Indonesia

Security Engineering

Site Reliability

Firman Gautama

VP of Infrastructure & Security

Problem-solving

Leadership

Cloud computing

Database management

Python

WordPress

Docker

GitHub

JavaScript

Jira

Confluence

Jenkins

REST API

MongoDB

Redis

PostgreSQL

Kafka

Critical-thinking

Design systems

Introduce yourself, define mentoring expectations and goals. Learn and grow together.

General mentorship

Strategies for maximizing your design internship or co-op program.

Getting the most out of my internship

How to successfully prepare and position yourself for a job promotion?

How to get promoted

Get actionable feedback on your resume or portfolio.

Resume and portfolio review

Practice HR, technical and behavioural interviews with mentors.

Practice mock interviews

In my current role at Hijra as the VP of Infrastructure & Security, I've had the opportunity to cultivate a vibrant team and drive substantial enhancements in our operational processes and technical infrastructure. Here are some of the key milestones I've reached along this journey:

- Initiated DevSecOps practices, integrating SIEM, SAST, and secure coding training to foster a security-centric culture.
- Incorporated an internal penetration testing process into the release cycle, bolstering security.
- Led team expansion from 2 to 20 within a year, significantly uplifting infrastructure and security capabilities.
- Championed a culture of continuous improvement for operational processes.
- Identified and addressed application performance bottlenecks and enhancing system efficiency and user experience.
- Led the transition to Kubernetes, boosting scalability and resource efficiency.
- Streamlined the deployment process with a CI/CD pipeline, enhancing security and enabling self-service deployment for software engineers.
- Established a robust monitoring and alerting system for improved infrastructure insights.
- Reduced infrastructure costs by around 50%, contributing to Hijra's financial efficiency.
- Ensured ISO 27001 certification compliance, reinforcing a commitment to superior security standards.

During my time at Tiket.com, I have had the opportunity to lead and grow an Infrastructure and Infosec team at Tiket.com, starting with just 3 people in 2018 and expanding to over 50 by 2022.

I have implemented a number of significant changes and improvements, including:

- Migrating the company's infrastructure from bare metals to the cloud, including a move from VMs to K8s.
- Transitioning from a monolithic to a microservice architecture.
- Optimizing and reducing infrastructure costs by more than 35%.
- Developing and implementing a self-service internal monitoring platform using Prometheus and Grafana.
- Establishing a centralized log system for all applications and infrastructure.
- Implementing an Active Directory (AD) and integrating it with employee laptops.
- Setting up a secure VPN to allow access to the Tiket.com network across multiple environments.
- Implementing a CI/CD pipeline using Jenkins and ArgoCD, integrated with SonarQube.

In the realm of Infosec, I have also made significant contributions, including:

- Achieving PCI DSS, ISO 27001, and BSSN Indeks KAMI certifications for Tiket.com.
- Implementing a security awareness program and secure coding classes to educate employees about the importance of security.
- Implementing SAST (Static Application Security Testing) and DAST (Dynamic Application Security Testing).
- Establishing security monitoring and audit processes to monitor logs and sensitive information from services, servers, and infrastructure stacks.

As a Solutions Architect, I have:

- Successfully managed multiple IT vendors, ensuring smooth communication and project execution.
- Acted as a bridge between business and technical teams, translating business needs into technical requirements.
- Experienced in building, implementing, and deploying Enterprise Cloudera Hadoop clusters on-premises and in the cloud, handling data at the petabyte level.
- Designed and implemented Eureka's Application APIs Architecture, ensuring efficient and effective communication between systems.
- Served as a Lead SRE, actively participating in hands-on responsibilities and troubleshooting.

As a consultant, I have:

- Deployed Cloudera Hadoop clusters by using commodity servers.
- Plan, Deploy and Manage Cloudera Hadoop clusters. (On-Premises)
- Implementing ETL tasks.
- Data cleansing, parsing, and manipulation.


Technologies:
Ansible, Spark, Hive, Python, Bash, MySQL, Ubuntu 14.04.

As a Technology Advisor at SuperSoccerTV (now known as Mola.TV), I had the opportunity to lead a project to assess and improve our infrastructure requirements. This included designing and implementing a new server and infrastructure setup, migrating from bare metal to VMs with autoscale support, and implementing automation for app and server deployment using CI/CD.

I also worked on building the backend and infrastructure to support high concurrent users using technologies such as Ansible, Python, PHP7-CLI, Bash, NodeJS, Memcached, Redis, Nginx, Apache, HAProxy, Zabbix, Newrelic, Centos 6.8, and Ubuntu 16.04.

Overall, it was a challenging but rewarding project that allowed me to improve my skills in systems engineering and infrastructure design to boost the stability and scalability of our platform.

As a Software and System Engineer, I had the opportunity to work on various projects including:

- Building and implementing a highly scalable online ad-serving engine
- Building and implementing a near-real-time analytics application
- Building and deploying a Cloudera Hadoop cluster

I utilized a variety of languages including Java, Ruby, PHP, and C as well as Hadoop's specific technologies such as Hive, Impala, Pig, and Spark

Throughout these projects, I gained experience with a range of technologies including Linux, Hortonworks, Cloudera, MySQL, HBase, Cassandra, MongoDB, Redis, Memcached, Twemproxy, Apache Flume, Apache Spark, Apache Solr, Apache Kafka, Camus, Oozie, HAProxy, Nginx, Apache Web Server, and Ansible.

As a Solutions Architect, I am responsible for performing business and system analysis, choosing technology and vendors, designing server and network architecture, and creating scalability plans for various projects. I have successfully completed several projects, including:

- APSIWatch: Led the team in defining business requirements and implementing a comprehensive solution. 
- Data Warehouse and Analytics Platform: Designed a scalable architecture and oversaw the successful implementation of the platform.
- Mobile Messenger: Worked with the team to choose the appropriate technology and vendor for the project, and ensured smooth implementation.
- MySQL Database Recovery: Successfully recovered 95% of InnoDB data, saving the company valuable data and resources.

Firman Gautama🇮🇩