CORPORATE PERSONNEL SYSTEM PERSONNEL RECORD // ACTIVE
REC NO. 3711-BT ACCESS LEVEL: PUBLIC
ID photo of Brandon Tomlinson, green-dithered bitmap headshot
FIG. 1 — SUBJECT ID PHOTO
NAME

BRANDON TOMLINSON

“THEBWT”

DESIGNATION LINUX SYSTEMS ENGINEER
SPECIALTY KAFKA · OBSERVABILITY · SELF-HOSTED INFRASTRUCTURE
STATUS ACTIVE — OPEN TO CONTACT

§01

SERVICE RECORD

ENTRY 01

Linux Systems Engineer — EasyPost

2021 — PRESENT

SRE for dedicated, bespoke production infrastructure. Runs the Kafka datastreams backbone and owns the log pipeline end to end: host collection daemon into regional Kafka, Vector/VRL forwarders, centralized Elasticsearch. Ran the Logstash-to-Vector conversion. Still running those pipelines.

ENTRY 02

Senior Linux Systems Engineer — Rackspace

2015 — 2021

Ran the Debian package infrastructure for the dedicated fleet, and helped out the RPM infrastructure teams. Overhauled enterprise monitoring. Pushed cloud-style tooling and automation into a shop that was mostly dedicated hosting.

ENTRY 03

Linux Systems Administrator — Rackspace

2013 — 2015

Managed server deployments and enterprise-level support as an MSP for thousands of customers. Ad-hoc SRE work across wildly varied environments, too.


§02

TECHNICAL PROFICIENCY

  • Linux Systems Engineering
  • Observability — Prometheus, Grafana, Elasticsearch, OpenTelemetry Collector, Tempo, Mimir, Vector
  • Debian Packaging & Repo Infrastructure
  • Ansible / GitOps / CI
  • Terraform & Kubernetes

§03

AI OPERATIONS

Infrastructure runs through agentic AI, deliberately: fleet replatform (Salt → ansible-pull GitOps) and ops tooling executed by orchestrating Claude — PR-gated, human-reviewed, config as source of truth. Custom MCP knowledge servers (PostgreSQL + pgvector, OIDC-gated) give the agents semantic recall over the fleet's runbooks. The agents do the typing; the operator owns intent, review, and blast radius.


§04

SELF-HOSTING & FOSS

Runs a multi-host homelab: Tailscale mesh, ansible-pull GitOps, a full Prometheus / Grafana / Elasticsearch observability stack, and backups that get tested. BookOrbit and SC Blueprint Forge run on it.

Identity and mail run in-house. Self-hosted OIDC + LDAP provider fronting every service on the mesh; own mail server, LDAP-authenticated, plus a second outbound rail so a provider outage can't take the recovery path down with it.

Published a telemetry mod on the Steam Workshop: chzbrgrStats. Server-authoritative Lua collectors into a Prometheus exporter into Grafana.

ETHOS DATA SOVEREIGNTY — IF IT CAN BE SELF-HOSTED, IT IS.

§05

UPSTREAM

Merged: Glances, Holland Backup Manager, recap, nova-agent, kthresher. Debian control files, package automation, container builds. Rackspace era.


§06

FIELD INTERESTS

  • Defcon
  • TTRPG Cons (Gen Con, etc.)
  • Tabletop RPGs
  • Outdoors