Dublin, Ireland · [email protected] · wellmaintained.org · linkedin.com/in/mrdavidlaing · github.com/mrdavidlaing

Twenty-five years in software engineering, DevOps, SRE and release engineering - the last several focused on the software supply-chain side: SBOM generation, dependency provenance, reproducible builds, and CVE triage and remediation. I keep regulated software vendors adherent to the vulnerability and patch-management policy they have published - matching real practice to ISO 27001, SOC 2, CRA and DORA commitments, with the audit evidence to defend it. Every CVE judgement carries a qualified human's VEX sign-off; agent-assisted workflows handle the repetitive analysis underneath. I augment in-house engineering teams rather than replace them.

Specialisms SBOM & VEXCVE triage & remediationDependency provenanceReproducible buildsNixRelease automationISO 27001 / SOC 2 / CRA / DORA evidenceKubernetesCloud FoundryTerraformGolangCI/CDAgentic dev / LLM coding agents
Selected Experience

Built CVE-remediation and supply-chain automation across Kubernetes and Terraform estates, leaning heavily on LLM coding agents both to write the release automation and to automate much of the security and license triage. Reproducible Nix builds and hardened minimal base images (Docker Hardened Images, Chainguard) underpinned the work, on GCP/AWS infrastructure I engineered for the Imogen modernization platform.

Held platform reliability through $3.5M/minute peak traffic; established data-reliability practices over a 100PB data lake - operating at a scale where evidence, monitoring and provenance are non-negotiable.

Built and ran cross-portfolio data pipelines and telemetry/curation practices feeding R&D and business decisions.

Built an SRE function from scratch to operate Cloud Foundry and Kubernetes platforms - the buildpack and base-image model that underpins modern supply-chain remediation. Ran reliability for pivotaltracker.com (1M users) and UK charity platforms (£1B+ donations) across ~80 R&D teams globally.

Built an open-source ELK distribution ingesting 2TB/day for the Cloud Foundry ecosystem; concept to acquisition in seven months.

Earlier - R&D Team Leader, City Index (led the LogSearch open-source project; drove TDD/Agile and open-source adoption) · BBC Worldwide · Lucid Communications · Vardus Internet Solutions.

Education

BBusSc (Honours), Information Systems  ·  University of Cape Town