Fernando Quiroga

• Built and standardized 129 CI/CD pipelines (Jenkins + GitHub) using SAM, CDK, Terraform, Bash, enabling reliable delivery across 6 AWS accounts and 3 regions (us-east-1, us-west-2, eu-west-2).
• Supported platform operations at scale across 30 Kubernetes/EKS clusters and 273 services, driving consistent deployment practices and operational stability.
• Increased delivery throughput by enabling deployments for ~20 services/week, improving release consistency across multiple teams/lane structures (5 lanes, ~150 users supported).
• Worked in observability modernization using OpenTelemetry (OTEL) to standardize telemetry and streamline rollout of metrics/logs/traces across CloudWatch, Prometheus, Grafana, Loki, Tempo (plus SolarWinds), improving incident response.
• Reduced MTTD/MTTR from ~15 minutes to ~4 minutes through better alerting, dashboards, and runbook-driven triage aligned to SRE best practices.
• Drove 15% cost savings via platform optimization (capacity/right-sizing, deployment efficiency, and operational controls) across multi-account environments.
• Provided AWS networking architecture advisory including BGP peering, Transit Gateway, and Cloud WAN designs to support secure multi-region connectivity and scalable routing patterns.
• Built internal automation services to accelerate troubleshooting and reporting for network issues, AWS best-practice checks, and RDS diagnostics, reducing manual toil for Ops teams.
• Implemented a self-service portal to automate onboarding and provisioning (VPN access, GitHub repo creation, AWS accounts creation, Secrets Manager and database provisioning), reducing cycle time and operational overhead.
• Fine-tuned and troubleshot ECS deployments (scaling, rollout strategies, networking, performance) to improve reliability in production workloads.

• Fine-tuned and troubleshot ECS deployments (scaling, rollout strategies, networking, performance) to improve reliability in production workloads.

• Building a multi-agent orchestrator for our EKS/ArgoCD operations, with separate agents for triage, pipeline diagnosis, RCA, and incident response

Tech: AWS, EKS/Kubernetes, ECS, Jenkins, GitHub Actions,GitHub, GitOps, ArgoCD Terraform, CDK, SAM, Bash, OpenTelemetry, CloudWatch, EC2, Redis, Amazon MQ, Apache Kafka, Sagemaker, Prometheus, Grafana, Loki, Tempo, SolarWinds, Transit Gateway, Cloud WAN, BGP, RDS, vLLM, Agent-SDKs, Local Inference, Nvidia GPU Tweak.

• Built and maintained CI/CD pipelines to deploy cloud workloads using Infrastructure as Code (IaC), improving release consistency and reducing manual deployments.
• Administered Jenkins (job/pipeline design, shared libraries, credentials, agents, access controls), improving build stability and delivery throughput.
• Executed migration projects across cloud environments, coordinating cutovers and minimizing downtime while improving reliability and maintainability.
• Implemented a centralized metrics and logging stack using Prometheus, Grafana, and Loki, enabling better visibility, alerting, and faster incident triage.
• Operated and fine-tuned Kubernetes clusters on EKS and AKS (scaling, resource requests/limits, cluster add-ons, networking/ingress), improving platform performance and stability.
• Developed automation and tooling with Python, Terraform, and Bash to reduce operational toil and standardize provisioning and configuration.
• Delivered solutions in Azure (platform provisioning and operational support), integrating Azure services with CI/CD and Kubernetes workflows.

Tech: Jenkins, CI/CD, IaC, Terraform, Python, Bash, Kubernetes, EKS, AKS, Heroku, Serverless, Prometheus, Grafana, Loki, MS SQL, Postgresql.

• Automated end-to-end network deployments from scratch across Cisco ACI, F5 (Virtual Server provisioning), and Palo Alto Panorama, reducing manual configuration and improving deployment consistency.
• Partnered with architects and platform teams on network modernization initiatives, including ACI Multi-Site designs and enterprise transit routing patterns for scalable, segmented connectivity.
• Developed reusable Terraform modules to onboard applications and provision network resources on-demand, enabling repeatable deployments and reducing provisioning lead time.
• Built and maintained CI/CD pipelines for deploying network/software/infrastructure changes to production with controlled promotion and rollback practices.
• Implemented automated health checks and validation gates across brownfield and greenfield environments, improving change safety and reducing incident risk.
• Delivered Kubernetes infrastructure deployments using Terraform for AKS and EKS, standardizing cluster provisioning and configuration across cloud providers.
• Authored Ansible automation and Python tooling to orchestrate complex network and platform deployments, integrating with vendor APIs and enforcing configuration standards.

Tech: NetDevOps, Network Automation, Cisco ACI (Multi-Site), F5 BIG-IP, Palo Alto Panorama, Terraform (modules), CI/CD, Ansible, Python, Kubernetes, AKS, EKS, Heroku, routing/transit networks, brownfield/greenfield.

Network Reliability Engineer (NetDevOps) — JPMorgan Chase & Co. (JPMC)

• Partnered with Network Support to deliver observability and automation platforms, improving reliability and operational efficiency across a global enterprise network.
• Provided Tier 3 escalation support across multiple lines of business (LOBs), troubleshooting complex production incidents in branches and data centers.
• Built automation using Python and Ansible (playbooks/scripts) to deliver health checks, workflow automation, and alarm/condition monitoring, integrating with northbound APIs (REST/SOAP) and southbound interfaces (NETCONF/RESTCONF/OpFlex).
• Led an Intent-Based Networking (IBN) initiative using Infrastructure as Code (Terraform), including development of reusable Terraform modules for standardized network deployments.
• Led Automation-as-a-Service (AaaS) program delivering reusable workflows for automated network deployments and device health checks, reducing manual toil and improving change safety.
• Automated and operationalized network workflows for routing, segmentation, and connectivity, including BGP, OSPF, BFD, VRF/VLAN, VXLAN/EVPN, IPsec VPN, Direct Connect/ExpressRoute, and hub-and-spoke / transit architectures (Transit Gateway).
• Built CI/CD pipelines to promote software/infrastructure/network changes into production with controlled deployment practices and repeatability.

Tech: NetDevOps, Network Automation, Terraform (custom modules), Python, Ansible, CI/CD, REST/SOAP, NETCONF/RESTCONF, Cisco ACI (Multi-Site), F5 BIG-IP, Palo Alto Panorama, Kubernetes (AKS/EKS), Routing/Transit Networks.

• Administered and troubleshot Cisco Nexus (N9K/N7K/N5K/N2K) environments (configuration, upgrades, scripting, incident response), ensuring high availability for critical production networks.
• Deployed and maintained Cisco Prime Infrastructure (installation, configuration, reporting), improving visibility and standardizing operational reporting for network operations.
• Managed large-scale wireless infrastructure supporting 6,000+ clients using Cisco WLC, ISE, MSE, and Prime, improving stability and end-user experience.
• Served as Cisco ISE specialist (RADIUS, TACACS+, AD integration), implementing AAA and access controls aligned to enterprise security standards.
• Administered and automated load balancing / WAN optimization platforms including F5 and Riverbed, supporting application performance and availability.
• Operated and secured multi-vendor firewall environments (Palo Alto, Juniper, Cisco ASA, Firepower), including policy changes, troubleshooting, and change governance.
• Managed IDS/IPS capabilities using platforms such as Cisco FireSIGHT, Palo Alto, and F5, supporting threat visibility and response workflows.
• Implemented network security controls including port security, captive portal, and port profiles, improving posture for enterprise access networks.
• Automated inventory, reporting, and operational workflows by integrating with vendor APIs using REST/SOAP, and implementing automation via Chef and Ansible.
• Supported SDN orchestration and application programming initiatives, contributing to automation and standardized network provisioning.
• Delivered data center interconnect solutions using VXLAN and OTV, enabling scalable L2/L3 extension across remote sites.
• Produced capacity planning and KPI reporting (Wi-Fi performance, vulnerabilities, service health), helping customers reduce risk and prevent outages.

Tech: Cisco Nexus (N9K/N7K/N5K/N2K), Cisco Prime, Cisco WLC, Cisco ISE (RADIUS/TACACS+/AD), Palo Alto, Juniper, ASA/Firepower, F5, Riverbed, IDS/IPS (FireSIGHT), Ansible, Python, Chef, REST/SOAP APIs, VXLAN, OTV, SDN orchestration.

• Managed F5 BIG-IP load balancing (VIPs, pools, health monitors, traffic steering), supporting high availability and application performance.
• Served as network engineering specialist across LATAM sites (Argentina, Brazil, Mexico, Chile, Uruguay), designing topologies and producing standardized network documentation.
• Designed and maintained site-to-site and remote access VPNs for telco and remote sites; administered BGP for autonomous systems to ensure high availability using multi-ISP (3 providers) connectivity.
• Led ISP/provider management (capacity, incidents, hardware analysis) and administered supporting infrastructure components including proxy, switching, storage, and backup platforms.
• Administered Cisco switching environment across access/distribution/core layers (Catalyst 3750X/3560X/2960X/2960SI/2950), implementing VLANs, VTP, ACLs, 802.1X, and secure network segmentation.
• Implemented network health monitoring using Zabbix and Nagios, improving visibility, alerting quality, and operational response.
• Managed IDS/IPS capabilities using Snort, supporting threat detection and response workflows.
• Supported software engineering teams by debugging production network issues using tcpdump and Wireshark, accelerating root-cause analysis and resolution.
• Coordinated scheduled penetration testing across web and infrastructure layers, aligning with OWASP Top 10, CVE/MITRE, CVSS, and CERT guidance; delivered remediation plans to reduce risk and maintain business continuity.
• Executed vulnerability patching and network device hardening programs, improving security posture and compliance readiness.
• Automated infrastructure operations with Chef, Ansible, and GitLab, implementing version-controlled changes for routers, switches, DNS, firewalls, and ACLs.

Tech: Palo Alto Networks, F5 BIG-IP, VPN/IPsec, BGP, Cisco Catalyst, VLAN/VTP/ACL/802.1X, Zabbix, Nagios, Snort IDS/IPS, tcpdump, Wireshark, OWASP Top 10, CVE/CVSS, hardening/patching, Chef, Ansible, GitLab, Linux. MSSQL, Postgresql, Cassandra.

• Owned ticket lifecycle management (triage, escalation, follow-up, vendor coordination, closure), ensuring timely restoration and clear communications during incidents.
• Improved network resilience by designing and maintaining high-availability contingency plans using VRRP and HSRP, reducing single points of failure.
• Implemented and enforced routing and security policies, managing static and dynamic routing including OSPF and BGP across multiple providers and sites.
• Designed and maintained network topologies and diagrams (Visio) and executed network improvements through planned maintenance windows, minimizing business impact.
• Troubleshot end-to-end LAN/VLAN/WAN connectivity issues on Cisco L2/L3 switches, blade switches, and access points, restoring service and addressing root causes.
• Administered Check Point R75 firewalls (NAT and filtering rules), supporting secure connectivity and policy governance.
• Produced operational reports and service provider performance updates, improving visibility into incident trends and network stability.

Tech: Cisco Switching (L2/L3, blade switches), LAN/WAN, VLAN, OSPF, BGP, VRRP, HSRP, Check Point R75, NAT, firewall policies, Visio, incident management, vendor management.

• Designed and engineered network topologies and delivered end-to-end implementations including Cisco core switching (L2/L3) and WAN connectivity using E1 routers, Frame Relay, and MPLS.
• Built and supported foundational services: Active Directory / Domain Controller, DHCP, DNS, file/print servers, and network management services including SNMP (CentOS 6.3).
• Administered proxy services on Debian 6 and supported internal network access controls and connectivity for enterprise users.
• Helped launch and maintain virtualization infrastructure using VMware, supporting server consolidation and service stability.
• Implemented and administered VPN connectivity including IPsec and L2TP, enabling secure remote access and site-to-site communications.
• Supported voice/network convergence by administering Cisco VoIP (Call Manager) and integrating routing/switching across WAN/LAN environments.
• Operated mixed-vendor routing and switching environments including MikroTik, ensuring reliable branch and core connectivity.
• Administered Juniper and Check Point firewalls, managing security policies and NAT rules to support secure network segmentation.
• Led incident management with TELCO/ISP providers, coordinating troubleshooting, escalations, and restoration of critical network services.
• Implemented 802.1X network access control integrated with RADIUS, improving endpoint authentication and access security.

Tech: Cisco (L2/L3 switching, E1, Frame Relay, MPLS, Call Manager), Windows Server 2008, AD/DC, DHCP, DNS, Debian Proxy, CentOS SNMP, VMware, VPN (IPsec/L2TP), MikroTik, Juniper, Check Point, 802.1X, RADIUS, ISP/TELCO incident management.

• Installed, administered, and maintained workstations and servers, ensuring reliable IT operations for clinical environments.
• Provided technical support for clinical imaging equipment and supporting infrastructure, maintaining uptime for diagnostic workflows.
• Delivered end-user and site support via remote access, phone support, and coordinated on-site visits across clinics in Argentina and Chile.
• Administered Windows Server 2003/2008, supporting core services and server health in production environments.
• Implemented and managed Linux-based proxy and firewall services and supported media worklist systems integrated with imaging workflows.
• Installed, configured, and synchronized RIS (Radiology Information System) and PACS (Picture Archiving and Communication System) servers to support imaging storage and retrieval.
• Ensured integration and troubleshooting aligned to DICOM standards, supporting interoperability between imaging modalities and backend systems.
• Configured and administered Cisco switching (Catalyst 3560/2960/500 Express) for LAN connectivity and segmentation.
• Integration with HL7 (Hierarchy level 7) systems within different software modules.

Tech: RIS, PACS, DICOM, clinical imaging support, Windows Server 2003/2008, Linux (proxy/firewall), Cisco Catalyst 3560/2960/500 Express, Cisco PIX, Cisco ASA, remote support, on-site support (Argentina/Chile).