE NCC Certified Professional IPv6 Analyst}{}{}{}{}
\cventry{2016--2017}{Licence Professionnelle MRIT (Security major)}{Université Paris-Est Créteil}{Vitry-sur-Seine}{{\footnotesize \emph{Networks/Telecom}}}{}
\cventry{2014--2016}{DUT Réseaux \& Télécoms}{Université Paris-Est Créteil}{Vitry-sur-Seine}{{\footnotesize \emph{Networks/Telecom}}}{}
\cventry{2013--2014}{Infosup}{Epita}{Villejuif}{{\footnotesize \emph{Computer Science}}}{}
\cventry{2013}{Baccalauréat Scientifique}{}{}{{\footnotesize \emph{High School Diploma}}}{}
\cventry{2011}{SAT}{}{}{\textit{1770/2400}}{}
\section{Skills}
\cvitem{English}{Fluent (Lived here for the past three years)}
\cvitem{English}{Fluent (Lived in New York City for the past seven years)}
\cvitem{French}{Native speaker}
\subsection{\underline{Programming}}
\cvitem{shell}{daily use}
\cvitem{C/C++}{basic knowledge}
\cvitem{Rust}{general overview, learning}
\cvitem{python}{frequent use for scripting}
\cvitem{perl}{infrequent use for scripting}
\subsection{\underline{Systems/Networks Administration}}
\cvitem{Linux}{Administration of Debian/Ubuntu in production, Archlinux as a
desktop distro, built an LFS}
\cvitem{Linux/BSD }{Administration of Debian/Ubuntu/Fedora/RHEL in production, debian for my infrastructure, LFS}
\cvitem{BSD}{Frequent administration of OpenBSD and FreeBSD}
\cvitem{macOS}{Daily use, general knowledge of the internal workings}
\cvitem{Virtualization}{Xen, Docker, Qemu/KVM, FreeBSD Jails}
\cvitem{Software}{Nginx, Postfix, Apache, Dovecot, git, OpenSMTPd, Puppet, Ansible, ZFS, \ldots}
\cvitem{Monitoring}{Nagios, LibreNMS/Observium, Prometheus/Grafana, ELK stack}
\cvitem{Network}{CCNA 1--4, Use of IOS-XR, JunOS}
\cvitem{Monitoring}{Nagios, LibreNMS/Observium, Prometheus/Grafana, ELK stack, Pagerduty}
\cvitem{Network}{CCNA 1--4, Use of IOS/IOS-XR, JunOS}
\section{Extras}
\subsection{\underline{Interests}}
\cventry{}{Photography}{Instant (Polaroid SX-70), Film, *and* Digital (Fujifilm X-T30)}{}{}{}
\cventry{}{Sociology/Philosophy}{Foucault, Butler, generally post-structuralist readings}{}{}{}
\cventry{}{Photography}{Film (medium / large format), Instant, and some Digital (Sony)}{}{}{}
\cventry{}{Electronics}{Repairing and tinkering with electronic devices}{}{}{}
\cventry{}{Rock Climbing}{Frequent practice at local gyms as an amateur}{}{}{}