Luca Zecca
Kubernetes Engineer at SIGHUP
System engineer oriented to opensource software and great enthusiast about Puppet architecture and Amazon AWS cloud. In the last years, I started to deepen my interest on provisioning, immutable servers, application performance, continuous integration and continuous deployment.
Thank to tools like Vagrant, Puppet, Hashicorp Packer, Hashicorp Terraform, I began to move from my confidence zone in classic system engineering to Devops themes, that I feel much more interesting, exciting and better match my passion and curiosity.
I began my career developing Java-based architectures, today I am working on a PHP-based distributed architecture, with Amazon AWS autoscaling, MongoDB replica sets, in a business-driven reality that requires much more availability of services and responsiveness of monitoring as well.
In the last years i started to deep containers and containers orchestrator, that perfectly match with distributed architectures and microservices. I moved to Kubernetes my attention and effort in order to dig as much as possible its objects. For the sake of security i also started using Hashicorp Vault inside Kubernetes that massively has increased security giving one super safe entrypoint for all application secrets on one side, to the other the chance to develop internally dynamic secret engine for handling custom generation of secrets. Further I focus my studies around the container orchestration and Kubernetes, initially under the delivery prospect. While I was learning this, I've started developing in golang my first microservices around Kubernetes, understanding even way more thanks to the previous experience. Because of that, i discover to be really enthusiast to have moved to the software development around Kubernetes products because the conjunction of the devops skills and the golang development was a great combination in term of efficiency.
Skills
Backend
intermediate
- golang
- ruby
DevOps
advanced
- Kubernetes
- container
- monitoring
- CI/CD
- automation
- configuration management
- cloud native
- orchestrator
Observability
advanced
- Prometheus
- Jaeger
- Grafana
- EFK
Infrastructure as a code
advanced
- terraform
- ansible
- puppet
Cloud Providers
advanced
- AWS
- GCP
Work Experience (7)
Jun 2020 - Current
Software Kubernetes Engineer
SIGHUP
A kubernetes company involved in the development of a kubernetes distribution and consulting in kubernetes development and setup
- Development of a Kubernetes platform for the management of the cluster lifecycle and provisioning
Jan 2020 - Jun 2021
Kubernetes Engineer
SIGHUP
A kubernetes company involved in the development of a kubernetes distribution and consulting in kubernetes development and setup
- Kubernetes cluster setup
- Development of Kubernetes distribution components
May 2017 - Jan 2020
DevOps Engineer
EASY WELFARE
Creation of Jenkins pipeline for continuous delivery flow with different environments, starting by standardisation of every single project in order to give a common template, useful for automatization of tasks.
Introduced the 'infrastructure as a code' architectural pattern with Puppet configuration management language, in order to keep it quick, testable, easy-to-maintain , reproducible and idempotent.
In order to keep AWS configuration versioned and automated as much as possible, i choose Hashicorp Terraform, really clean and quick, that allow to see resources that will be modified/destroyed/created, so you have the big picture before move on and apply them to your aws account.
As monitoring framework, I introduced Sensu, a ruby framework engine that perfectly handle a such dynamic environment and allow us to implement checks and metrics, triggering custom handlers possibly.
Due to the current nature of the main legacy applications, i preferred to maintain them in an old style deployment with artifact, using as deployment tool, Capistrano, that enables a specific dsl, created for deployment purposes.
All the other services of the company are currently under container, this will enable us to migrate to Kubernetes container orchestrator as soon as we have tested it in our testing environment.
- Terraform infrastracture on AWS
- Kubernetes introduction
- Development environment kubernetes based
- Hashicorp Vault introduction
- Development of multistaging platform
Mar 2016 - May 2017
DevOps Engineer
Conio
Introduced the 'infrastructure as a code' architectural pattern with Puppet configuration management language, in order to keep it quick, testable, easy-to-maintain , reproducible and idempotent.
Configured every Amazon AWS service that we currently use with Amazon Cloudformation management tool.
As monitoring framework, I introduced Sensu, a ruby framework engine that perfectly handle a such dynamic environment and allow us to implement checks and metrics, triggering custom handlers possibly.
Moving to Docker architecture:
- containers :containerized every process of every microservices into container, mostly starting with the slim Alpine Linux official docker image
- orchestrator : choosen Docker Swarm Mode as orchestrator, based mainly on the current available time and traffic.
- reverse proxy: initially i used Traefik, but still too buggy so far with Docker Swarm Mode. For this reason i move to an nginx reverse proxy with in uwsgi_upstream (we have 100 developed in python) the service company that enables the routing mesh round robin feature of Docker Swarm mode.
- monitoring: i was used to work with Sensu, but with a docker cluster orchestrator currently is not well integrated, neither with CAdvisor neither with docker api. For this reason i moved to Prometheus that is a time series database with alertmanager integrated that supports docker api out of the box .
- pipeline and continuous deployments: Jenkins 2.0 with on demand ec2 instances for the unit tests environment, a stable environment with cluster for integration tests and behavioural tests.
- Puppet provisioning of cluster nodes: the management of the cluster is handled by Puppet that provision and configure nodes.
- Packer: used for generating provisioned EC2 AMI so the join to the cluster since the come online are as quicker as possible.
- Development environment: totally managed by docker-compose.
0May 2013 - Mar 2016
DevOps Engineer
Onebip
Implementation and configuration of architecture based on Amazon AWS through usage of Rightscale Management developing custom ServerTemplate and rightscript with bash and ruby languages.
Syslog centralized with graylog2-server, graylog2-web-interface, elasticsearch, mongodb and logstash with GELF as output and grok as parser regexp engine and syslog-ng as proxy to logstash
Fine tuning with multiple pipelines for continuous integration and deployment through the following tools : GO by ThoughtWorks Inc and phing.
Introduced autoscaling architecture based on system load kpi, created self generated template for mongo 'on demand' instance for reporting tasks,based on primary node production last hour snapshot.
Setup provisioning with Vagrant and Puppet for development immutable servers.
Migrating from Rightscale Platform to puppet provisioning of entire architectural stack with usage of custom types ( aws ebs volume management and route53 dns setup).
Pipeline design and implementation making the infrastructure fully managed by Puppet, ruby custom types, ruby object for managing Amazon AMI with packer. Created also a pipeline for most critical role servers with Puppetlabs beaker-rspec for acceptance testing puppet code on every commit thanks to GoCD Thoughtworks github hooks. On the IT environment created the same behavior of the production autoscaling (that allow in the integration testing with behat, to scale up webserver before Behat starts ) modifying the AutoScaling group properties with ruby aws-sdk development. Thanks to this task, we are able also to predict pretty accurately how long the autoscaling process and the puppet provisioning take, in order to setup the new ec2 instances operationals and in service by the elastic load balancer. Measuring and analyzing these iterations, me and my collegue Simone were able to optimize the provision process, integrating most of the puppet catalog execution directly in a custom AMI thanks to HashiCorp packer tool.
0Feb 2012 - Apr 2013
GNU/Linux System Engineer
CON.NEXO'
Configuration and tuning of Redhat Cluster Suite + gfs2 clustered filesystem for ImpresaClic project.
Apache 2.2.22 mpm-worker with mod_jk for stickysession persistence on loadbalancing.
Introduced also Nagios monitoring system with proactive checks also on the application side (jmx implementation,sql custom check).
Development of a structured architectural environments to meet the need to give a consistent path for production release .
Re-implementation of a development server for continous integration, issue tracking and subversion with the followings services : Atlassian Bamboo, Atlassian Jira, Atlassian Clover, SCM Manager, Apache with mod_svn, MediaWiki.
Implementation of virtualized architecture of ImpresaClic for Topica and Ruscomnet russian clients.
0Aug 2007 - Feb 2012
GNU/Linux System Engineer
Webscience
Realizations of several jdk architectures based on jboss, liferay portal and wso2
0Education (5)
2019 - 2022
Certification
Information Technology
The Linux Foundation
- CKA: Certified Kubernetes Administrator
2019 - 2022
Certification
Information Technology
The Linux Foundation
- CKAD: Certified Kubernetes Application Developer
2009 - 2009
Data Center Tecnical Specialist
Novell Certification
2009 - 2009
JB336
Jboss Application Server Administration and Configuration
RedHat Jboss Administration
2006 - 2007
master Free Software Upgrade
Management Information Systems, General
Master Free Software upgrade
Languages
it
Native Speaker
en
Advanced
es
Fluent conversation
References
“Luca is a very sharp & skilled devOps engineer, always on the lookout for the latest tools and techniques. Thanks to his broad experience in the systems field he knows how to tackle and solve all sorts of cross-cutting issues. Both times we worked together, he has put in place for us devs very complex and perfectly functional environments for development, testing and deployment. He enjoys to do his own coding and has an eye for no-frills, resilient integrations. Luca is responsive on every request; he's ready to share his knowledge with his peers by showing & teaching all sorts of life-saving technical tricks.”Marco Faustinelli
“As a CTO, I come into contact with many DevOps Engineer, and Luca, when it comes to CICD pipelines, Kubernetes and DevOps practice, is one of the best I've met. We've worked together supporting a SaaS infra with 600+ tenant and aside from his skill, what I appreciate most is how reliable and responsive he is. He's great for our company and always delivers cutting edge technology. Thanks, Luca.”Mauro Malvestio
“Working with Luca during our time in Onebip has been a blast. He has been introducing me (and the whole team) to modern architectures and scalable infrastructure (provisioned with Puppet), CI pipelines and automatic deployment design. I think it's useless to say that he's extremely competent, a really good team player and manages to stay calm where everyone else would just freak out. Overall, working with him has been a real pleasure and I hope we will have the opportunity to work together again in future.”Jacopo Nardiello
“Since day one, working with Luca has been a real pleasure. He is strongly committed, competent and focused. His focus is strenghtened by great technical skills and sound knowledgeability.”Tommaso Ravaglioli
“During Luca's employment with CONNEXO', Luca has proved to be a highly skilled Systems Engineer who was always keen to help others. Besides his strong technical background in Systems, Luca has always shown an interest to learn about new technologies.”Dorothy Sims
“Durante la nostra esperienza professionale in cui abbiamo lavorato assieme Luca ha dimostrato competenza e precisione nel suo settore di competenza e dal punto di vista umano è sempre stato collaborativo e disponibile verso tutti i componenti del team.”Stefano Bertaiola
“In my opinion Luca is a "Discerning Funky Technician". He has really deep technical skills with GNU-Linux OS/Bash Scripting/Application Servers/Web Servers/Networking. Thinking about Luca I'm definitely sure that he's able to reallize in the best way everything the technology allows to do. But Luca is not only a Technician, he's also Discerning and Funky so he has an incredible perception which makes him a person who could raise the value of every kind of project/activity/discussion, with an extreme easy going approach.”Walter Furlan
“I had the pleasure to work with Luca and his collegues to develop and release Sisal.net website. Luca is an excellent professional and a skilled person, smart with a constant problem solving attitude.”Iole Truppia
“Far funzionare i sistemi in produzione è una miniera di guai. Sistemi con versioni incompatibili, reti che si dovrebbero vedere ma in realtà sono sconnesse. In questi momenti, come anche durante lo sviluppo, avere qualcuno come Luca, cioè che sa cosa fare, sa cosa aspettarsi , e il più delle volte previene, in una enorme varietà di ambienti è essenziale.”Bruno Veronesi
“Luca is passionate about his work and seeks perfection in his line of work. He is dedicated, innovative and always seeks to learn and implement new technologies to have the most efficient and reliable solution implemented. With his skills and knowledgeable he is considered a good asset to the company.”Alexia Azzopardi
“Luca is an extremely qualified, organised and disciplined person. During the time in which we have worked together his skills have been fundamental in the project's success. Apart from a very strong technical background, Luca also posses excellent interpersonal skills as well as a very good sense of humour. It has been my pleasure to work with Luca.”Christopher Micallef
“Ho collaborato con Luca per un anno ed in questo anno quello che ho più apprezzato sono la dedizione e soprattutto la passione che Luca mette nel suo lavoro. Passione che si traduce concretamente nel prendersi carico dei propri task e seguirli assiduamente fino alla completa conclusione e nella voglia di approfondire ed espandere sempre più il proprio know-how.”Marco Canegrati
“Le caratteristiche di luca che ho avuto modo di apprezzare lavorando con lui sono la forte competenza su sistemi unix e la capacità di affiancare le persone dell'area sviluppo coinvolgendole nella preparazione/manutenzione della piattaforma agevolando così la crescita di tutto il team.”Luca Megale
“Luca has a thorough knowledge of systems engineering and continuous maintenance giving focus on rigorous procedure while thinking ahead for extensibility and flexibility before the need arises. He has an enjoyable character and fits in well in a team.”Raphael Borg Ellul Vincenti
“Ho avuto il piacere di lavorare con Luca su diversi progetti e le sue abilità sistemistiche si sono sempre dimostrate di altissimo livello. La sua conoscenza dei sistemi Linux e di Apache è praticamente sconfinata. Quando Luca si imbatte in un problema o in una situazione nuova, prova diversi approcci fino a quando non trova la soluzione migliore possibile, senza mai arrendersi. Assolutamente una risorsa preziosa per qualsiasi team ed un collega simpatico e disponibile con cui lavorare.”Dario Graziotto
“Luca è preparato, professionale e con un grande senso di responsabilità qualità che l’hanno subito integrato in tutti i team in cui ha collaborato. La sua esperienza e la sua passione l’ha portato a progettare e seguire in ogni fase di realizzazione diversi servizi ICT, distribuiti anche a livello mondiale la cui alta affidabilità è un valore e un fattore critico.”Mirko Saccon
“Preparato e tenace, Luca è sempre la persona giusta. Mi ha aiutato spesso a togliermi dai guai, e con Linux non ha mai perso un colpo.”Giambattista Pisasale
“Luca worked with us in the research of economic data of the free software strategies in Extremadura. He was proficient and provided highest standard and exceptional quality results. He was a valuable member of the team, loved by everyone in the department.”Jorge Villar Guijarro
“Non ho mai potuto valutare Luca a livello tecnico, ma ho sempre avuto ottimi feedback dai suoi manager. Capace di pensiero laterale, molto appassionato, volenteroso, con grande voglia di crescere e imparare. A livello soft ho visto di persona quanto Luca sappia accogliere i feedback, comprenderli, mettersi in discussione e migliorare. Stimo Luca, e lo apprezzo davvero.”Francesca Anoja
“Luca is a higly skilled System Engineer with a wide knowledge and problem solving attitude, powered by passion and professional approach. He's definitely a really good element for any team dealing with IT systems of any complexity.”Antonello Calamea
“Appoggia le dita sulla tastiera e la console si riempie di caratteri. E mentre strabuzzi gli occhi per cercare di capire cosa sta facendo, ti sorride e dice "fatto" :-) Ottimo sistemista Linux.”Michael Sacchi
“Luca was my team's right arm on a number of projects involving the development of complex custom-tailored web applications in Java. He always acted professionally, managing tight release deadlines and often working on weekends to avoid breakdowns of daily operations during normal working days. We could not have done without him and his in-depth knowledge of Linux and of the Java server domain.”Francesco Garbin
“Sistemista molto bravo e appassionato, conoscenza di Unix e Apache perfetta.”alain maringoni
“Luca is a skilled GNU/Linux System Engineer. He has a deep knowledge of Open source operating system(specially Centos and Debian/Ubuntu). He is also a nice person to work with..... he makes the workday less heavy indeed”Renzo Rognoni
“Luca è un alleato prezioso perchè ha una conoscenza molto vasta e approfonidita degli aspetti sistemistici. E' un problem solver e riesce ad avere un quadro completo di tutte le problematiche anche in situazioni di particolare complessità.”Giorgio Chiriacò
“Luca has a deep knowledge on Open Source software and SO. He his a kind person with who work is fun every time. He is propositive in finding creative solutions on problems.”Alessandro Galli
“I had the opportunity to interact with Luca following their project and was a nice and positive experience. Luca has an impressive knowledge of the IT systems, especially Linux side, and an innate ability to problem solving. His work is always impeccable and done very quickly. Definitely a resource to have in your projects.”Marco Mornati