Kayra Otaner
Services
Experience

Experience

Company logo
Roche
Director of DevSecOps
Apr 2023 - Present
Company logo
ADP
Director of DevSecOps
Aug 2021 - Apr 2023
Launched and lead [email protected] team for ADP. Part of Global Security Organization GSO, helping 58K employee organization adopt shift-left practices. Focus areas are NIST 800-53, 800-190, CSF, SSDF, OWAP SAMM v2, SBOM implementation for first & 3rd party code, CNCF Software Supply Chain Security Best Practices. Designed security-as-code & policy-as-code pipelines, named these initiatives as ADP^2 (ADP's Advanced DevSecOps Programs) in early 2022. Both are considered as game changer by Big4 consultancy firms helping ADP. Increased SAST & SCA coverage from 15% to +95%, making a huge impact on security maturity.
Company logo
Voice
DevOps Manager
Jul 2020 - Jul 2021
Managing 8 people DevOps team, 24x7 operation, 100% CloudOps using on GCP & AWS. Terraform & Ansible, IaC and BlockChain (Eos 2.x) operation. Fully dockerized operation, running on K8S (GKE & EKS), using GitOps to trigger plans & applies for Terraform (12, 13 and 14) Recently migrated to regional GKE, replicated STS & PVCs using CSI driver, switching to Argo Rollout controller in Q2 2021 for blue/green & canary (yellow) deployments. Optimized Cloud cost bu 50% in first 3 months, switching to preemptive instances on Devel environments for further cost optimization. On boarded over 12 new hires, fully remote, build team culture & mindset, aligned 3 major initiatives with the rest of the organization, migrated production AWS & GCP workloads to GCP with the new team with picture perfect execution of migration (including single producer EOS block chain infra)
Company logo
adMarketplace
Director of DevOps
Nov 2019 - Jul 2020
Low latency ad-tech platform for SERP utilizing in-memory databases extensively (Aerospike). Migrating on-prem locations to AWS using CoreOS, KubeSpray, Ceph, GitLabCI, Ansible IaC and Packer. Mentoring and coaching both Dev and Ops teams, increasing collaboration both vertical and horizontally across teams. Streamlining CI/CD processes to build containerized (docker) images and deployed to K8S environments, planning on switching from Jenkins to ArgoCI/CD workflows in 2020.
D
DataSkala/SecOps360
VP of Engineering & Partner
May 2012 - Aug 2019
Professional DevOps & SecOps services firm, building scalable & robust systems using Open Source technologies. Helped Top100 internet properties in Turkey, including hepsiburada.com, trendyol.com, tatilbudur.com, emlakjet.com, tatil.com and various others. Specialized in infrastructure projects using CoreOS/ContainerLinux, Kubernetes, Rancher, MySQL, PostgreSQL, Rundeck/Jenkins, Nginx, KongHQ and ElasticSearch. We've helped companies to move their infratstructures to GCP/AWS and back, with zero or minimal downtime. Our expertise helped our customers to manage their cost effectively and build smart infrastructures for their growing IT needs.
BS
BilgiO SecOps
Managing Director
Feb 2015 - undefined NaN
We're leading Security Operations team in Turkey, helping Fortune 500 companies with their Security Operations needs. We're specialized in providing 360 degree view of IT infrastructure. Our expertise helps organizations to gain micro and macro level visibility into what is happening in their network.
Company logo
Xaxis
Sr. BigData & Storage Manager
Jan 2010 - Jan 2012
Managing a large (4xT800) 3PAR storage infrastructure, leading jr SysAdmins in US and overseas. Supporting over 10 Oracle RAC installations, troubleshooting sophisticated network and OS level issues. Responsible for vulnerability management of large number of servers for Sox compliance. Creating and publishing various policy and procedure documentations used internally to minimize human errors and OS misconfiguration issues. Saved company thousands of dollars by consolidating and decommissioning old legacy servers, optimizing backup policies and freeing up over allocated tens of TBs of storage (Sun Storagetek & 3PAR)
Company logo
FICO
Sr. Unix Administrator/DBA/Infrastructure Engineer
Aug 2005 - Jan 2010
Adeptra is leading auto resolution and time sensitive communications provider. Offices in UK, US and in AU helping biggest financial companies in US, UK, AU and SA. Operating from 5 data centers across the world. Compliance with PCI DSS, ISO and SAS compliances for US and Europe operations. Adeptra makes over 1 million phone calls a day, notable clients are Chase, CitiGroup, Barclay, Sabre, Edcon, Cofidis. Sensitive CC & customer data encrypted using AES. Sr. DB Architect&Administrator Responsible for MySQL (4.x, 5.x) servers. Active database size is over 1TB and data growth rate of over +20G/day(InnoDB) per cluster. Ensuring sensitive data is kept secure to satisfy PCI requirements. Scaling out systems by partitioning data, reducing replication lag, increasing response times by developing disposable slave profiles. Maintaining ETL&JMS MQ infrastructure, performance tuning, troubleshooting to reduce latency between messaging systems and databases. Designing column oriented & vertically partitioned DDLs. Sr. Unix Admin/Infrastructure Engineer L3 support escalation point to for infrastructure issues, training and mentoring junior members of the group. Raid & File system optimization, partition alignment, network bonding, Performance tuning using iostat, blktrace, sar, sysbench, Zenoss and custom perf metric collection scripts
Company logo
eFashion Solutions
Sr. System Administrator / CTO
Mar 2003 - Aug 2005
eCommerce service provider with over $15 million revenue in 2005, notable clients are orangecountychoopers.com, dkny.com, rocawear.com, shopjlo.com (Official Jennifer Lopez store), shopelvis.com (Official Elvis Presleys store) CTO Duties Reporting directly to CEO, managing $2 million projected IT budget for 2004&2005. Managing and mentoring development & office IT support personnel. Interviewing new hires, planning and deciding IT budget, project management. Vendor relations with Cisco, AT&T, Rackspace, Paymenttech, Network Solutions, Thawte, Verizon, Avaya, Speedera, Akamai, E4X, Urchin and various others Helped company to obtain PCI compliance, trained personnel to increase awareness of sensitive data stored for business requirements, developed best practices for confidentiality. Sr. System Administrator Duties Responsible for Unix/Windows servers. On call 24x7 for emergencies. Setup and deployment of all servers for DR and production data centers. Administration of servers, LBs and FWs. Migration of web & DB servers between different DCs with %0 downtime. CDN, HTML caching, SNMP based proactive performance monitoring with Zabbix&Cacti. HA setup via heart beat. QMail, Exchange 2003, MSSQL, Great Plains (Microsoft Dynamics) and Connectship (UPS) Windows 2003, FreeBSD and Linux servers. PCI Security scans, patches and server and operating system upgrades on RH AS 2.1, 3.0, Gentoo and FreeBSD servers.