CV

Please send me an email at adam[@]pietrzycki[.]com if you would like the PDF version of my CV

Profile

DevSecOps engineer with a background in SRE, DevOps, and Cloud Security. I build and secure cloud infrastructure, covering both preventative controls and incident response. I attend conferences and meetups on AWS, Kubernetes, serverless, and cloud security.

Roles and Positions

Certifications

Technologies

Projects

Risk Ledger

• Refined the disaster recovery process and refactored IaC to allow recovering to a different AWS account and different region.

• Rolled out Wiz Cloud, Defend, and Code across the cloud and SCM providers.

• Upgraded all PostgreSQL databases running close to end-of-life versions to the latest stable version.

Zapier (Security)

• Led technical remediation for the AWS Foundational Technical Review (FTR) programme across 100+ AWS accounts. This got Zapier listed on the AWS Marketplace and qualified for Co-selling.

• Developed and maintained secure base Docker images for Python, Node, and CI with automated patching workflows. Critical and high CVEs fell from 30k to 100s across 15k pods.

• Refactored IaC (Terraform/CloudFormation) for SSO and RBAC across 100+ AWS accounts, reducing execution time from 40+ minutes to minutes.

• Identified and removed legacy infrastructure through security assessments, achieving $500,000 annual cost savings.

• Rolled out Wiz CSPM/CNAPP across multi-cloud infrastructure (AWS, GCP, Azure) and all Kubernetes clusters for unified security visibility and compliance.

• Led the infrastructure migration of the crypto-kernel system, which serves up to 80k requests/second for OAuth tokens/API keys. Moved it from shared EC2 to a dedicated AWS account and Kubernetes clusters. Handed it over to the service owners.

Zapier (SRE)

• Extracted customer-facing webhook endpoints from the monolith into a dedicated service, managing traffic migration up to 20k requests/second using canary deployment techniques.

• Introduced scaling compute using AWS SQS queues and KEDA for event-driven workloads, reducing infrastructure costs during quieter hours of traffic.

• Worked on improving SLO adoption across Compute teams through driving learning sessions and pairing with teams.

X-Lab Systems

• Migrated the National Pathology Exchange (NPEx) from on-premise to Azure cloud infrastructure to scale for pandemic response, supporting 6-10 million COVID-19 tests daily.

• Worked with the NCSC SOC to ensure the cloud infrastructure was secure and compliant, and used Splunk SIEM for tracking COVID test logs.

• Collaborated with NHS networking partners to establish cloud peering and transit networks, connecting Azure environments to NHS SPINE and laboratory networks.

Heycar

• DevOps Team Lead. Migrated the Lambda monolith to Kubernetes, cutting load times by 3 seconds and raising sales by 40%.

• Implemented pull request preview environments, enabling marketing and design teams to review features during development.

• Developed business continuity plans and assisted the finance team with development tax credit applications.

Infinity Works

• Delivered cloud and Kubernetes migrations for enterprise clients including Sainsbury's Group, Santander, and BP.

• Migrated Teradata infrastructure to AWS and Snowflake, updating existing processes and data flows.

• Worked on ensuring the cloud infrastructure was secure and compliant against various banking and retail standards, including CIS frameworks.

• Improved code integration and delivery pipelines, integrating pull request environments and security tools such as tfsec, trivy, and blackduck.

Education

BSc Computer Science, Upper Second-Class Honours

University of Brighton

References

Available upon request