
Gianfranco Groppo
DevOps/SRE Engineer
About Me
I am a proactive and solution-driven IT professional with a Systems Analyst degree from the National University of Córdoba (UNC) and 15+ years of experience across IT operations, system administration, and DevOps/SRE engineering.
Specialized in cloud-native infrastructure, system reliability, and enterprise automation. Proven track record in orchestrating deployment pipelines, managing multi-cloud platforms (AWS/Azure), and troubleshooting complex enterprise environments across Kubernetes, NGINX, Terraform, Ansible, etc.
Adept at bridging technical support with SRE methodologies to resolve critical production incidents, optimize security workflows, and ensure zero-downtime reliability for global enterprise clients.
Bio
Professional Skills
Languages
Work Experience
- Enterprise Incident Escalation & SLA Management: Serve as the senior escalation point for high-impact production incidents on an enterprise data intelligence platform, ensuring system stability, performance, and uptime across hybrid SaaS/Cloud and On-Premise deployments.
- Diagnostic Lab Provisioning: Provision and configure staging/QA environments in AWS using Terraform and Jenkins to replicate customer-reported issues.
- Kubernetes & Container Workload Management: Manage application deployments within Kubernetes QA clusters—inspecting pod events, analyzing container logs, performing pod restarts, and tuning manifest configurations—while maintaining Docker containerized workloads for On-Premise customer instances.
- Observability & Deep-Dive Diagnostics: Conduct end-to-end telemetry and root-cause analysis using Grafana dashboards and metrics for Cloud infrastructure, alongside direct container log extraction and analysis for On-Premise environments.
- Advanced Database Auditing & SQL Analysis: Authored and executed complex SQL queries across relational database engines (PostgreSQL, Oracle, MySQL, MS SQL, Databricks, Snowflake, BigData) to extract diagnostic telemetry, audit tenant metadata, and verify data consistency across Cloud environments.
- Identity Management & SCIM Integration: Configured and troubleshot enterprise identity integrations using the SCIM protocol to automate user provisioning, directory synchronization, and access governance.
- Metadata Ingestion & Connector Troubleshooting: Assisted enterprise clients in resolving failures with metadata extraction and schema harvesting jobs across disparate data sources and data lakes, debugging JDBC/ODBC connectivity, network/firewall timeouts, and incremental refresh errors.
- Query Log Ingestion (QLI) & Search Diagnostics: Diagnosed and resolved issues with Query Log Ingestion (QLI) pipelines and search indexing failures, troubleshooting parser mismatches, missing execution metrics, and database audit log access to ensure accurate data usage insights and recommendations.
- Cloud-Native Security Support & Escalations: Provided Senior-level technical support and deployment management for Wallarm’s cloud-native WAF and API security platform across multi-cloud and Linux (CentOS, Ubuntu, Debian) environments, protecting billions of monthly API requests for global enterprise clients.
- Kubernetes Orchestration & Sidecar Architecture: Deployed and managed Wallarm filtering nodes as sidecar containers within Kubernetes pods using Helm and Docker, ensuring real-time traffic inspection and microservice protection without impacting application performance or latency.
- Advanced NGINX Configuration & Traffic Tuning: Leveraged deep NGINX expertise to author custom inspection directives, optimize traffic routing, and fine-tune reverse-proxy configurations to prevent complex Layer 7 exploits across REST APIs.
- Infrastructure Automation & Diagnostic Reproduction: Used Ansible, Terraform, and Docker in cloud lab environments to automate node provisioning, ensure infrastructure consistency, and replicate client network topologies to isolate edge-case bugs and validate configurations.
- Active Threat Mitigation & API Security: Calibrated custom protection rules to defend against OWASP Top 10 vulnerabilities (SQL Injection, XSS, RCE, Insecure Deserialization), as well as botnets, Account Takeover (ATO), credential stuffing, API abuse, and Layer 7 DDoS attacks.
- API Discovery & Behavioral Analytics Support: Troubleshot Wallarm’s API Discovery and API Abuse Prevention modules, diagnosing issues with automatic OpenAPI specification generation, endpoint inventory mapping, and machine-learning baseline anomalies to detect shadow APIs, BOLA/IDOR vulnerabilities, and sensitive data flows (PII/Credentials).
- API Gateway & Ingress Proxy Integrations: Provided Tier 3 support and root-cause analysis for Wallarm filtering node integrations across modern API gateways and reverse proxies (Kong, Envoy, NGINX Ingress, AWS ALB/NLB), debugging webhooks, custom Lua scripts, and API token authentication failures.
- Diagnostic Lab Provisioning & Reproduction: Replicated complex, multi-platform customer environments (AWS, Azure, Docker, Kubernetes, Linux/Windows) using Terraform, Ansible, Vagrant, and Jenkins to isolate bugs, test CI/CD pipeline triggers, validate custom configurations, and deliver reliable workarounds.
- Technical Support & Troubleshooting: Provided expert-level troubleshooting for enterprise customers resolving configuration failures, integration roadblocks, and operational issues within Rundeck.
- API Automation & Tooling: Developed Python and Bash scripts utilizing the Rundeck REST API to automate diagnostic tasks, streamline reproduction workflows, and assist clients with advanced workflow orchestration.
- Ecosystem & Integration Guidance: Supported customers in integrating Rundeck with diverse infrastructure components, including databases (Oracle DBs, MySQL, PostgreSQL, MSSQL), Cloud storage buckets (S3, Blob), container platforms (Docker, Kubernetes), and third-party notification systems.
- Critical Incident Management: Led live remote triage sessions (Zoom) for critical P1/P2 issues, performing deep-dive log analysis across Linux (Ubuntu, CentOS, RHEL, Rocky) and Windows Server environments to deliver rapid resolutions and SLA compliance.
- Observability & Monitoring: Utilized Prometheus and Grafana, Datadog, Splunk, Log4j, to monitor test/lab environments, analyze metric behaviors, and troubleshoot performance or service degradation issues.
- LDAP & Single Sign-On (SSO) Troubleshooting: Troubleshot identity and access management setup, resolving active directory/LDAP connection timeouts, bind user issues, nested group mapping errors, and SAML/OAuth SSO (Okta, Azure Entra, Ping) configurations
- Secret Manager Integration & Plugins: Assisted clients with integrating enterprise key managers—including HashiCorp Vault, AWS Secrets Manager, Azure Key Vault, CyberArk, and Delinea/Thycotic—into Rundeck’s Key Storage facility to prevent hardcoded credentials across automated execution workflows.
- Site Infrastructure & Operations Leadership: Regional IT operations and infrastructure for the Córdoba branch, managing hardware, software, and network availability for over 100 local users and operational workstations.
- Systems Administration & File Management: Windows Server 2016, and Debian Linux file servers administration. Managing access controls, maintain system uptime, and secure cross-departmental data sharing.
- Network & Security Administration: Managed core local network infrastructure—including routers, switches, structured cabling, and Sophos XG Firewalls/Proxies—to enforce perimeter security, web filtering, and stable connectivity.
- Remote Management & Helpdesk Support: Provided Tier 1–2 technical support across local and remote workstations using RDP, SSH, TeamViewer, AnyDesk, and VNC, maintaining rapid incident response and high system availability.
- End-to-End eCommerce Platform Deployment: Designed and launched a custom online store for a fashion brand using the Tiendanube CMS, delivering a responsive user interface and seamless shopping experience.
- Front-End Customization & Styling: Applied custom CSS to override template limits, tailoring visual layouts, branding elements, and component styling to match brand guidelines.
- Domain & DNS Management: Managed domain registration, DNS records, and SSL settings to guarantee platform availability, secure web traffic, and proper site routing.
- Google Workspace & Email Infrastructure: Provisioned, configured, and administered Google Workspace (G Suite) enterprise email accounts and DNS MX records for reliable domain communications.
- Server Administration: Managed Windows Server 2008 domain controllers, Active Directory (AD), Group Policies (GPO), DNS, and core network services.
- Network & Security: Designed, installed, and configured network infrastructure, including switches with VLAN segmentation, router Access Control Lists (ACLs), port forwarding, IP security protocols—to optimize traffic flow and protect internal assets.
- Observability & Monitoring: Deployed and maintained a centralized Zabbix monitoring server to track network devices, server health, and service availability, enabling proactive fault detection and minimizing system downtime.
- Data Resilience & Disaster Recovery: Implemented automated backup and recovery procedures for critical server databases and end-user workstations, ensuring business continuity and data integrity.
- Digital Infrastructure & SEO Management: Administered Google Business Profile and brand assets, applying Search Engine Optimization (SEO) techniques to enhance digital search visibility and drive inbound real estate leads.
- Workstation & Local Network Infrastructure: Administered local network (LAN) operations and provided end-user technical support for legal staff across Windows 7/10 workstations, maintaining high hardware reliability and data security.
- Network Security: Configured and managed network routers, implementing Access Control Lists (ACLs), Dynamic DNS (DDNS), port forwarding, and security rules to enable stable remote access and protected network traffic.
- Data Management & Custom Database Development: Architected and maintained a custom Microsoft Access database system to streamline client data storage, case management, and internal record retrieval.
- Web Development & Front-End Design: Designed, developed, and maintained the official website using HTML, CSS, JavaScript, and Bootstrap, ensuring responsive design and cross-browser compatibility.
- Data Resilience & Backup Operations: Implemented and scheduled routine workstation data backup procedures to ensure data retention, compliance, and disaster recovery readiness.
- Batch Operations & Transactional Processing: Executed, scheduled, and monitored high-priority daily and monthly batch job processing for critical banking transactions, ensuring strict operational timelines and data integrity.
- Enterprise Backup & Disaster Recovery: Managed enterprise-level data backup and system imaging routines using Veeam Backup & Replication and Veritas NetBackup across production Windows Server infrastructure to enforce strict financial data retention standards.
- Server & Service Observability: Monitored core server metrics, network services, and infrastructure health using Nagios to proactively identify performance bottlenecks and prevent service disruptions.
- Identity & Access Management: Administered Active Directory (AD) user accounts, domain permissions, and access controls in compliance with banking security policies and operational audit guidelines.
- Workstation & Server Deployment: Installed, configured, and secured client workstations and servers across Windows XP, Windows 7, and Windows Server 2003 operating environments.
- Network Setup & Infrastructure Administration: Installed and administered local area network (LAN) infrastructure, managing hardware connectivity, IP configurations, and network resource sharing.
- Hardware & Software Diagnostic Support: Delivered Tier 1–2 technical support to diagnose, troubleshoot, and resolve hardware component failures and software operating issues.
- Remote Management & Desktop Support: Utilized remote administration tools—including Remote Desktop (RDP), SSH, VNC, and TeamViewer—to provide rapid diagnostic assistance and system maintenance.