Looking for a job

Ray Schaeken

@rayschaeken

Cloud Infrastructure Architect at Frontastic who transformed its GCP demo environment into a customer-ready platform.

At Frontastic, a commercetools company, I designed and implemented the initial GCP infrastructure for Frontastic Frontend-as-a-Service, transforming an all-in-one Linux demonstration environment into a decoupled, customer-ready cloud platform.

I automated provisioning and customer-facing deployment workflows with Ansible, gcloud and GitHub Actions. As the platform evolved, I redesigned its VPC and subnet architecture and modernized observability with Humio/CrowdStrike LogScale, Vector, Prometheus and Grafana.

I led the transition from VM-based infrastructure toward Kubernetes, designing, implementing and managing Kubernetes infrastructure and application deployment. I also improved deployment with Terraform, Ansible and Spacelift, and started an AWS implementation for customers requiring the product on AWS.

Earlier, I designed AWS and hybrid-cloud environments for CityTouch/Philips Lighting, and worked on enterprise connectivity, IP services and infrastructure security for customers including NXP Semiconductors and AT&T Global Network Services. My experience spans cloud architecture, networking, security, automation and technical project leadership.

Experience

Work history, roles, and key accomplishments

Cloud Infrastructure Architect / Engineer

Frontastic, a commercetools company

Feb 2019 - Mar 2026 (7 years 1 month)

Designed and implemented the initial GCP cloud infrastructure for Frontastic Frontend-as-a-Service, transforming an all-in-one Linux demonstration environment into a decoupled, customer-ready cloud platform. Architected GCP VPCs, VPC peerings, subnets, routing, load balancers, internal firewalling, Cloud Armor, Cloud NAT, compute, MySQL, Redis, filestores, IAM, jump hosts and public/internal DNS.

GCP AWS Terraform Ansible Spacelift ArgoCD GitHub Actions Kubernetes Docker ELK Humio LogScale Vector Prometheus Grafana Google Cloud Armor Cloud NAT VPC IAM MySQL Redis

CyberSecurity Consultant / Engineer @ SOC

Novaccent B.V. (now Tesorion)

Dec 2016 - Dec 2018 (2 years)

Designed secure network and cloud infrastructure for mid-size and large customers. Designed and implemented SIEM and security-monitoring solutions from infrastructure assessment through sensor placement, log/traffic collection, use-case definition, monitoring and continuous improvement.

SIEM Penetration Testing Vulnerability Assessment Ubuntu Windows Docker Kali Linux Metasploit OWASP ELK Salt Kibana Logstash Winlogbeat Security Onion Microsoft EMS Azure Firewalls

Global IT Network / Cloud Specialist

Novaccent B.V.

Dec 2014 - Nov 2016 (1 year 11 months)

Designed and implemented a global software operations environment supporting worldwide customer environments across cloud and hybrid-cloud architectures to provide connected lighting systems and IoT infrastructure. Advised on infrastructure policies and operating models to scale onboarding of additional customers.

AWS VPC VPC Peerings CloudFormation Amazon Cloudfront EC2 ELB S3 Amazon RDS For PostgreSQL Route 53 IAM Cloudwatch AutoScaling EFS SES Fortinet IPsec VPN NAT BGP BIND9 Chef Terraform DevOps Scrum Agile

Connectivity Expert

Novaccent B.V.

Jan 2014 - Nov 2014 (10 months)

Provided 3rd-line engineering, project management and incident/change coordination for enterprise connectivity. Managed IPAM/DHCP/DNS, internet access, proxies, load balancers, secure token authentication, SSL remote access, third-party VPNs and firewalls.

IPAM DHCP DNS Load Balancing SSL VPN Firewalls QoS Traffic Shaping

IP Services Specialist

Novaccent B.V.

Oct 2010 - Nov 2013 (3 years 1 month)

Delivered worldwide IPAM/DNS/DHCP implementation and migration using Infoblox, VitalQIP, Microsoft DNS and native BIND DNS. Provided 3rd-line troubleshooting, documentation and technical guidance across global customer environments.

Info Blox VitalQIP DNS Bind DHCP IPAM Kerberos DNSSEC High Availability

Consultant Infrastructure Security

Novaccent B.V.

Mar 2010 - Oct 2010 (7 months)

Delivered technical security audits and penetration testing for government and commercial customers. Developed security standards frameworks for RFPs and supplier technical/procedural security requirements.

Security Audits Penetration Testing Vulnerability Assessment Security Standards

Technical Specialist / Security Consultant

KPN Dutch Telecom

Jan 2006 - Mar 2010 (4 years 2 months)

Designed secure customer hosting and network infrastructure across shared/dedicated hosting, cybercenters and international WAN environments; acted as technical project leader. Designed and implemented vulnerability-management and SIEM services, including evaluation of Tenable, Qualys, SolarWinds, Splunk and NetIQ.

Vulnerability Management SIEM Tenable Qualys Solarwinds Splunk NetIQ IPS Firewalls Honeypots VPN Info Blox DNS IPAM TippingPoint SSL RADIUS Ace OSPF BGP MPLS VTP Routing Switching Load Balancers AAA Citrix VMWare

Infrastructure & Security Specialist

KPN Dutch Telecom

Mar 2005 - Dec 2005 (9 months)

Led infrastructure migration and unbundling projects across cybercenter environments, firewalls (Checkpoint, Fortinet, Juniper, Cisco ASA), VPN (IPSEC), DNS (BIND), proxy, AAA and routing/switching (including QinQ tunneling). Managed multivendor firewall, network and infrastructure environments and provided 3rd-line troubleshooting.

Checkpoint Fortinet Juniper Cisco ASA IPsec VPN Bind DNS Proxy AAA Routing Switching Q In Q

Freelance Network & Security Specialist

Self Employed

Jan 2002 - Dec 2005 (3 years 11 months)

Provided freelance network and security services including infrastructure redesign, DMZ/firewall architecture, VLAN/routing, VPN, Windows/AD, Exchange, DNS/proxy services, monitoring, security assessments, hardening and disaster recovery.

network design Firewalls VPN VLAN Routing Windows Active Directory Exchange DNS Proxy Monitoring Security Assessments Hardening Disaster Recovery

Tactical Infrastructure Management / Technical Project Leader

AINO B.V.

Jan 1999 - Dec 2002 (3 years 11 months)

Managed KPN customer environments, SAP/Oracle hosting, LAN/WAN, infrastructure strategy, secure BIND9 DNS, IPAM, routing/switching, firewall implementation, security scanning and migrations.