Arthur Schneider

• Core contributor to the multi-tenant migration of Ansible Automation Platform onto OpenShift (ACM, Argo CD GitOps) serving 50+ tenant teams, involved from planning through cutover; co-authored the multi-tenancy ADR (AppProjects, Kyverno, Kubernetes RBAC, NetworkPolicy) that cut tenant onboarding from weeks to days.
• Founded the org-wide AI agent platform: built the governed skills and plugins marketplace (19 skills, 5 plugins, blocking CI validators, self-service team onboarding) adopted as the organization’s single source of truth, and authored the accepted enterprise standard for AI agents touching production systems.
• After an ungoverned AI-assisted script corrupted production data, built the hook-enforced runtime guardrail framework adopted as the enterprise standard; the governed toolchain scored 100% on a 19-assertion internal benchmark vs 32% without it.
• Drove the engineering of the enterprise PAM migration (sudo/SSSD to Delinea Server Suite) across 700+ production hosts and 77 application groups: designed the approach, migrated the privilege configuration to centrally auditable AD-backed roles, and supported every production cutover wave.
• Built the PAM migration toolchain: a preflight rule engine enforcing separation of duties and blocking dangerous privilege wildcards, plus dry-run apply/verify automation with a change-number audit trail. Cut operator effort 70% per wave; now maintained by other engineers.
• Primary engineer for the enterprise Red Hat Satellite platform (master plus six capsules across on-prem, AWS, and Azure with F5 capsule HA); led its zero-outage upgrade across two version hops in a single change window, clearing every outstanding CVE.
• Built the Satellite configuration-as-code platform: 30 Ansible roles replacing UI-driven configuration with version-controlled, peer-reviewed code, and the GitLab CI pipeline that maps each configuration change to the matching automation job.
• De facto maintainer of the enterprise Ansible execution-environment platform serving 11 teams: introduced its first CI/CD, automated testing, and promote/rollback discipline, and delivered images with dependency sets those teams could not build themselves.
• Traced a fleet-wide provisioning outage to the bootloader-to-kernel handoff after systematically disproving 13 candidate causes by direct test; separately found silent configuration drift that had the compliance platform reporting success while enforcing nothing.
• Authored 14 Architecture Decision Records setting platform direction and wrote strategy papers for Director-through-VP audiences; additionally served as Scrum Master, restructuring the team’s portfolio into a charge-code-driven hierarchy.
• Architected the internal documentation portal and RAG chatbot: a CloudFront-fronted docs portal with Bedrock Claude indexed across Markdown, Confluence, GitLab, and ServiceNow KB, with SAML federation enforcing knowledge-tier RBAC.

• Spearheaded a Zero Trust capability assessment using the CISA Zero Trust Maturity Model across Identity, Device, Network, Data, and Application & Workload pillars; delivered the baseline and gap analysis, Security Impact Analysis, and implementation roadmaps.
• Implemented ServiceNow-based tracking and dashboards monitoring Zero Trust progress across systems and teams, eliminating duplicate cross-team efforts.

• Led the Trend Micro Deep Security and Vision One migration, consolidating HIPS, AV, firewall, EDR, and XDR from legacy tools into a unified security platform.
• Orchestrated Habitat-to-Ansible re-platforming for configuration and deployment management across system environments.
• Drove the CISA v2 Device-pillar Zero Trust evaluation: inventory management, configuration control, and EDR/XDR rollout aligned with ZT principles.

• Managed the Red Hat Satellite implementation for the RHEL fleet: automated patching, repository configuration, and HA/DR with Ansible integration.
• Oversaw the Solaris-to-RHEL migration: scripted automated migration with post-migration validation, minimizing downtime.

• Administered QRadar SIEM and HX/FireEye XDR operations; built specialized tooling to streamline administration within appliance constraints.

• Linux operations across Solaris and RHEL: access management, application and database server deployments, and UNIX team tooling.

obsidian-toolkit (open source)

MCP server, Claude Code skill, and conventions for agent-driven Obsidian knowledge-base workflows. TypeScript, unit-tested, MIT licensed.

Homelab platform (rt-541.io)

Self-hosted platform on a two-node Proxmox cluster: 30+ Docker services behind Traefik with automated TLS, DNS, analytics, and monitoring, all managed as code (Ansible, Terraform, per-host Compose monorepo). Public mirrors: kuat-drive-yards-public, homelab-config-public.

Day-2 Satellite reporting platform

Eight-flavor reporting suite replacing seven legacy shell scripts; each report is simultaneously archived as markdown, emailed to its distribution list, and published to the documentation wiki, backed by pure-stdlib filter plugins and per-flavor Molecule test scenarios.

ChurnCore — Project Zomboid mod suite (in development)

Three-mod suite for a private Build 42 multiplayer server: a framework engine (stages, registries, UI, client/server state sync), an event director driving missions, radio broadcasts, and dynamic events, and a bridge to an NPC mod. Lua, unit-tested, with a scripted deploy loop.

Advent Harvest (in development)

Turn-based creature-team battler with roguelite dungeon crawling, built in Godot 4: seed-driven procedural overworld generation from continents to archipelagos, latitude- and elevation-driven biomes, hex-grid pathfinding, and a tested save system.