Michael Leer-Hipple

Cloud & Platform Consultant

Harlow, Essex, UK 077 1462 0633 [email protected]

Professional Summary

Seasoned engineer with nearly 20 years of experience designing, operating and leading teams to deploy applications for businesses of varied sizes. Expertise in cloud strategy, cloud security and Kubernetes, employing Agile, DevOps, reliability and chaos engineering practices to deliver scalable, robust systems that are efficient and pleasurable to use and maintain. Contracting through Gremlin LTD since 2018.

Professional Experience

2018 to present

Managing Consultant

Gremlin LTD

IT consultancy providing engineering resources across AWS, Azure, Kubernetes, Linux and Windows. Client engagements:

Senior DevOps Engineer

Kennek (via Gremlin LTD)

GitOps-based Kubernetes deployment architecture with minimal manual intervention; custom Operators and Resources. Implemented a secure AWS account hierarchy with access elevation via Azure PIM. Extensive Linux, Node.js and Python.

Technologies: AWS, EKS, K8s Operators, GitOps, GitHub Actions, Azure PIM

Senior Engineer

Cambridge Broadband Network Group (via Gremlin LTD)

Engaged to cover a departing permanent staff member. Accelerated Kubernetes and OpenShift adoption, worked with clients on implementation issues, and assisted in the architecture of internal PKI solutions on the platform.

Technologies: On-Prem, GCP, OpenShift, Kubernetes, PKI, GitOps, Helm, Terraform

Principal Cloud Engineer

Aer Lingus (via Gremlin LTD)

Migrated the contact centre to Salesforce and Amazon Connect. Built voice-driven menus with Lambda and Lex, brought manually provisioned infrastructure under Terraform and CloudFormation, and designed self-service SMS/WhatsApp journeys with SNS and Pinpoint.

Technologies: AWS, Amazon Connect, Lambda, Lex, Terraform, Python

Principal Engineer

VectaBass (via Gremlin LTD)

Brought in to accelerate the adoption of infrastructure as code and create deployment pipelines, across AWS, on-prem and AI workloads.

Technologies: AWS, On-Prem, Ollama, OpenAI, Anthropic, Lambda, Terraform, GitHub Actions, Python

DevOps Engineer

WorldPay (via Gremlin LTD)

Data-lake infrastructure and security with secure, role-based access to PII. Upgraded legacy Terraform, designed least-privilege cloud policies, created Kubernetes clusters with RBAC, and developed GitOps deployments.

Technologies: AWS, Terraform, Kubernetes, RBAC, GitOps

Senior Developer

BigBear.ai (via Gremlin LTD)

OS provisioning for national-security-critical equipment using PXE and Ansible on Linux. Redesigned backup solutions for robust data lifecycle management, made platform installs reproducible, and led the migration to GitHub with Actions-based CI/CD.

Technologies: Linux, PXE, Ansible, GitHub Actions

Senior Engineer

Ministry of Justice (via Gremlin LTD)

Brought in as a DevOps specialist. Improved automated deployment pipelines, removing manual intervention, and created a number of GitHub Actions to improve integration between GitHub and Azure / Azure DevOps.

Technologies: Azure, Azure DevOps, GitHub Actions, Terraform, Python

Site Reliability Engineer

Mention Me (via Gremlin LTD)

Modernised legacy cloud infrastructure to secure infrastructure-as-code. Created a Kubernetes environment and deployment pipeline to raise development velocity; upgraded Elasticsearch from an EOL version with minimal downtime.

Technologies: AWS, Terraform, Kubernetes, Elasticsearch

Staff Platform Engineer

Fnality International

Comprehensive security audits and management of complex Kubernetes clusters. Designed and developed public key infrastructure, significantly strengthening the security architecture, while training technical and non-technical colleagues.

Technologies: Kubernetes, PKI, Blockchain, Security auditing

Lead DevOps Engineer

Vive (GH Bank)

Secure cloud-native architecture and internal security tooling for a bank. Automated GitOps for Kubernetes and AWS, led DevOps and DevSecOps teams, optimised cloud costs, re-architected Spring microservices, and designed controlled-egress proxying from AWS.

Technologies: AWS, Kubernetes, GitOps, Spring, DevSecOps, Cost optimisation

Earlier Career

Head of DevOps

CallSign

Senior Software Engineer / SRE

Ocado Technology

Principal Engineer / SRE

Crownpeak

Engineer

Cloudflare

Senior Linux Engineer / DevOps

Rackspace

Senior Engineer

Capita

Senior Engineer

London Councils

Support Engineer

Red Bee Media

Deployment Engineer

Ministry of Justice

System Administrator

BJ Computers

Technical Skills

Cloud & Containers: Amazon Web Services, Kubernetes, Docker, Rancher
Automation & Code: Terraform, Ansible, Python, Node.js, GitHub Actions
Operating Systems: Linux, Windows Server, BSD

Certifications

AWS Certified Solutions Architect Associate, October 2019
Red Hat Certified Administrator, March 2013

Open Source

terraform-provider-pocketid - Terraform provider for Pocket-ID: OIDC clients, users and groups as code. On the Terraform Registry.
ansible-collection-pocketid - Ansible collection managing Pocket-ID users, groups, OIDC clients, SCIM and secrets, with zero runtime Python dependencies.
action-approve-pr - GitHub Action gating CI jobs on human approval via PR comment reactions, bound to the head commit SHA.
npm-docker-sync - Rust service syncing Docker labels into Nginx Proxy Manager, with Let's Encrypt via Cloudflare DNS-01.
aws-ssh-config - Generates an SSH config from the AWS EC2 API.
ansible-nebula - Ansible role to deploy Nebula, a scalable overlay networking solution.
buildsociety - Community org producing quality Docker images: Nebula, cloudflared, Wrangler, Terragrunt and more.
docker-base - Minimal, hardened base container images: Alpine, Wolfi, Ubuntu and distroless variants from ~3MB.