Skip to content
View celttechie's full-sized avatar
πŸ’­
Coming up to speed on Kubernetes/OpenShift
πŸ’­
Coming up to speed on Kubernetes/OpenShift

Block or report celttechie

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Content in all repositories owned by your account will be closed.
Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
celttechie/README.md

Brian Jarrett

Solutions Architecture & Technical Leadership | Systems Automation, Robotics Design & Subsystem Testing

Portfolio LinkedIn Technical Execution Bare Metal to vLLM

UDS VM Operator Upstream CDI PR FROGlib OpenShift AI Tactical Gateway SNO Lab Tactical SDN Compliance as Code


πŸ”­ The Core Differentiator: Mastering Unfamiliar Technology

I am a hands-on Systems Architect and Technical Leader with a 15+ year foundation spanning enterprise virtualization & hypervisors (KVM, QEMU, VMware ESXi, OpenStack), bare-metal compute, distributed block storage (Ceph), and federal compliance (FedRAMP Moderate / DoD IL5), alongside over a decade mentoring and developing competitive robotic systems in real-time Python.

My defining strength is the ability to step into unfamiliar technologies, deconstruct them from first principles, and rapidly turn complex problems into reliable, working solutionsβ€”whether that means contributing upstream features to KubeVirt, defending a 6,000-node federal ATO under strict deadlines, or fabricating and programming an autonomous robot.

"Understand deeply from the ground up, approach platforms with rigorous testing and automation discipline, and turn unfamiliar complexity into clean, deterministic execution."


πŸ§ͺ Applied Research & Rapid Learning (The Innovation Lab)

Note

The projects below represent intensive hands-on research and prototyping undertaken over the past several months. Rather than claiming decades of specialization in AI or Kubernetes, these labs demonstrate how quickly I can enter an unfamiliar technology ecosystem, evaluate its core mechanics, author Architecture Decision Records (ADRs), and build verifiable, production-style reference platforms.

πŸš€ uds-vm-operator & Upstream KubeVirt CDI Contribution

Air-gap reference operator & upstream KubeVirt Containerized Data Importer (CDI) feature.

  • Upstream Contribution (CDI PR #4340): Authored upstream pull request adding optional cryptographic checksum validation (algorithm:hash) for DataVolume uploads (CDI Issue #4104) to secure air-gapped image delivery.
  • Two-Stage Operator Engineering: Prototyped reconciliation algorithms in Python (kopf) for rapid cluster validation, then directed implementation into a compiled Go operator (controller-runtime) and CLI (uds-vmctl).
  • Air-Gap & Compliance Hardening: Packaged as an offline Defense Unicorns Zarf bundle, validated against NIST SP 800-53 controls using Lula (OSCAL), and tested on live nested Libvirt/QEMU/KVM bare metal.

Applied research exploring bare-metal GPU acceleration & Kubernetes AI serving.

  • Hardware to Pod: Prototyped PCIe VFIO driver binding and IOMMU group isolation on bare-metal workstations.
  • Operator & Serving: Deployed NVIDIA GPU Operator via CRI-O Container Device Interface (CDI) and benchmarked vLLM serving (PagedAttention, continuous batching).
  • SRE & Diagnostics: Formulated Day-2 failure runbooks (PCIe bus reset, node drain) and DCGM/Prometheus alerting for KV-cache saturation.

πŸ›‘οΈ tactical-edge-gateway

Prototyping air-gapped telemetry translation and situational awareness.

  • Protocol Bridging: Bridged autonomous robotics telemetry (MAVLink & ROS2/DDS) to military C2 (Cursor on Target / TAK Server) over simulated contested links.
  • Air-Gapped Delivery: Packaged services as zero-dependency Defense Unicorns Zarf OCI bundles.
  • Compliance-as-Code: Evaluated continuous automated compliance validation against NIST SP 800-53 controls using Lula (OSCAL).

☸️ openshift-sno-lab

Automated platform substrate deploying Single Node OpenShift (SNO 4.16+).

  • Declarative IaC: Engineered reproducible SNO provisioning via OpenTofu on KVM/libvirt with deterministic Ed25519 key pinning.
  • Storage Performance: Isolated bridge network with HAProxy ingress; tuned NVMe PCIe storage pools to guarantee sub-10ms etcd fsync latency.
  • Kernel Tuning: Authored declarative RHCOS MachineConfigs for boot-time 1GB HugePages and kernel IOMMU passthrough.

Exploring dynamic routing & software-defined networking for contested environments.

  • Dynamic Route Evaluation: Prototyped a Python/C++ SD-WAN controller that monitors latency and packet loss across simulated radio links.
  • Kernel Manipulation: Tested hitless route mutation directly via Linux Netlink sockets with zero dropped active sessions.
  • Modern Edge Stack: Containerized FRRouting (BGP/OSPF), WireGuard tunnels, and Zarf packaging for edge deployment.

Evaluating declarative, immutable Kubernetes on bare metal.

  • Immutability: Explored Talos Linux API-managed OS with read-only rootfs and zero-SSH host access to eliminate configuration drift.
  • eBPF Networking: Implemented Cilium eBPF socket routing, network security policies, and L2 BGP load balancing.

Prototyping air-gapped delivery & continuous compliance (cATO).

  • Air-Gapped Enclaves: Evaluated Defense Unicorns UDS for packaging complex data platform workloads into disconnected environments.
  • Compliance Validation: Tested continuous OSCAL mapping to validate live cluster state directly against NIST SP 800-53 controls.


πŸ›οΈ Enterprise Systems & Federal Compliance Foundation (15+ Years)

  • Enterprise FedRAMP ATO Governance (Cisco Systems): Directed technical response defending HHS PMO FedRAMP Moderate Authorization to Operate across 6,000+ nodes during enterprise zero-day incidents (Log4j).
  • Vulnerability Data Platform Architecture: Architected custom PostgreSQL, FastAPI, and Tableau data pipelines to automate compliance extraction across heterogeneous fleets, replacing manual audits.
  • Enterprise Compute, Virtualization & Storage: Over 15 years administering bare-metal compute (Cisco UCS), hypervisors (KVM/Libvirt, VMware ESXi, OpenStack Nova), Ceph distributed block storage, and configuration management (Ansible, SaltStack, Puppet).
  • QA Department Leadership & Systems Integration (StorageSoft / Phoenix Tech): Managed QA testing and technical support departments, designed heterogeneous multi-platform test labs, and acted as systems integration engineer ensuring interoperability with enterprise suites (Microsoft SMS, CA Unicenter).
  • Foundational Systems Engineering: Rooted in airborne radar systems maintenance in the U.S. Air Force (AWACS), low-level disk diagnostic engineering, and mission-critical uptime.

πŸ€– Robotics Design, Mechanism Automation & Subsystem Testing (10+ Years)

A decade-long proof point of mastering unfamiliar domains across both physical hardware and real-time software:

  • End-to-End System Design & Mechanism Automation: 10+ years mentoring and engineering in FIRST Robotics (Team 3160). Designing complete mechanical, pneumatic, and electrical subsystems, CAN bus architectures, sensor integration, and high-torque motor control loops.
  • Production Python Software: Authored robot control architectures in Python (RobotPy, NumPy), implementing swerve drive kinematics, closed-loop PID control, state machines, and camera-based computer vision (AprilTag fiducials and machine learning object detection).
  • Hardware-in-the-Loop (HIL) Subsystem Testing: Executed hardware-in-the-loop (HIL) testing on physical robot subsystems (actuators, motor controllers, and sensor arrays) to validate edge software behavior and control loops before full robot integration.
  • Open-Source Modularity (FROGlib): Created and maintain an installable Python hardware abstraction library (pyproject.toml) that modularizes swerve kinematics, motor controller wrappers, and vision targeting across competition seasons.
  • High-Pressure Tournament Diagnostics: Rapid, methodical root-cause debugging under tight tournament timeframesβ€”isolating complex electrical noise, CAN bus faults, sensor drift, and code regressions in minutes.

πŸ› οΈ Capabilities & Technical Toolchain

Robotics Design & Subsystem Testing (2016 – Present)
────────────────────────────────────────────────────────────────────────────────
Control & Software       ── Python (RobotPy, NumPy) β€’ FROGlib Kinematics β€’ Mechanism Automation β€’ PID Loops β€’ HIL Testing
Vision & Sensors         ── AprilTag Vision β€’ ML Object Detection Models β€’ IMU Sensor Fusion β€’ CAN Bus Networks β€’ Pneumatics
Mechanical & Electrical  ── Swerve Drive Kinematics β€’ Motor Controllers β€’ Circuit Wiring β€’ Rapid Failure Isolation

Enterprise Foundation (15+ Years)
────────────────────────────────────────────────────────────────────────────────
Systems Engineering      ── Bare-Metal Compute β€’ Linux Systems Administration (RHEL, Ubuntu) β€’ KVM/Libvirt β€’ Cisco UCS
DevSecOps & Compliance   ── FedRAMP Moderate Governance β€’ DISA STIG Automation β€’ Qualys API β€’ FreeIPA / HBAC
Automation & Data        ── Python (FastAPI, Pandas, SQLAlchemy) β€’ PostgreSQL β€’ Bash Automation β€’ Ansible β€’ SaltStack
Methodology & Quality    ── Systems Architecture β€’ Root-Cause Diagnostics β€’ Failure Mode Analysis β€’ QA Automation β€’ Team Leadership

Applied R&D & Rapid Technology Immersion (Recent Research)
────────────────────────────────────────────────────────────────────────────────
Cloud-Native Substrates  ── OpenShift (SNO 4.16+) β€’ Talos Linux β€’ Kubernetes β€’ OpenTofu β€’ Cilium (eBPF)
Air-Gapped & Sovereign   ── Defense Unicorns Zarf β€’ UDS Bundles β€’ Lula (OSCAL Continuous Compliance)
AI Workload Exploration  ── NVIDIA GPU Operator (CDI) β€’ VFIO Passthrough β€’ vLLM Inference Serving β€’ LiteLLM
Edge SDN & Telemetry     ── Netlink Dynamic Routing β€’ WireGuard β€’ FRRouting β€’ MAVLink β€’ ROS2 / DDS β€’ Low-SWaP (OrangePi 5)

Explore architecture deep dives, verified milestone matrices, and comprehensive resume:
celttechie.github.io β€’ LinkedIn

Pinned Loading

  1. uds-vm-operator uds-vm-operator Public

    Air-gap ready Kubernetes operator for NIST 800-53 hardened KubeVirt VMs, CDI checksum integrity, Zarf packaging, and Lula OSCAL continuous ATO

    Go

  2. tactical-edge-gateway tactical-edge-gateway Public

    Air-gapped resilient tactical telemetry gateway bridging MAVLink and ROS2 autonomy streams to Cursor on Target (CoT) and TAK Server over DIL networks.

    Python 1

  3. uds-bundle-dev-test uds-bundle-dev-test Public

    Zero-trust, air-gapped UDS bundle workspace & troubleshooting engine. Features modular Zarf packaging, Defense Unicorns Lula continuous compliance (OSCAL / DoD IL5), live chaos drills, and ephemera…

    Python

  4. openshift-sno-lab openshift-sno-lab Public

    Automated, isolated Single Node OpenShift (SNO) lab deployment on headless KVM/libvirt using OpenTofu, Ansible, and Peer-Bastion architecture

    Shell

  5. orangepi-airgapped orangepi-airgapped Public

    Turn an Orange Pi 5 Pro into a fully disconnected Defense Unicorns UDS edge appliance with pre-staged K3s, hardened credentials, and local desktop UI.

    Shell

  6. FROG3160/2026-rebuilt FROG3160/2026-rebuilt Public

    RobotPy codebase for FRC Team 3160 featuring the custom FROGlib HAL, CTRE Phoenix 6 motor physics simulation, and PhotonVision vision-assisted swerve drive.

    Python