Teemu Suvanto

• Maintained a SaaS billing platform on AWS as part of the Site Reliability Engineering (SRE) team.
• Played a key role in an AWS cloud migration project, implementing Terraform (IaC), creating CI/CD processes and pipelines, hardening images, upgrading tool versions, and developing scripts.
• Wrote documentation.

AWS Cloud migration:

• Design and implement CI/CD for deploying AWS resources using GitLab CI, Terraform, and GitOps.
• Create and configure DevOps toolchain including Jenkins, Harbor, and Vault.
• Deploy billing application, microservices, and supporting infrastructure services to Nomad clusters.
• Re-designed TLS/mTLS certificate management using Vault and Lambda.

Security (Infrastructure Hardening & Patch Management & Vulnerability Scanning):

• Managed multiple AWS accounts for Consul/Nomad/Traefik clusters (10–20 EC2 instances/account, ASG) and DevOps toolchain accounts (Harbor, Jenkins, Vault).
• Created hardened AMIs via Packer based on CIS benchmarks for Nomad, Jenkins, Harbor, and Vault; deployed using Terraform.
• Integrated Trivy via Harbor plugin for container image scanning.
• Implemented strict AWS VPC security group rules.
• Developed and maintained patching process across environments using Qualys and Wiz.
• Deployed Qualys Cloud Agent to all EC2 instances, tracked CVEs and tested patches in lower environments before rollout.
• Automated patch deployment across all AWS accounts using Terraform and GitLab CI and verified patch compliance via Qualys/Wiz dashboards.

• Member of the IT-Engineering team and contributor to a datacenter migration project.
• Wrote and maintained Ansible playbooks and modules, configured Ansible Tower, and managed Red Hat Satellite Content Views (CV) and Composite Content Views (CCV).
• Conducted connectivity testing and submitted firewall requests.
• Configured Icinga2 for new system setups.
• Migrated Jenkins pipelines and transitioned from Subversion to Git.

• Member of eSW Infrastructure team.
• Implemented IaC for build/test agents and Azure Cloud resources.
• Implemented pipeline scripts and troubleshot problems with developers.
• Implemented build versioning and packaging.

• Member of Data Science Platform team, improving high availability of services.
• Tested and deployed a new DNS solution; created test cluster for HashiCorp stack.
• Upgraded versions of HashiCorp Consul, Nomad, Python, and Ansible.
• Implemented Nexus apt repositories and maintained ELK stack.
• Created GitLab CI pipelines and documentation for internal processes and tool usage.
• Interviewed new candidates.
• Configured Prometheus retention, storage, rules, and re-labeling; configured exporters and created Grafana dashboards.
• Participated in Azure Cloud migration: created Jenkins pipelines and shared pipeline library (Job DSL & scripted syntax), implemented Terraform code, deployed Helm charts to AKS, created support requests, and maintained Jenkins in OpenShift.

• Worked as a Configuration Manager in Android platform CM team.
• Maintained Android software builds and created system branches.
• Hosted CM education courses and deployed test automation systems.
• Wrote test cases, conducted code reviews, and contributed to an open-source project.

• Member of Continuous Integration team, ensuring CI system functionality and high-quality software builds.
• Performed daily Jenkins and Gerrit administration.
• Developed scripts for build/release automation and visualized commit metrics.

• 04/2006–09/2007: External employee at client premises performing software configuration management, build, test, and release deliverables; developed build tools and troubleshooting.
• 10/2005–04/2006: Developed a Java-based UI design/customization tool using Xuikon/S60 framework; ported engine and UI components.
• Ported a Symbian C++ application to Maemo platform, redesigning UI to support pen input.
• Developed a mobile multimedia application for S60 terminals.

• Worked in an experimental software project at IT-media laboratory.