# Colin Knapp - DevSecOps Specialist

**Focus:** DevSecOps & Security Infrastructure  
**Location:** Kitchener-Waterloo, Ontario, Canada  
**Contact:** https://motherboardrepair.ca/contact.html

## Professional Summary

DevSecOps consultant with extensive experience architecting secure, resilient infrastructure for government and healthcare clients. Expertise in compliance standards (WCAG 2.0 AA, CIS Level 1/2), security automation, and building geographically redundant systems. Proven track record of implementing Docker-based solutions and automated security tooling for enterprise environments.

## Key Achievements

- **Government Infrastructure:** Delivered WCAG 2.0 AA compliant learning management systems for US government clients through Addis Enterprises (2019-Present).

- **DNS Resilience:** Architected geographically redundant DNS cluster for Bishop Airport achieving A+ standard, capable of withstanding extreme disruptions including nuclear scenarios.

- **Security Automation:** Created Docker-based utility for automated WordPress malware removal, reducing infection frequency from daily to zero (2023).

- **Healthcare Compliance:** Implemented CIS Level 1 and 2 security standards for Improving MI Practices healthcare education platform.

- **CI/CD Infrastructure:** Established Jenkins CI/CD pipeline in 2013 that continues running the IntellectualSites open source ecosystem supporting a $5 billion gaming brand.

## Relevant Experience

### DevSecOps Consultant | Addis Enterprises | 2019-Present
- Delivered WCAG 2.0 AA compliant learning systems for US government clients
- Built geo-redundant DNS infrastructure for Bishop Airport (bishopairport.org)
- Developed automated malware removal tools for healthcare platforms
- Implemented CIS Level 1 and 2 security standards across client environments
- Designed secure, scalable infrastructure for healthcare education content

### Chief of Operations / VP / Co-Founder | Nitric Concepts | 2018-2021
- Used DevSecOps practices with Docker, Fail2Ban, and Salt Stack for gaming environments
- Set up CI/CD pipelines and security practices for gaming infrastructure
- Managed security for distributed team operations across multiple timezones

### Infrastructure Engineer | Self-Hosted Infrastructure | 2020-Present
- Built home infrastructure cluster using repurposed MacMini hardware for data sovereignty
- Self-hosted critical infrastructure: email, DNS, and over 100 services
- Developed WireGuard mesh networking tool for quantum-resistant networking
- Run Woodpecker CI and Gitea for source management, testing, and deployment

## Technical Skills

- **Containerization:** Docker, Docker Swarm, container orchestration
- **CI/CD:** Jenkins, Woodpecker CI, GitLab CI/CD, automated deployment pipelines
- **Security:** Fail2Ban, malware detection/removal, security hardening, penetration testing
- **Infrastructure:** Salt Stack, DNS (BIND, PowerDNS), WireGuard, bare-metal servers
- **Compliance:** WCAG 2.0 AA, CIS Level 1/2, government security standards
- **Monitoring:** High availability systems, automated monitoring, incident response

## Notable Projects

- Bishop Airport DNS Infrastructure - Geo-redundant A+ rated DNS cluster
- Improving MI Practices - HIPAA-aware healthcare education platform
- WordPress Security Automation - Docker-based malware removal tool
- Nuclear-Resistant DNS - Extreme resilience infrastructure design