{ "$schema": "https://raw.githubusercontent.com/jsonresume/resume-schema/v1.0.0/schema.json", "basics": { "name": "Rob Lazzurs", "label": "Technical Cloud Architect and CTO", "url": "https://lazzurs.com/", "summary": "Technical cloud architect and consultant with over twenty years in infrastructure, from systems administration and early public cloud work to leading DevOps, cloud and security programmes for Aer Lingus, UK Government departments and regulated organisations. Specialises in infrastructure as code, container platforms and DevSecOps across AWS, Azure and GCP, and is currently a Principal Consultant at Unicorn Operations.", "location": { "countryCode": "IE" }, "profiles": [ { "network": "GitHub", "url": "https://github.com/lazzurs", "username": "lazzurs" }, { "network": "LinkedIn", "url": "https://www.linkedin.com/in/lazzurs/", "username": "lazzurs" } ], "email": "rob@lazzurs.org" }, "work": [ { "name": "Unicorn Operations", "position": "Principal Consultant", "url": "https://www.unicornops.ie", "startDate": "2024-11", "summary": "Clients: Triton One, Allianz Ireland, HSE, Aer Lingus", "highlights": [ "Triton One: Managed Bare Metal and Nomad environments as code using OpenTofu, with changes planned and applied through Atlantis", "Triton One: Deployed developer tooling including Coder to provide contained and secured environments for AI agents and developers", "Triton One: Worked with Vault, Consul and etcd alongside GCP and AWS cloud environments", "Allianz Ireland: Hardened Kubernetes environments hosted on Azure using DevSecOps practices, and provided wider DevSecOps consulting", "HSE: Worked within Scrum teams to deliver national services using Azure, ensuring compliance with HSE security and data protection requirements.", "HSE: Provided technical leadership to operations team on Azure and Terraform best practice including security hardening and lifecycle management of cloud resources.", "Aer Lingus: Enabling the data team to use data tools such as Databricks, Monte Carlo and Atlan managed with GitOps to manage data across Aer Lingus and apply ML models to Aer Lingus data.", "Aer Lingus: Ensured security controls and access governance were applied across the data platform." ] }, { "name": "Amach Software", "startDate": "2019-09", "endDate": "2024-10", "summary": "Clients: Aer Lingus", "highlights": [ "Aer Lingus: Introduced SRE and GitOps to Aer Lingus", "Aer Lingus: Designed and implemented cybersecurity architecture across AWS including WAF, GuardDuty, Security Hub and network segmentation to protect customer-facing and internal services", "Aer Lingus: Designed multi cloud networking architecture using AWS Direct Connect and managed migration to an SDWAN, ensuring secure and resilient connectivity across environments", "Aer Lingus: As part of DevOps pipeline introduction helped performance testing teams using JMeter and other tooling make performance testing part of the deployment pipeline", "Aer Lingus: Migrated away from single AWS accounts to a full AWS Landing Zone including Control Tower all managed with Terraform, establishing security baselines and lifecycle management across all accounts", "Aer Lingus: Instituted full change control process moving from manual control to full GitOps/DevOps using Terraform, Terragrunt and Atlantis", "Aer Lingus: Led DevOps and Software Engineering efforts within Aer Lingus focused on DORA metrics and increasing deployment speed moving from deployments measured in months to multiple deployments in a single day", "Aer Lingus: Designed isolated networking model for microservices to increase security posture, enforce least-privilege communication and simplify developer access", "Aer Lingus: Introduced Grafana managed by Terraform for service monitoring, security event visibility and management", "Aer Lingus: Managed AmazonMQ deployment for communication between AWS and on-prem hosted services", "Aer Lingus: Introduced service to service communication using mTLS ensuring encrypted communication across all internal services", "Aer Lingus: Introduced containerisation in the development tools stack using ECS and Fargate, managing the full container lifecycle and later migrating to Kubernetes via EKS including security policies and image scanning", "Aer Lingus: Managed migration and network design from existing data centres of Windows, Linux and IBM zOS mainframe into AWS, Azure and Kyndryl zCloud, designing secure connectivity and ensuring reliable communication between AWS, Azure and zCloud", "Aer Lingus: Migrated first databases from on-premise to AWS RDS introducing managed databases with encryption at rest and in transit", "Aer Lingus: Automated service testing with Capybara, a python frontend to Selenium", "Aer Lingus: Migrated from legacy on-premise Bitbucket to GitHub.com and provided a fully GitOps/IaC managed system for managing GitHub access and configuration", "Aer Lingus: Provided teams access and mentoring on usage of GitHub Copilot", "Aer Lingus: Created Cloud Security model for operating microservices and developer access across AWS and provided security consulting across IAG", "Aer Lingus: Migrated legacy databases and data warehouse from on-premise to Snowflake", "Aer Lingus: Enabled usage of Databricks facilitating access to cloud data sources, management via IaC, security controls and building data pipelines", "Aer Lingus: Migrated away from static secrets to dynamic secrets management using AWS Secrets Manager, eliminating long-lived credentials", "Aer Lingus: Third line on-call for service escalation including security incidents", "Aer Lingus: Provided strategic guidance to Amach during a critical growth phase from a small consultancy to the leading Cloud Aviation Specialist it is today", "Aer Lingus: Helped advise and deploy GenAI tools to other Amach aviation clients", "Aer Lingus: Worked on both existing client management and provided technical advice on new sales", "Aer Lingus: Managed multiple teams across multiple clients" ] }, { "name": "Storm Inc.", "startDate": "2018-05", "endDate": "2019-09", "summary": "Clients: HMPPS, Nationwide Building Society", "highlights": [ "HMPPS: Worked as a DevOps consultant and Product Owner in HMPPS to migrate the national Probation system from an existing entrenched supplier to AWS covering all areas of the project from contract negotiation to technical architecture, security design and stakeholder management", "HMPPS: Designed secure and reliable AWS environment for the national probation system, meeting UK Government security standards and handling sensitive offender data", "HMPPS: Integration with services on MoJ managed Kubernetes platform with appropriate network security controls", "HMPPS: Designed migration from legacy on-premise Oracle products to modern cloud native solutions for authentication and data management, implementing secure identity and access management", "HMPPS: Worked within a high-security environment handling sensitive and confidential data related to the national probation service", "Nationwide Building Society: Brought DevOps ways of working to an existing set of development teams within Nationwide Building Society and managed a kops Kubernetes deployment on AWS integrating with existing DC based banking system and designing secure connectivity between DC and AWS", "Nationwide Building Society: Managed Jenkins infrastructure providing CI/CD for development teams", "Nationwide Building Society: Introduced service to service communication using mTLS", "Nationwide Building Society: Performance testing using JMeter", "Nationwide Building Society: Jenkins configuration using Groovy", "Nationwide Building Society: Helped service teams deploy apps using Helm on kops managed AWS Kubernetes deployment", "Nationwide Building Society: Operated within a regulated financial services environment with strict security and compliance requirements" ] }, { "name": "Scrumconnect", "startDate": "2016-12", "endDate": "2018-12", "summary": "Clients: HMPPS, DWP", "highlights": [ "HMPPS: Designed secure network access from Azure and AWS into the UK prison estate, working with sensitive environments and classified network boundaries", "HMPPS: Built new deployment pipeline for Digital Hub content delivery service and learning platform deployed into multiple UK prisons", "HMPPS: Provided DevOps and security consultancy across the HMPPS Digital Studio and wider MOJ", "HMPPS: Managed infrastructure on both Azure and AWS using Terraform for deployments, including security hardening and compliance with UK Government standards", "HMPPS: Provided teams CI/CD pipelines using CircleCI", "HMPPS: Deployed services into MoJ managed Kubernetes platform", "HMPPS: Consulted across many UK Government departments on DevOps and security practices, providing guidance to Scrumconnect teams helping Scrumconnect scale", "DWP: Took Carer's Allowance live digital service from manual checklist deployments to a continuous delivery pipeline using Jenkins DSL Pipeline and Saltstack", "DWP: Ensured deployment pipeline met UK Government security standards for handling citizen data" ] }, { "name": "Kainos", "startDate": "2013-08", "endDate": "2016-10", "summary": "Clients: DVSA, RPA/DEFRA", "highlights": [ "DVSA: Trained and mentored Kainos staff on DevOps working practices", "DVSA: Managed operations teams across suppliers and delivery programs", "DVSA: Technical thought leadership across the organisation", "DVSA: Worked to rescue the MOTMP program from certain failure by independently diagnosing systemic issues and bringing together Development, Test and Operations functions to fix performance issues and create a successful service", "DVSA: Migrated from legacy service in datacentres to VMWare based virtualisation provider and then further migration into AWS which became a landmark and award winning project for both DVSA and AWS", "DVSA: Migrated from manual deployments to Continuous Integration and Continuous Delivery", "DVSA: Ensured service met all UK Government security standards including penetration testing and vulnerability management", "DVSA: Used Prometheus and Grafana to provide debugging, security monitoring and health overview of the national MOT service and debugging of performance issues", "RPA/DEFRA: Trained and mentored Kainos staff on DevOps working practices", "RPA/DEFRA: Provided business cases for radical government department change", "RPA/DEFRA: Provided DevOps and security expertise to multiple teams and projects across RPA/DEFRA", "RPA/DEFRA: Central to launching the RLRV service on time and on budget", "RPA/DEFRA: Instrumental to saving the CAPD project after failure, independently identifying root causes and bringing teams together from different suppliers to deliver on the user and business needs", "RPA/DEFRA: Managed deployment pipelines in TeamCity", "RPA/DEFRA: Provided local development infrastructure with Packer/Vagrant and infrastructure automation with Terraform", "RPA/DEFRA: Ensured services met all UK Government security standards" ] }, { "name": "Paragon Internet Group", "position": "Head of Systems Operations", "startDate": "2012-08", "endDate": "2013-08", "location": "Maidenhead/Slough, England", "highlights": [ "Designed and deployed new service provider network using Cisco routers and Juniper switches", "Deployment of configuration management and centralized authentication into existing systems using Puppet and FreeIPA", "Documented all existing systems and put in place documentation procedures using RackTables and Subversion", "Mentoring of placement student and existing staff", "Creation and management of operations team", "Managed customer environments including Hadoop" ] }, { "name": "Namesco", "position": "EU Lead Infrastructure Developer", "startDate": "2011-08", "endDate": "2012-08", "location": "Maidenhead, England", "highlights": [ "Developing multiple new cloud products based on Hyper-V, Virtuozzo and OpenStack virtualisation platforms", "Supporting existing Cisco/Juniper/Extreme networking and systems infrastructure managed by Puppet/LDAP/Subversion", "Merging disparate infrastructure from previously acquired companies collecting all systems under one Puppet/LDAP/Subversion instance", "Mentoring other staff through the migration to new automated infrastructure" ] }, { "name": "The Server Market", "position": "Founder", "startDate": "2010-05", "endDate": "2011-08", "location": "Falkirk, Scotland", "highlights": [ "Developed cloud aggregation platform to allow customers to scale across cloud providers" ] }, { "name": "TomTom", "position": "Senior Systems Administrator", "startDate": "2008-03", "endDate": "2010-05", "location": "Edinburgh, Scotland", "highlights": [ "New product research and development instrumental in shaping the current TomTom PND platform", "DevOps and CI using Cobbler, Puppet and an in-house developed CI system", "Automated systems deployment using Cobbler", "Automated systems healing using Puppet", "Systems tools development working with RedHat ET on Open Source systems automation" ] }, { "name": "XCalibre Communications", "position": "Systems Architect", "startDate": "2005-08", "endDate": "2008-02", "location": "Livingston, Scotland", "highlights": [ "Development and launch of first public cloud platform in Europe, Flexiscale", "Project management", "Team leadership", "Automated systems deployment", "Shared/Dedicated hosting administration", "Configuration management deployment using CFengine" ] }, { "name": "edNET", "position": "Systems Administrator", "startDate": "2003-08", "endDate": "2004-08", "location": "Edinburgh, Scotland", "highlights": [ "Shared and Dedicated hosting administration", "Linux Cluster administration", "NetApp NAS administration", "ISP Network administration" ] }, { "name": "edNET", "position": "Technical Support", "startDate": "2002-05", "endDate": "2003-08", "location": "Edinburgh, Scotland", "highlights": [ "Phone and email based technical support and systems operator duties for an ISP" ] }, { "name": "Scotweigh", "position": "Consultant", "startDate": "2000-03", "endDate": "2003-08", "location": "Falkirk, Scotland", "highlights": [ "Systems integration on Forestry Commission program to meet EU regulations" ] } ], "skills": [ { "name": "Technical", "keywords": [ "AWS", "Azure", "GCP", "Terraform", "OpenTofu", "Python", "Go", "Ansible", "Packer", "Docker", "Kubernetes", "Nomad", "Jenkins", "GitHub", "Databricks", "Amazon Q", "CoPilot", "Coder", "Microservices Architecture", "Terragrunt", "Atlantis", "Artifactory", "Vault", "Consul", "etcd", "Cybersecurity Architecture", "Network Security", "Virtualisation", "Container Orchestration", "Service Migration", "Lifecycle Management", "mTLS", "WAF", "GuardDuty", "Security Hub", "SDWAN", "Secrets Management" ] }, { "name": "Management", "keywords": [ "Kanban Methodology", "Scrum", "DevOps", "DevSecOps", "MLOps", "Platform Engineering", "Public speaking", "Project Management", "Stakeholder Engagement", "Security Governance", "Incident Management" ] } ], "publications": [ { "name": "Launching an airline into the cloud", "publisher": "HashiConf 2023", "url": "https://www.youtube.com/watch?v=AlJADYchG94", "summary": "Conference talk at HashiConf 2023" }, { "name": "DevOps: Supporting aircraft from hanger to take-off", "publisher": "DevOps Days London 2024", "url": "https://devopsdays.org/events/2024-london/program/rob-lazzurs", "summary": "Conference talk at DevOps Days London 2024" } ], "meta": { "canonical": "https://lazzurs.com/resume.json", "lastModified": "2026-10-04T15:10:43" } }