[pattp.dev ]
~/resume$
▋
About Blog Projects Categories Tags

Resume

Published on
• 4 min read

Pathompong Pechkongtong🔗

DevSecOps | SRE | DevOps

Experience🔗

Conicle Co., Ltd. (Bangkok)🔗

Senior DevSecOps Engineer (Jun 2024 - Present)

  • Responsibility:
    • Design, operate, and secure multi-cloud and on-premise infrastructure across AWS, Huawei Cloud, GCP, Digital Ocean, and customers' on-premise environments.
    • Run our Learning Management System (LMS) for ~100 customer sites, in both dedicated and multi-tenant setups.
    • Provision cloud infrastructure with Terraform; package and deploy workloads to Kubernetes with Helm (migrated from Kustomize), using GitOps with GitLab CI, GitHub Actions (ARC runners), and ArgoCD.
    • Build observability with Prometheus, the VictoriaMetrics stack (VictoriaMetrics, VictoriaLogs, VictoriaTraces), and Fluent Bit, visualized in Grafana dashboards.
    • Provide the data engineering team with a streaming and ETL platform, Using Airflow, Airbyte, Debezium, Kafka, and Flink.
    • Designed and built a zero-trust network access platform for developers to reach internal infrastructure — NetBird (WireGuard mesh VPN), Zitadel IdP for fine-grained access control with OIDC federated from Google Workspace, HashiCorp Boundary for brokered SSH/Kubernetes access, and PowerDNS for internal resolution (split-horizon DNS).
    • Own the vulnerability-management lifecycle for the VM fleet — rolling out proactive CVE scanning with Nuclei that feeds a Molecule-tested Ansible remediation pipeline (CI on self-hosted ARC runners) which applies staged patches and orchestrated, windowed reboots, plus Terraform infrastructure fixes; Kubernetes nodes are covered by Falco + Kyverno runtime security.
    • Mentor and guide teammates day to day — answering technical questions, reviewing designs, and sharing DevSecOps best practices across the team.

Sellsuki Co., Ltd., (Bangkok)🔗

Senior Site Reliability Engineer (Mar 2023 - May 2024)

  • Responsibility:
    • Maintain and improve the infrastructure for the company's SaaS product called Akita, Using Kubernetes (AWS EKS) with Terraform.
    • CI/CD and Automation with GitLab CI and ArgoCD.
    • Implemented observability, logging and alert system. Use FluentD, Prometheus, AlertManager, OpenTelemetry and Grafana LGTM (Loki, Grafana, Tempo, Mimir).
    • Implemented applications secret with Hashicorp Vault and External Secret Operator.
    • Implemented internal service access via Wireguard tunnel and Authentication with Google Workspace OIDC.
    • Design and implement infrastructures based on the customer's requirements (contract jobs).

Arthur SEA Co., Ltd., (Bangkok)🔗

Senior DevOps Engineer (Mar 2021 - Sep 2022)

  • Responsibility:
    • Transform infrastructure to Kubernetes (AWS EKS) with multi-account on AWS for Micro-Services Architecture.
    • Improve the performance, stability, scalability, and cost-effective.
    • Secure the infrastructure and application, Using Falco, Teleport, AWS Secret Manager.
    • CI/CD Automation, Using GitHub Action, AWS ECR.
    • Setup and provide the logs and metrics data for monitoring and investigation, Using FluentBit, Grafana, Prometheus, AlertManager, Elasticsearch, and Kibana.
    • Mentor Junior DevOps in the team.

DevOps Engineer (Apr 2019 - Mar 2021)

  • Responsibility:
    • Maintain and monitor existing infrastructure on AWS, Alert the team when system failure.
    • Dockerized local environment for company-wide.
    • Improve the deployment system, Using Jenkins.
    • Improve the internal network inside our office, Using VPN for the internal network secure access.

Web Developer (Mar 2019 - Apr 2019)

  • Responsibility:
    • Develop a property management system called Arthur, Using CakePHP Framework, NodeJS, and Python.

Power Systems Integration Co., Ltd. (Bangkok)🔗

Full Stack Web Developer (Jun 2016 - Jun 2018)

  • Responsibility:
    • Management project that provides the data to customers with RESTFul API. using PHP, Redis, MSSQL MariaDB, Socket.io, Vue.js.
    • Setup and maintain On-Promise servers, Using Vmware ESXi, Linux(Debian) and Windows Server OS.

Skill🔗

  • Languages: Go, Rust, Bash, Python, PHP
  • Tools: Git, Docker, Kubernetes, Helm, Kustomize, ArgoCD, Terraform
  • Observability: Prometheus, VictoriaMetrics stack (Metrics, Logs, Traces), Grafana, Fluent Bit, OpenTelemetry
  • Data Platform: Airflow, Airbyte, Debezium, Kafka, Flink
  • Software: JetBrains, NeoVim, VSCode, Microsoft Windows (WSL), CachyOS (Arch Linux)
  • Cloud Service: AWS, GCP, Huawei Cloud, Digital Ocean, On-premise
  • SaaS Service: GitHub, GitLab, BitBucket, Jira, Sentry, SonarCloud

Education🔗

Cha-Uat Wittayakarn Secondary School — 1997 - 2000