~/jwright

Platform & Infrastructure Engineer

Jonathon Wright

Building secure Kubernetes platforms, automated infrastructure fleets, and GPU-backed edge systems.

RHEL Kubernetes GitOps Ansible Observability Edge AI

View Projects Contact

01About

Reliability you can reason about.

I'm an infrastructure and DevOps engineer who turns high-level designs into single-press deployments. My day job is store-edge Kubernetes running GPU-backed AI; my craft is the automation, GitOps and network policy that make a fleet behave the same way every time. I've run global infrastructure at enterprise scale — a thousand VMs, multi-region migrations, segmented networks — and I bring that same rigour to the smallest edge node. I'm an IaC enthusiast: if it's a manual step, I want it gone.

Based
Sydney, Australia
Focus
Edge Kubernetes · GPU/AI · IaC & GitOps

# education

  • Advanced Diploma in IT Networking and Security
  • Diploma in IT Networking
  • Certificate IV in IT Networking
  • Ongoing study in IT certifications and new techniques

  1. Infrastructure / DevOps Engineer

    Aug 2025 – Present

    Woolworths

    Core DevOps infrastructure engineer for store-edge solutions — turning high-level designs into single-press deployments and CD pipelines.

    • Single-touch deployment of an edge AI solution running on Kubernetes at the store edge
    • GPU brought online as code — passthrough via ESXi, end-state manifests / Helm charts
    • Ansible playbook builds wired through a single source-of-truth pipeline with per-store vars
    • Removed manual practices across infra and ops — IaC throughout, spec-driven and documented as code

  2. Infrastructure Systems Engineer

    Aug 2022 – Aug 2025

    Virtus Health

    Global IT — optimisation, implementation and projects across an enterprise estate.

    • Managed ~1,000 VMs across a global VMware estate
    • Re-segmented flat sites into isolated VLAN ranges; SD-WAN and Aruba ClearPass onboarding
    • Migrated workloads to Azure (Blob, AVS); upgraded Palo Alto / FortiGate firewalls
    • Led a new major-site build — end-to-end services implementation

  3. Global IT Infrastructure Engineer

    Sep 2019 – Aug 2022

    Linde Asia Pacific

    Maintained and modernised global infrastructure to enterprise standards across the region.

    • Global VMware / Dell hosting; PowerShell automation of manual project tasks
    • Migrated Google Business → Microsoft 365 across the region; AWS-hosted ERP access
    • ERP hardware refresh with new mainframe and DR solution; PBX → VoIP across AU/NZ

+ 2 earlier roles (ELGAS, Darktime).

02Capabilities

What I work with, grouped by what it's for.

Cloud & Identity

Hybrid estates across the major clouds, with identity done properly.

  • Azure
  • Entra ID
  • Intune
  • AWS
  • GCP
  • Microsoft 365
  • Azure Blob / S3

Platform & Virtualization

Kubernetes platforms designed to be reasoned about and recovered.

  • Kubernetes
  • OpenShift
  • Talos Linux
  • vSphere / VMware ESXi
  • Proxmox
  • containerd
  • ArgoCD / GitOps
  • Helm & Kustomize

Automation & IaC

Single-touch deployments — removing the manual step, not documenting it.

  • Ansible / AWX
  • PowerShell (PowerCLI)
  • Python
  • Bash / Shell
  • Terraform
  • Image pre-pull & air-gapped registries (ACR / NVCR)
  • Secrets management

Networking & Security

Default-deny, segmentation, and a small attack surface.

  • SD-WAN
  • 802.1Q VLAN segmentation
  • ACLs / IPSec / RADIUS
  • Aruba ClearPass
  • Palo Alto / FortiGate
  • Firewall policy governance
  • RBAC · 2FA / SSO

Observability & Ops

Knowing the system is healthy — and the GPUs with it.

  • Prometheus
  • Grafana
  • DCGM Exporter
  • PRTG / LibreNMS
  • AWX job reporting
  • Veeam backup
  • ITIL processes

Edge AI & GPU

Serving vision and language models on real hardware at the edge.

  • NVIDIA GPU Operator
  • GPU passthrough (ESXi, as code)
  • GPU readiness probing & watchdogs
  • Pod lifecycle management
  • YOLO / computer-vision inference
  • Local LLM serving (llama.cpp)
  • Edge Kubernetes

03Selected work

Platforms built to keep working unattended.

Single-Touch Edge AI Platform

Turned a high-level edge-AI design into a single-press deployment running on Kubernetes at the store edge.

Store-edge Kubernetes running GPU-backed AI workloads, deployed from one command, with readiness-gated GPUs so inference never starts before the hardware is ready.

  • Kubernetes
  • Edge
  • NVIDIA GPU
  • CD pipelines
  • Helm
  • Python

Infrastructure / DevOps Engineer · Woolworths·2025 – Present

Self-Hosted AI & Homelab Platform

A production-grade homelab — GitOps from bare metal to local AI, and the platform that serves this very site.

Proxmox with PCIe passthrough under Talos and OpenShift clusters, all driven by ArgoCD GitOps: local LLM inference, split-horizon DNS, 2FA/SSO VPN, full observability and NAS-backed backups.

  • Talos
  • OpenShift
  • ArgoCD
  • Proxmox
  • Local LLM
  • Cloudflare Tunnel

Owner / Operator·Ongoing

IaC Fleet Automation

Stood up identical edge sites from code — every store comes up the same way, every time.

Ansible/AWX playbooks wired through a single source-of-truth pipeline: GPU operator, templated networking, image pre-pull and secrets — with air-gapped registry mirroring for disconnected sites.

  • Ansible
  • AWX
  • GitOps
  • ACR / NVCR
  • Image pre-pull
  • Secrets mgmt

Automation Engineer·2025 – Present

All projects →

04Get in touch

Let's talk infrastructure.

Open to conversations about platform engineering, edge infrastructure, and GPU/AI systems. Based in Sydney, Australia — for a low-ms reply, ping me on LinkedIn or email; everything else is best-effort delivery.

[email protected]