Devin Mitchell — DevOps Engineer | AWS | Terraform

Who is this guy

About Me

I’m a DevOps engineer based in North Yorkshire, working mostly with Terraform, AWS, and Infrastructure as Code. My day job involves a reasonably large multi-account AWS environment across several regions — keeping things running, automating the bits that would otherwise require a human to do something repetitive, and trying not to break anything that matters.

Before the cloud there was a fair bit of Unix: Solaris at various government facilities, some Oracle IAM work at Hewlett-Packard, and systems administration at Lockheed Martin in Virginia and North Yorkshire. It was the sort of work that discourages carelessness.

Before that, I ran a WWIV BBS in Washington DC in the early ‘90s — which is where the habit of tinkering with networked systems started and, frankly, never stopped.

Outside work: a Proxmox homelab that has gotten slightly out of hand, Home Assistant running most of the house, and a live chicken camera with more monitoring than it strictly needs. I use AI tooling heavily — mostly because it means less typing. Dual US/UK citizen.

Born in Germany, raised in the United States, and long settled in North Yorkshire — which accounts for a certain amount of travel before the deliberate kind even started. Most of Western Europe has been covered at some point, along with the Baltics, Scandinavia, North Africa, and a few further afield; also driven the United States coast to coast four times on both the northern and southern routes, which puts some distances in perspective. Currently practising German to around B1, working towards B2 — conversational rather than professional, mostly useful when we’re in Austria or Bavaria and defaulting to pointing just seems rude. York is fifteen minutes away and still gives back after two thousand years; it was one of several reasons we ended up where we did. The loose plan involves more of the same: different places, unfamiliar food, and making reasonable use of being half an hour from an international airport.

Top Secret / SCI Security Clearance with Counterintelligence Polygraph — U.S. Government

Active 2003–2013 · Lockheed Martin, Hewlett-Packard, and Sotera Defense Solutions · Inactive

devin@devinmitchell ~

❯ whoami --verbose

role: DevOps Engineer

also: AI-Augmented Engineering, AI Prompt Engineer

location: North Yorkshire, England 🇬🇧

citizen: Dual US 🇺🇸 / UK 🇬🇧

languages:English (native) · German (B1→B2)

spec: Terraform, IaC, Platform Eng.

clearance:TS/SCI + CI Poly (Active 2003–2013)

unix: 1992–present (still going)

bbs_sysop:WWIV, DC area (1991, 1992, 1993)

ai_usage: daily (Claude, Copilot, various)

status: ● online

❯ cat /etc/motd

// If it can be automated, it will be.

// If it can be self-hosted, it is.

// If it can break at 3am, it already has.

❯

Expertise

What I Do

☁️

AWS Architecture

Multi-account AWS across a reasonably large environment. VPC design, Transit Gateway, Direct Connect, BGP, IAM — the usual collection of things that seemed straightforward until they weren’t. Enough time in it to know which questions to ask before touching anything.

EC2VPCTGWLambdaIAMKMSS3EKS

🏗️

Terraform & IaC

Terraform is the thing I spend most of my time in. Module architecture, semantic versioning, workspace management, CI/CD pipelines for IaC — mostly because clicking through consoles manually seemed like an unreasonable use of a human’s time.

TerraformHCLPackerAnsibleCloudFormation

🖼️

Golden Image Pipelines

AMI lifecycle across the usual suspects: RHEL, Ubuntu, Amazon Linux, Windows Server. CIS hardening, cross-region distribution, automated validation pipelines. The sort of thing that benefits from not being done manually.

PackerRHELUbuntuAL2023CISWiz

⚙️

CI/CD & Automation

Jenkins, GitHub Actions, shared library patterns, Docker build agents, credential rotation. Pipelines that run unattended are generally preferable to pipelines that require someone to watch them.

JenkinsGitHub ActionsGroovyPythonBash

🐧

Linux / Unix Systems

A good while on production Unix across various operating systems. RHEL, Ubuntu, Amazon Linux, Solaris, Windows Server when necessary. Long enough that most of the failure modes are familiar, which is either reassuring or faintly depressing depending on your perspective.

RHELUbuntuSolarisAL2023Windows Server

🌐

Network Architecture

Transit Gateway, site-to-site VPN, Direct Connect, BGP, Squid forward proxy for a fleet of AWS accounts. Networking in AWS: technically straightforward, expensive to get wrong, therefore worth automating carefully.

TGWVPNDirect ConnectBGPSquidIKEv2

🔒

Security & Compliance

CIS hardening, Cloud Custodian for automated compliance, Wiz, Security Hub, ADFS/SAML federation, KMS. Security work that is largely automated, because manual compliance checking tends to have a spotty track record.

Cloud CustodianWizCISSecurity HubKMS

🐳

Containers & Orchestration

Docker, Kubernetes, EKS, Helm — enough to be useful. Plus a Proxmox homelab that has accumulated rather more services than was originally planned.

DockerKubernetesEKSHelmProxmoxLXC

🤖

AI-Augmented Engineering

Using AI tooling daily for infrastructure work — agentic workflows, LLM-assisted IaC, structured prompting for specific engineering tasks. Primarily because it is faster than doing things the slow way, and the slow way was never that enjoyable to begin with.

Claude Sonnet 4.6Agentic AIPrompt EngineeringGitHub CopilotTool Use

📚

Documentation as Code

Documentation that updates itself from source repositories is considerably more accurate than documentation that doesn’t. Built a platform to do that. Also wrote the usual guides, runbooks, and onboarding docs that every platform team eventually needs.

MkDocsDocOpsMarkdownGitHub API

💻

Programming & Scripting

Python for automation that needs to be maintainable, Perl since the ‘90s through force of habit, Groovy for Jenkins, Bash for everything else. PowerShell when Windows leaves no other option. The language is usually less important than just automating the thing.

PythonBashPerlGroovyPowerShell

🔭

Observability & Governance

Steampipe for cross-account querying, Splunk, CloudWatch, Prometheus, Grafana. Governance, cost optimisation, orphaned resource identification — the unglamorous end of cloud work that is nonetheless worth doing, preferably by a script.

SteampipeSplunkCloudWatchPrometheusGrafana

Career Arc

How We Got Here

2017 – Present

Senior Cloud Platform Engineer → Cloud DevOps Consultant

Enterprise Financial Services · North Yorkshire, UK

Platform engineering in a small team: AWS infrastructure automation, golden image lifecycle, IaC tooling, Transit Gateway networking, Squid proxy fleet, compliance automation across a large multi-account environment. Also built a DocOps platform that generates documentation from internal repositories automatically. Wrote M3, a Python tool for migrating Terraform modules from a monorepo to independently versioned repositories. More recently: working out how AI tooling fits into day-to-day infrastructure delivery — what it's genuinely useful for, and what it isn't.

AWSTerraformPythonJenkinsGitHub ActionsPackerAnsibleCloud CustodianSteampipeWizClaude Sonnet 4.6

2014 – 2017

Middleware Systems Administrator Lead

Enterprise Financial Services · North Yorkshire, UK

Third-line engineering for IBM Sterling Integrator. TLS 1.2 upgrades, Secure+ configuration across Connect:Direct links, EBICS protocol implementation with Deutsche Bank. Middleware work: not glamorous, but the banks seemed to appreciate it.

IBM SterlingConnect:DirectEBICSTLS 1.2

2013 – 2014

Infrastructure Operations Analyst

William Hill · Leeds, UK

First role after relocating to the UK. Unix-based project engineering, PCI DSS compliance work. A straightforward transition into commercial infrastructure.

UnixLinuxPCI DSSUK Career Reset

Moved from Virginia to Yorkshire. Unix administration turned out to be much the same on either side of the Atlantic, which was convenient.

2011 – 2013

Technology Consultant Level 4

Hewlett-Packard · Chantilly, VA

Oracle IAM deployment for a U.S. Government customer — Access Manager, WebLogic, Identity Federation, and related components. Perl automation for build and PKI processes. Final role before relocating to the United Kingdom.

Oracle IAMVMwarePKIPerlSubversionHudson

2010 – 2011

System Administrator Team Lead

Sotera Defense Solutions / Aerospace Data Facility–East · Fort Belvoir, VA

Managed a team of 14 Unix and Windows administrators. C&A testing for a major government system re-accreditation, Sun E15k domain management, multi-network authentication environments. The sort of role where things going wrong had noticeable consequences.

SolarisE15kLDAPC&ATS/SCI

2005 – 2010

Senior Unix Systems Administrator

Lockheed Martin · RAF Menwith Hill, North Yorkshire

Solaris administration across a large estate. Hardened baselines, directory services rationalisation, DNS, LDAP/AD integration, NTP, patch management. Most of it scripted in Perl and CSH because doing it manually at scale seemed inadvisable.

SolarisLDAPCentrifyBIND 9CitrixNTPTS/SCI

2003 – 2005

Unix Systems Administrator

Lockheed Martin Space Systems / Program 431 · Springfield, VA

Unix systems administration. Also built INFORManagement, an internal application for technical statistics reporting, which was apparently useful enough to warrant a Lockheed Martin Spot Award — a pleasant surprise.

SolarisUnixTS/SCI

2003 – 2013

Top Secret / SCI · CI Polygraph

U.S. Government Security Clearance · Inactive

Held Top Secret/SCI clearance with Counterintelligence Polygraph throughout tenures at Lockheed Martin and Sotera Defense Solutions, supporting classified U.S. Government programmes in Virginia and England.

1991 – 1997

WWIV BBS Sysop

Information Society BBS · Washington DC Area (703/202)

Multi-node WWIV BBS on 703 and 202 area codes — networked, multi-user, 24/7. Building and operating networked systems before the internet was a household concept. Continued through university (1995–97). Currently exploring a Proxmox-hosted revival.

Side Quests

Projects

Homelab · Running

The Lab

Proxmox HA cluster with rack-mounted UDM Pro Max, USW-Aggregation switch, LACP 802.3ad LAG, 2U UPS, and Synology NAS. Runs an offline GB mapping stack (Protomaps + MapLibre GL, Valhalla routing, custom SQLite geocoder), self-hosted Plex, Home Assistant, Docker services, NUT UPS monitoring with automated shutdown scripting. Built to stay up.

Explore the Home Lab ↗

SDR · Amateur Radio · Live

Live HF/VHF Radio Receiver

An RTL-SDR Blog V4 running OpenWebRX+ serves a public browser-based receiver covering 198 kHz to 440 MHz across 64 profiles — longwave, medium wave, HF amateur and shortwave broadcast bands, Shannon VOLMET aviation weather, UK Met Office weather fax, FM broadcast, airband, ACARS aircraft datalink, NOAA weather satellites, and 2m/70cm amateur. Decodes FT8, FT4, WSPR, JS8Call, and ACARS in the background around the clock, reporting spots to PSKReporter, WSPRnet, and APRS-IS. Anyone with a browser can tune in and listen to what’s being received right now, no software or account needed. Try 14.074 MHz (20m FT8) to watch digital signals painting the waterfall from stations across Europe and beyond.

Open Live Receiver

Live · ADS-B · Aviation

York ADS-B Ground Station

A 1090 MHz outdoor antenna over North Yorkshire decoding ADS-B transponder signals and feeding position data to a number of flight tracking platforms — FR24, FlightAware, RadarBox, PlaneFinder, OpenSky, ADS-B Exchange, and a few others. Deployed via Docker on a dedicated VM running ultrafeeder. Passive receive only; no transmissions, no interaction with aircraft. Mainly just interesting to watch.
FR24: T-EGXU127 · RadarBox: EXTRPI709473 · FlightAware: 274543 · PlaneFinder: 237463

◉ Live Radar Display ↗ PPI radar scope — live aircraft positions plotted by range and bearing, altitude-coloured blips, rotating sweep, range rings to 100 NM. Military contacts highlighted in amber, emergency squawks trigger a pulsing red alert ring. Click any aircraft to lock the targeting reticle. Filter to military-only. All data live from this station’s 1090 MHz antenna, updating every 10 seconds. RadarBox EXTRPI709473
Flightradar24 T-EGXU127
FlightAware site 274543
PlaneFinder UNPUBLISHED
OpenSky Network
ADS-B Exchange
airplanes.live
adsb.fi
ADSB One
adsb.lol
Plane.watch

Live · Chicken Cam

clucks.net

A live dual-camera stream from a backyard chicken coop, available 24/7. Containerised FFmpeg, UniFi Protect, RTMP to YouTube Live, Home Assistant for day/night switching, Cloudflare for delivery. A slightly overengineered solution to a problem that did not strictly require solving.

Visit clucks.net

Amateur Radio · M7NXS · Research

HF Station & Winlink Gateway

Passed the RSGB Foundation exam on 31 May 2026 with callsign M7NXS. The antenna is in place — a 41.7m Moonraker LWHF-160 end-fed random wire with a 9:1 UNUN covering 160m–6m. OpenWebRX+ is running as a public HF/VHF receiver, decoding FT8, FT4, WSPR, and JS8Call around the clock and reporting spots to PSKReporter and WSPRnet. The primary rig is an Icom IC-7300MK2 — a full SDR-based HF transceiver with LAN port, HDMI output, and a built-in panadapter. The next milestone is a VARA HF Winlink gateway: email over HF with no internet required, filling what appears to be a genuine gap in UK coverage.

M7NXS on QRZ.com

Home Automation · Live

OpenHASP Display Network

16 Lanbon L8 touchscreen switches running OpenHASP, driven by Home Assistant via MQTT. Sensor data, energy stats, lighting, EV charging, doors, motion — 12 pages per device. Some are light switches with screens; others are just information panels. Built entirely in YAML, which is either elegant or a poor life decision depending on how the mood strikes.

Live Display Preview ↗

Community · Pro Bono · Live

The United Benefice

Website for five Church of England village churches in the Vale of York, including a Grade I listed building sketched by Anne Brontë in the 1840s and a chapel designed by Sir George Gilbert Scott. Built, hosted and maintained pro bono. Modernised typography, accessible layout, safeguarding information. Self-hosted on Ubuntu with NFS storage — same stack as everything else.

Visit theunitedbenefice.co.uk

Energy · Pending DNO Approval

Off-Grid-ish

Solar panels, a Tesla Powerwall 3, and a heat pump — integrated into Home Assistant with Octopus tariff optimisation. The heat pump is installed and running. Solar and battery are contracted and ready to go, currently held up by DNO approval. The grid has paperwork. The paperwork has a queue. The queue has no particular sense of urgency.

Music · Taste Questionable, Volume Appropriate

Industrial / EBM

Industrial, EBM, and whatever genre Rammstein technically belongs to: Skinny Puppy, Front 242, KMFDM, Funker Vogt, Eisenfunk, Lindemann, FGFC820, CortexUS. Falco before bed. Everyone has their quirks and these happen to be mine.

Travel · Royal Caribbean · Crown & Anchor

Cruising

My wife and I have been cruising together for years and are committed Royal Caribbean loyalists working towards Diamond status — 80 Crown & Anchor points earns free drinks, priority boarding, and a general sense of smug satisfaction. We’re at 52 points post-August 2026 and the plan is two more 14-night sailings to get there. It’s a retirement plan disguised as a holiday habit.

Voyage Log

2027 Planned Rhapsody of the Seas — Royal Caribbean — 14 Night Spain & Morocco Transatlantic to Puerto Rico

2026 Booked Liberty of the Seas — Royal Caribbean — 9 Night Spanish Flair & Solar Eclipse

2025 Done Independence of the Seas — Royal Caribbean — 8 Night Northern City Escapes

2024 Done Anthem of the Seas — Royal Caribbean — 14 Night Mediterranean Cities

2023 Done Anthem of the Seas — Royal Caribbean — 14 Night Mediterranean Beaches & Cities

2018 Done Carnival Horizon — Carnival — 13 Night Europe (Inaugural Sailing)

2015 Done Serenade of the Seas — Royal Caribbean — 7 Night Scandinavia & Russia

2012 Done Carnival Pride — Carnival — 7 Night Caribbean

2007 Done Ocean Village 2 — P&O — 14 Night Mediterranean (vessel scrapped 2020)

● Crown & Anchor Society — Royal Caribbean loyalty programme · Current: Platinum (52 pts) · Diamond target: 80 pts · Remaining: ~2 × 14-night sailings

#	DIST (NM)	AIRLINECALLSIGN	ALT (ft)	SPEED (kt)	HDG	SIGNAL	RECORDED	SQUAWK	CAT
Loading...

AIRLINECALLSIGN	LAST HEARD	ALT (ft)	SPEED (kt)	HDG	DIST (NM)	MSGS	SIGNAL	SQUAWK	CAT
Loading...

AIRLINECALLSIGN	ALT (ft)	SPEED (kt)	HDG	DIST (NM)	SIGNAL	SQUAWK	CAT
Loading...

AMATEUR RADIO STATION — NORTH YORKSHIRE, ENGLAND

UK FOUNDATION LICENCE · CALLSIGN M7NXS · OFCOM LICENSED

HF Transceiver — Active

Icom IC-7300MK2

160m–6m HF/50MHz · 100W (25W on Foundation) · Built-in SDR panadapter
Primary transceiver — LAN port, HDMI output, full SDR front end

HF Antenna

Moonraker LWHF-160

41.7m end-fed random wire · 9:1 UNUN · 160m–6m multiband
Runs around house perimeter

General SDR Receiver

RTL-SDR Blog V4

Serial: VHFUHF · Wideband scanning, OpenWebRX+ HF/VHF/UHF
198 kHz–440 MHz across 64 profiles

Wideband LNA

RTL-SDR Blog Wideband LNA

Bias-tee powered · Improves weak signal reception across VHF/UHF

ADS-B Receiver

RadarBox FlightStick

Integrated 20.5dB amp · 1090MHz bandpass filter · ESD protection
Dedicated ADS-B dongle, feeds multiple networks

Live SDR Receiver

OpenWebRX+

Public browser-based receiver · HF through 1090 MHz
sdr.devinmitchell.com ↗

Primary HF Goal — Planned

VARA HF Winlink Gateway

IC-7300MK2 + LWHF-160 + VARA HF modem · Email over HF radio
No active UK Winlink gateways confirmed — filling a real gap

APRS iGate — Planned

Direwolf + LinBPQ

APRS iGating on 144.800 MHz planned · North Yorkshire coverage gap
Awaiting active 2m setup

UK Foundation Licence power limit: 25W · Exam passed: 31 May 2026 · Station location: North Yorkshire, England · Grid square: IO94

TIME	MODE	BAND	CALLSIGN	COUNTRY	SNR	FREQ kHz	DIST	BRG	GRID	RAW MSG	WHAT IT MEANS	RADIO
Loading decodes…

OPENWEBRX — BAND ACTIVITY · M7NXS

Background decode counts per band and mode today (resets midnight UTC)

Loading…

Auto Band Schedule — Propagation Optimised (UTC)

00:00 – 02:0040m7.074 MHz — Night/NVIS, European stations + transatlantic DX

02:00 – 03:4020m14.074 MHz — Late night, catches US West Coast evening operators

03:40 – 04:3040m7.074 MHz — 🌄 Dawn greyline (±30min of York sunrise ~03:52 UTC)

04:30 – 05:0020m14.074 MHz — Post-greyline, F2 layer beginning to build

05:00 – 06:0030m10.136 MHz — 🌏 Pre-dawn long path — Pacific/Asia/Australia open, different DX to 40m

06:00 – 09:0020m14.074 MHz — Morning workhorse, F2 building, highest decode volume

09:00 – 11:0010m28.074 MHz — F2 peak, daily worldwide DX (Solar Cycle 25 peak)

11:00 – 13:0012m24.915 MHz — Less crowded than 10m, same transcontinental paths

13:00 – 15:0010m28.074 MHz — Afternoon F2, still open to all continents

15:00 – 16:0020m14.074 MHz — Highest traffic volume, reliable worldwide paths

16:00 – 17:0017m18.100 MHz — Late afternoon sweet spot, WARC band, less crowded

17:00 – 18:0015m21.074 MHz — Still open, higher decode volume than 17m

18:00 – 20:006m50.313 MHz — ✨ Magic Band! Sporadic-E DX window (extended to sunset ~20:09 UTC)

20:00 – 21:3030m10.136 MHz — 🌏 Early evening long path — Asia/Pacific paths 40m can’t reach, no contests

21:30 – 00:0040m7.074 MHz — Sunset greyline + evening European NVIS

Scheduler yields to connected listeners — resumes automatically when idle · Times are UTC · Antenna: Moonraker LWHF-160 41.7m end-fed, 9:1 UNUN

OPENHASP DISPLAY NETWORK — DESK UNIT LIVE FEED

16 × LANBON L8 · OPENHASP FIRMWARE · HOME ASSISTANT MQTT · YORK, NORTH YORKSHIRE

AUTO-REFRESHES EVERY 10s

Hardware

DeviceLanbon L8 Smart Switch

Display240 × 320px IPS touchscreen

FirmwareOpenHASP (open-source)

Quantity16 devices

Form factorsUK wall switch + tabletop

ConnectivityWi-Fi · MQTT

IntegrationHome Assistant via hasp-lvgl

ConfigYAML automations, no custom apps

Display Pages (12 per device)

P0Status bar — temp, time, weather, energy, radiation

P1Room lights — 24 toggle buttons, all rooms

P2Scenes — room selector + 12 Hue scenes + dimmer

P3Security — 8 doors & 8 windows live state

P4Motion — 20 internal & external PIR sensors

P5Outdoor lights — 6 zones

P6Ceiling fans — 7 fans individually controlled

P7Energy — grid/solar/battery + 40 circuit breakdown

P8EV charging — 2 Zappi chargers, mode control

P9Velux — 4 motorised skylights open/close

P10Radiation — GMC-800 gauge + CPM + status

P11Alarm — keypad PIN entry

Status Bar Key (top of every page)

19.6°C (left)Indoor temperature

🌡 iconHeating active indicator — orange = heating

23:36 (cyan)Current time

Weather iconCurrent conditions (colour-coded)

6.0°C (right)Outdoor temperature

£X.XX (cyan)Today’s energy cost (Octopus API)

CPM (green)Radiation count — GMC-800 Geiger counter

💧 XX% (blue)Rainwater butt fill level

XXkW (orange)Current grid power draw (negative = export)

Devin
Mitchell

About Me

What I Do

How We Got Here

Training & Certifications

Conferences & Events

Projects

Get In Touch

THE LAB — 9U RACK — YORK, NORTH YORKSHIRE

Compute

Storage

Networking

Power & Resilience

Self-Hosted Services

Offline Stack

TOP-10 RANGE RECORDS — 1090 MHz DEDICATED ANTENNA — T-EGXU127

LOCAL AIRCRAFT — TODAY'S INTERCEPTS — T-EGXU127

ADS-B LIVE AIRCRAFT TRACKING DATA PROVIDED BY DEVIN MITCHELL — NORTH YORKSHIRE

BACKGROUND RADIATION — GMC-800 GEIGER COUNTER

AMATEUR RADIO STATION — NORTH YORKSHIRE, ENGLAND

OPENWEBRX — LIVE DECODE FEED · M7NXS

OPENWEBRX — COUNTRIES HEARD · M7NXS

OPENWEBRX — BAND ACTIVITY · M7NXS

OPENHASP DISPLAY NETWORK — DESK UNIT LIVE FEED

Hardware

Display Pages (12 per device)

Status Bar Key (top of every page)

WORLD CLOCKS — LIVE

OPENWEBRX — FURTHEST STATIONS · M7NXS

DevinMitchell

About Me

What I Do

How We Got Here

Training & Certifications

Conferences & Events

Projects

Get In Touch

THE LAB — 9U RACK — YORK, NORTH YORKSHIRE

Compute

Storage

Networking

Power & Resilience

Self-Hosted Services

Offline Stack

TOP-10 RANGE RECORDS — 1090 MHz DEDICATED ANTENNA — T-EGXU127

LOCAL AIRCRAFT — TODAY'S INTERCEPTS — T-EGXU127

ADS-B LIVE AIRCRAFT TRACKING DATA PROVIDED BY DEVIN MITCHELL — NORTH YORKSHIRE

BACKGROUND RADIATION — GMC-800 GEIGER COUNTER

AMATEUR RADIO STATION — NORTH YORKSHIRE, ENGLAND

OPENWEBRX — LIVE DECODE FEED · M7NXS

OPENWEBRX — COUNTRIES HEARD · M7NXS

OPENWEBRX — BAND ACTIVITY · M7NXS

OPENHASP DISPLAY NETWORK — DESK UNIT LIVE FEED

Hardware

Display Pages (12 per device)

Status Bar Key (top of every page)

WORLD CLOCKS — LIVE

OPENWEBRX — FURTHEST STATIONS · M7NXS

Devin
Mitchell