Daniel Fernández Rodríguez

Open Brain Institute - Lausanne, Switzerland

Cloud Platform Engineer • Jan, 2025 — present

• Primary administrator of Keycloak service; managing upgrades, multi-provider SSO integrations (GitHub, Google, Microsoft Entra ID), custom theming, and token exchange
• Main contributor and maintainer of Terraform codebase; managing modules, remote state, and CI/CD pipelines across AWS and Azure
• Managing lifecycle of microservices on AWS ECS and EKS, including container registry migration from Docker Hub to AWS ECR
• Deployed and configured JupyterHub on AWS EKS and Azure AKS, managing networking, autoscaling, ingress, and storage
• Implemented security monitoring with AWS GuardDuty and SecurityHub; actively remediating vulnerabilities and hardening access controls
• Replaced public SSH bastion host with AWS Session Manager and enforced secrets management via CI/CD checks

EPFL Blue Brain Project - Geneva, Switzerland

Site Reliability Engineer • Mar, 2020 — Dec, 2024

• Reworked existing SSO service to make it more resilient and highly available
• Deployed new service to launch Jupyter notebooks directly on BB5 Supercomputer via Slurm scheduler
• Aided with migration from Puppet v4 to Puppet v6
• Focused on reducing technical debt, automating tasks and cleaning up old code and services
• Provided help and technical advice to other members of the organization

CERN (Authentication and Authorization Team) - Geneva, Switzerland

Software Engineer • Feb, 2016 — Jan, 2020

• Maintained Identity and Access Management infrastructure based on Microsoft technologies
• Deployed and configured Keycloak to secure 10.000+ CERN applications
• Defined and planned the migration from ADFS to Keycloak
• Added continuous integration and continuous delivery for team internal projects
• Developed RESTful API to integrate Keycloak with other systems at CERN
• Migrated applications to containers and deployed them on PaaS

CERN (Cloud Infrastructure Team) - Geneva, Switzerland

Software Engineer • Feb, 2014 — Jan, 2016

• Part of CERN Cloud Infrastructure team; OpenStack deployment with ~7000 compute nodes
• Deployed a workflow automation tool to reduce toil and ease the operational cost of running a private cloud
• Identified and implemented workflows to automate routine operational procedures on the CERN Cloud
• Deployed fully puppetized, resilient, distributed, and highly available services
• Developed a set of python libraries and scripts to interact with other services deployed at CERN

Inter-American Development Bank - Washington DC, USA

IT Security Consultant • Jun, 2013 — Dec, 2013

• Responsible for the installation, deployment, and configuration of AppSense (now Ivanti), a Management Platform tool for Windows to control what users can install on their computers
• Around 5.000 of the bank employees still use it every day

ICEX (Spanish Institute for Foreign Trade) - Madrid, Spain

Junior Software Engineer • Sep, 2011 — Oct, 2012

• Responsible for providing remote IT support to a total of 50 users from three different ICEX offices
• Responsibilities also included frequent business trips to each office
• Installed, maintained, upgraded, and managed servers. Back-up policy and tape systems (Symantec)

Master’s in Information Systems

University Rey Juan Carlos, Madrid • 2018

Bachelor's in Software Engineering

University of Oviedo, Asturias • 2015

Graded with honors on the project Integrating OpenStack with an Active Directory

Awarded with a scholarship to study one semester at Canisius College, NY, USA. Part of the Dean’s Honor Mention award for excellence grades.

Technical Computer Engineering Degree

University of Oviedo, Asturias • 2010

Graded with honors on the project “Evaluador de variabilidad de formas bidimensionales”

Pequeñas cosas que importan

Main collaborator • 2010 — Present

Personal blog about software engineering, debugging stories, and lessons learned

Evaluador de variabilidad de formas bidimensionales

Main developer • 2010

Implementation of the scientific paper A Stochastic Order of Shape Variability with an Application to Cell Nuclei Involved in Mastitis. Source code available here.

Systems & Infrastructure

• Unix/Linux systems administration (advanced RHEL/CentOS), Windows
• Experience managing OpenStack, Apache, Nginx, HAProxy, MySQL, InfluxDB, Grafana, FreeIPA
• Arch User Repository package maintainer

Programming & Tools

• Advanced Python, Bash, Puppet and Java
• Day to day usage of Docker, Kubernetes, Gitlab CI and Openshift
• Familiar with Agile principles and DevOps. JIRA advanced user

Open Source

• Active GitHub member, both project maintainer and contributor (github.com/danifr)
• Member of Voxpupuli, invited to join after contributing to several community maintained Puppet modules

Kubernetes From Scratch For Neuroscientific Research

KubeCon Europe - Amsterdam, Netherlands • 2023

CERN's Identity and Access Management: A journey to Open Source

CHEP • 2019

Co-authored with the members of the CERN Authentication and Authorization Team

CERN School of Computing

SCK • CEN - Mol, Belgium • 2016

Automating operational procedures with Rundeck

HEPiX at DESY Zeuthen, Germany • 2016

Talk given at HEPiX 2016

Scaling the CERN OpenStack Cloud

CHEP • 2015

Co-authored with the members of the CERN Cloud Infrastructure Team. Paper presented at the 21st International Conference on Computing in High Energy and Nuclear Physics