KL Kevin J. Lang

Experience

25+ years of operating, automating, and delivering.

From Tier-3 Cisco TAC escalation to platform engineering across AWS, Azure, and GCP — a track record of taking complex systems and making them safer to change, in healthcare, finance, manufacturing, and media.

  1. Jun 2026 – present
    Remote

    Sr. DevOps / Release Engineer (Platform & CI/CD)

    Berkshire Grey
    • Own the Jenkins and GitHub Actions pipeline ecosystem behind 20+ build pipelines across two Jenkins environments — turning code changes into layered Docker images (base / slim / full), published to Artifactory and mirrored to ECR for customer and manufacturing deployments.
    • Maintain shared Jenkins pipeline libraries and org-wide reusable GitHub Actions workflows; ship scoped, validated upgrades (runtime versions, action hardening, dependency pins) without breaking downstream builds.
    • Redesigned an always-on LLM log analyzer (OpenAI) into a cached, on-demand failure-report service, cutting recurring API spend while preserving one-click failure diagnosis for engineers.
    • Build and release internal Python CI tooling — file-integrity validation, dependency analysis, and release-branch auditing — packaged and published to the internal artifact repository.
    • Leading replacement of a legacy Jenkins + Bulldozer Group PR process with Mergify dependency-ordered merge queues across the release repositories.
    • Audited and documented the end-to-end delivery chain — PR validation → image build → Artifactory publish → downstream fan-out — across both Jenkins environments and dozens of per-customer / per-release pipeline variants.
    Stack: Jenkins, Python, Docker, GitHub Actions, Groovy, Artifactory, AWS (ECR), Bash, CI/CD, Mergify, OpenAI
  2. Mar 2024 – Jun 2026
    Remote · HQ: Brentwood, TN

    Infrastructure & Platform Engineer

    Mercury Intermedia
    • Built and operated the internal Azure/AKS platform as Terraform — cluster, Traefik ingress, cert-manager TLS, secrets, managed PostgreSQL and Redis, observability — onboarding five product workloads onto one consistent staging → production path.
    • Eliminated long-lived cloud credentials from CI: moved Terraform runs onto short-lived service-account tokens, with OIDC federation and workload identity across Azure, AWS, and GCP.
    • Authored destroy-approval gates that parse the Terraform plan for delete actions, block auto-apply, and require explicit human approval with a 4-hour expiry; after a PVC deletion destroyed a demo database, migrated stateful workloads to Retain reclaim policies and wrote the migration runbooks.
    • Ran Terraform through CI/CD with plan/apply discipline, environment separation, and gated production changes — making infrastructure changes reviewable and reducing deployment risk.
    • Delivered AWS application infrastructure for a client program: containers, load balancing, DNS, TLS, edge security, secrets, networking, and IaC-driven deployment pipelines for customer-facing sites.
    • Delivered GCP platform work for a client program: multi-environment Kubernetes, managed databases, networking, Helm-style platform layers, remote state, service identity, and OIDC-based CI authentication.
    • Diagnosed and remediated Terraform state drift across namespaces, Helm releases, and node pools after partial applies and cloud lifecycle events.
    • Improved engineering hygiene: automation checks, dependency updates, standardized local environments, and documented intake for platform requests so work was traceable and repeatable.
    Stack: Azure, AWS, GCP, Terraform, Kubernetes, Docker, Helm, GitHub Actions, secrets and cloud identity, CI/CD, observability, managed databases
  3. Jan 2023 – Feb 2024

    System Operations Engineer

    Advisor360°
    • Implemented MOVEit to strengthen managed file transfer (MFT) and data-handling controls for a hosted wealth-management platform.
    • Led cloud migration to Azure with scalable architecture patterns; Terraform for IaC, RHEL and Windows Server for availability, security, and performance.
    • Built a dynamic SQL query generator in Python for ad-hoc reporting, reducing analyst dependency on engineering for one-off data pulls.
    • Managed Ansible/AWX for multi-tenant configuration management; Jenkins for infrastructure CI/CD, IaC adoption, and DR tied to versioned infrastructure.
    Stack: MOVEit, Ansible/AWX, Terraform, Azure, Docker, RHEL, Windows Server, Jenkins, Python, SQL
  4. Jul 2021 – May 2022

    Senior Developer (Client: Google)

    Nerdery
    • Led a RESTful API integrated with Google platforms; delivery with Python/Django and Docker.
    • Designed ML-based chat moderation using spaCy and async patterns; scoped commitments against client expectations and team capacity.
    • Built an AWS CodePipeline/CodeBuild multi-stage deploy pipeline (dev → test → staging → prod) with rollback automation, achieving a 30% improvement in database query performance post-deployment.
    Stack: Python, Django, Docker, AWS CodePipeline, AWS CodeBuild, SQL, spaCy
  5. Nov 2019 – May 2021
    Boston, MA

    DevOps Engineer

    Loomis Sayles
    • Managed Autosys jobs and box scheduling alongside broader DevOps responsibilities for investment-technology operations.
    • Built Jenkins-integrated Python/Bash tooling for Linux maintenance and troubleshooting across RHEL, Solaris, and Ubuntu environments.
    • Built a monitoring and feedback pipeline tying infrastructure and application signals to delivery quality; produced operational documentation and best-practice runbooks.
    Stack: Autosys, RHEL, Solaris, Ubuntu, Bash, Python, Jenkins
  6. Dec 2018 – Sep 2019
    Boston, MA

    Senior VoIP Engineer

    Boston Children's Hospital
    • Deep-support Cisco UC environment: CUCM, Unity Connection, UCCX, CER, Expressway-C/E, WebEx, endpoints, IOS gateways, PLM — complex call flow break/fix and escalation.
    • Executed PRI → SIP migration with CUBE SBC over MPLS/fiber into CUCM; produced current/proposed call flow and failover diagrams.
    • Integrated Cerner CareAware into VoIP infrastructure; built Docker-based analytics tooling on CentOS using Python, SQL, and Bash for monitoring and stakeholder alerting.
    Stack: Cisco UC, CUCM, UCCX, Unity, CER, Expressway, CUBE, SIP, Cerner CareAware, Docker, Python, SQL, Bash
  7. Jul 2018 – Oct 2018
    Concord, MA

    UC Consultant

    All Covered (Konica Minolta)
    • Cisco UC break/fix and design support (CUCM, Unity, UCCX, CER, Expressway, WebEx, telepresence, IOS gateways, PLM) across multiple client accounts.
    • Delivered site assessment reports; managed VoIP provider relationships; designed upgrade and migration processes for clients.
    • Built a Python application to assess CUCM environments for sizing, best-practice compliance, and diagramming workflows.
    Stack: Cisco UC, CUCM, UCCX, Unity, CER, Expressway, Python, SQL, Docker
  8. Aug 2017 – Feb 2018
    Marlborough, MA

    Lead VoIP Engineer

    Hologic, Inc.
    • Led Avaya → Cisco UC migration program: handset swap, URI/GDPR routing prep, outbound cost reduction, contact-center platform selection, and UCCX restructuring.
    • Designed strategic UC redesign aligned with executive growth strategy; implemented CTL/SRTP, SIP TLS, and IPsec; introduced Cisco Spark to replace Lync for remote workers.
    • Built Python/REST migration tooling; led engineer coordination and deployment planning.
    Stack: Cisco UC, Avaya, UCCX, VMware/ESXi, SIP/TLS/SRTP, Python, REST
  9. May 2010 – Aug 2017
    Boxborough, MA

    Senior CUCM TAC Engineer — Tier-3 Escalation

    Cisco Systems
    • Tier-3 escalation engineer: customer-facing incident response and root-cause analysis on production outages for large-scale deployments — CUCM 4.x–12.x, CUBE, CME, IM&P, UCCX/UCCE, IOS gateways, Unity, CER, MeetingPlace, and third-party integrations, including mega-cluster and large virtual/physical environments.
    • SME for security, certificates, and virtualization: certificate lifecycle and trust chains, SSL/TLS, secure conferencing; delivered internal training and mentoring, and authored customer best-practice documentation.
    • Deep networking work across SIP, MGCP, routing, and IP addressing in enterprise and carrier-facing call flows.
    • Core engineer on a business-metric desktop application for services operations leadership — Python/PowerShell/Bash, Jenkins, GitLab, web-to-PDF action plans and change controls; built Python GUI tooling for TAC efficiency metrics, plus AXL/SQL and SSH automation.
    Stack: CUCM, CUBE, UCCX/UCCE, Unity, CER, SIP, MGCP, SSL/TLS, Python, PowerShell, Bash, SQL, Jenkins, GitLab