Author Image

Hi, I am Igor

Igor Widlinski

Infrastructure, Devops, and CyberSecurity specialist

I am a passionate infrastructure, devops and cybersecurity specialist with 17 years of working experience. I create automated secure infrastructure as code, that is resilient, scalable, and reproducible.

Certified Information Systems Security Professional (CISSP)
Certified Cloud Security Professional (CCSP)
Artificial Intelligence and Machine Learning
AWS Certified Solutions Architect – Associate
Leadership
Team Work

Experiences

1
Wawanesa Insurance

June 2023 - Present

Canada

The Wawanesa Mutual Insurance Company, founded in 1896, is one of Canada’s largest mutual insurers, with over $4 billion in annual revenue and assets of 12 billion.

Senior Security Systems Administrator

June 2023 - Present

Responsibilities:
  • Deploying and maintaining servers in AWS with CloudFormation.
  • Developing strategies and plans to enforce security requirements and address identified risks.
  • Configuring security systems, analyzing security requirements, and recommending improvements.
  • Managing 5000+ endpoints using industry best anti-malware, DLP, and PAM services.
Sanctuary AI.

Jan 2023 - Jun 2023

Canada

Sanctuary AI is on a mission to create and deploy millions of industrial-grade humanoid robots to help address growing labor challenges.

Cloud System Administrator

Jan 2023 - Jun 2023

Responsibilities:
  • Implementing CI/CD capabilities for infrastructure and applications.
  • Contributing to the architecting and implementation of cloud-native and cloud migration solutions.
  • Writing infrastructure automation scripts and templates and integrating them with DevOps tools.
  • Infrastructure as Code using AWS CDK.
2
3
Zymeworks Inc.

March 2013 - January 2023

Canada

Developing novel medicines for patients with difficult-to-treat cancers and other serious diseases.

Senior Systems Administrator

March 2013 - January 2023

Responsibilities:
  • Migrated on premise datacenter to AWS.
  • Managed cloud ( AWS / Azure ) infrastructure.
  • Salt / Puppet / Terraform configuration management.
  • Created Gitlab CI/CD pipelines.
  • Zabbix monitoring and created Grafana dashboards.
  • Single Sign on using Azure AD / SAML / ADFS and various MFA solutions.
  • Created auto-scalable High Performance Computational Cluster (GridEngine) in AWS.
  • Worked with various storage technologies including NFS / AWS Lustre / Netapp.
  • Managed Meraki / Palo Alto / Juniper networking.
Incomm Canada Prepaid Ltd.

October 2011 - March 2013

Canada

Incomm is the industry leading marketer, distributor and technology innovator of stored-value gift and prepaid products.

ILinux Systems Administrator

October 2011 - March 2013

Responsibilities:
  • Created OS hardening scripts for PCI (Payments Card Industry) certification.
  • Server configuration, installation & maintenance (RHEL 5,6 and Solaris Patches and Firmware Updates).
  • Troubleshooting outages and coordinating resolutions with external entities.
  • Created OS update strategy for company’s older software/hardware.
4
5
Eigen Development Ltd.

July 2008 - October 2011

Canada

Successful transaction processing company dedicated to the task of managing payments for merchants.

Linux Systems / Network Administrator

July 2008 - October 2011

Responsibilities:
  • Server configuration, installation, & maintenance (Ubuntu).
  • Implementation/maintenance of VoIP server (Asterisk PBX) & all VoIP phones
  • Designed, supervised and implemented major power and environmental upgrade to the server room
  • Implementation of disaster recovery plan & daily back ups
  • Collaborate with developers for debugging and systems related issues
  • Performed network and application security testing as part of Payment Card Industry (PCI) certification.

Featured Posts

Recent Posts

Hero Image
First Billing Alarms

Enabling IAM access to Billing According to this post giving IAM access to Billing Console can only be done through console. So lets enable it.

Saturday, February 1, 2025 | 1 minute Read
Hero Image
Organization instance Identity Center

As mentioned initially here I was having trouble finding a way to enable organization instance of Identity Center using some form of automated way ( either through aws cli, or cdk, or whatever). Back then, I did not enable it, hoping I could find a way to do it using code. Since then, i’ve spent some time researching this, and I found some documents ( which I lost…) that seemed to imply this can only be enabled manually using the AWS Console. So going to do this now.

Saturday, February 1, 2025 | 1 minute Read
Hero Image
Initial Cdk Setup

Installing CDK Installing CDK is pretty simple: $ sudo npm install -g aws-cdk [sudo] password for iwidlinski: added 1 package in 2s It worked: $ cdk --version 2.174.0 (build 9604329) Bootstrap CDK We can now bootstrap the account: $ cdk bootstrap aws://047719662517/us-west-2 --cloudformation-execution-policies arn:aws:iam::aws:policy/AdministratorAccess ⏳ Bootstrapping environment aws://047719662517/us-west-2... Trusted accounts for deployment: (none) Trusted accounts for lookup: (none) Execution policies: arn:aws:iam::aws:policy/AdministratorAccess CDKToolkit: creating CloudFormation changeset... CDKToolkit | 0/12 | 12:35:13 PM | REVIEW_IN_PROGRESS | AWS::CloudFormation::Stack | CDKToolkit User Initiated CDKToolkit | 0/12 | 12:35:19 PM | CREATE_IN_PROGRESS | AWS::CloudFormation::Stack | CDKToolkit User Initiated CDKToolkit | 0/12 | 12:35:21 PM | CREATE_IN_PROGRESS | AWS::IAM::Role | LookupRole CDKToolkit | 0/12 | 12:35:21 PM | CREATE_IN_PROGRESS | AWS::IAM::Role | CloudFormationExecutionRole CDKToolkit | 0/12 | 12:35:21 PM | CREATE_IN_PROGRESS | AWS::ECR::Repository | ContainerAssetsRepository CDKToolkit | 0/12 | 12:35:21 PM | CREATE_IN_PROGRESS | AWS::SSM::Parameter | CdkBootstrapVersion CDKToolkit | 0/12 | 12:35:21 PM | CREATE_IN_PROGRESS | AWS::IAM::Role | FilePublishingRole CDKToolkit | 0/12 | 12:35:21 PM | CREATE_IN_PROGRESS | AWS::IAM::Role | ImagePublishingRole CDKToolkit | 0/12 | 12:35:21 PM | CREATE_IN_PROGRESS | AWS::S3::Bucket | StagingBucket CDKToolkit | 0/12 | 12:35:22 PM | CREATE_IN_PROGRESS | AWS::IAM::Role | ImagePublishingRole Resource creation Initiated CDKToolkit | 0/12 | 12:35:22 PM | CREATE_IN_PROGRESS | AWS::IAM::Role | LookupRole Resource creation Initiated CDKToolkit | 0/12 | 12:35:22 PM | CREATE_IN_PROGRESS | AWS::IAM::Role | CloudFormationExecutionRole Resource creation Initiated CDKToolkit | 0/12 | 12:35:22 PM | CREATE_IN_PROGRESS | AWS::IAM::Role | FilePublishingRole Resource creation Initiated CDKToolkit | 0/12 | 12:35:22 PM | CREATE_IN_PROGRESS | AWS::ECR::Repository | ContainerAssetsRepository Resource creation Initiated CDKToolkit | 0/12 | 12:35:22 PM | CREATE_IN_PROGRESS | AWS::SSM::Parameter | CdkBootstrapVersion Resource creation Initiated CDKToolkit | 0/12 | 12:35:23 PM | CREATE_IN_PROGRESS | AWS::S3::Bucket | StagingBucket Resource creation Initiated CDKToolkit | 1/12 | 12:35:23 PM | CREATE_COMPLETE | AWS::SSM::Parameter | CdkBootstrapVersion CDKToolkit | 2/12 | 12:35:23 PM | CREATE_COMPLETE | AWS::ECR::Repository | ContainerAssetsRepository CDKToolkit | 3/12 | 12:35:36 PM | CREATE_COMPLETE | AWS::S3::Bucket | StagingBucket CDKToolkit | 3/12 | 12:35:37 PM | CREATE_IN_PROGRESS | AWS::S3::BucketPolicy | StagingBucketPolicy CDKToolkit | 3/12 | 12:35:38 PM | CREATE_IN_PROGRESS | AWS::S3::BucketPolicy | StagingBucketPolicy Resource creation Initiated CDKToolkit | 4/12 | 12:35:38 PM | CREATE_COMPLETE | AWS::S3::BucketPolicy | StagingBucketPolicy CDKToolkit | 5/12 | 12:35:39 PM | CREATE_COMPLETE | AWS::IAM::Role | ImagePublishingRole CDKToolkit | 6/12 | 12:35:40 PM | CREATE_COMPLETE | AWS::IAM::Role | FilePublishingRole CDKToolkit | 7/12 | 12:35:40 PM | CREATE_COMPLETE | AWS::IAM::Role | CloudFormationExecutionRole CDKToolkit | 8/12 | 12:35:40 PM | CREATE_COMPLETE | AWS::IAM::Role | LookupRole CDKToolkit | 8/12 | 12:35:40 PM | CREATE_IN_PROGRESS | AWS::IAM::Policy | FilePublishingRoleDefaultPolicy CDKToolkit | 8/12 | 12:35:40 PM | CREATE_IN_PROGRESS | AWS::IAM::Policy | ImagePublishingRoleDefaultPolicy CDKToolkit | 8/12 | 12:35:41 PM | CREATE_IN_PROGRESS | AWS::IAM::Role | DeploymentActionRole CDKToolkit | 8/12 | 12:35:41 PM | CREATE_IN_PROGRESS | AWS::IAM::Policy | FilePublishingRoleDefaultPolicy Resource creation Initiated CDKToolkit | 8/12 | 12:35:41 PM | CREATE_IN_PROGRESS | AWS::IAM::Policy | ImagePublishingRoleDefaultPolicy Resource creation Initiated CDKToolkit | 8/12 | 12:35:42 PM | CREATE_IN_PROGRESS | AWS::IAM::Role | DeploymentActionRole Resource creation Initiated CDKToolkit | 9/12 | 12:35:56 PM | CREATE_COMPLETE | AWS::IAM::Policy | FilePublishingRoleDefaultPolicy CDKToolkit | 10/12 | 12:35:57 PM | CREATE_COMPLETE | AWS::IAM::Policy | ImagePublishingRoleDefaultPolicy CDKToolkit | 11/12 | 12:35:59 PM | CREATE_COMPLETE | AWS::IAM::Role | DeploymentActionRole CDKToolkit | 12/12 | 12:36:01 PM | CREATE_COMPLETE | AWS::CloudFormation::Stack | CDKToolkit ✅ Environment aws://047719662517/us-west-2 bootstrapped. This should create s3 bucket, which it did:

Sunday, January 5, 2025 | 8 minutes Read