Angus Lees
Principal SRE at Canva
Greater Sydney Area Australia
Summary
🤩
Rockstar🎓
Top SchoolAngus Lees is a Principal SRE with 17 years of experience building and operating large-scale cloud and Kubernetes-based platforms, currently leading reliability at Canva in the Greater Sydney area. He blends deep systems and networking expertise from roles at Google and AWS with hands-on open-source engineering demonstrated by core contributions to projects like sealed-secrets, go-jsonnet, CNI plugins and the OpenStack ecosystem. Angus has a strong track record improving build and deployment pipelines, IPAM and networking primitives, and designing controllers and crash-resilient workqueue patterns for production systems. Equally comfortable in Go, Rust-adjacent tooling and low-level syscall work, he often fixes architecture-specific issues and cross-platform build problems that others miss. He is a pragmatic engineering leader who still prefers shipping code—his early sealed-secrets work and Kubernetes runtime contributions show he moves from prototype to production. Based in Australia, he pairs SRE rigor with a developer’s curiosity (and apparently enjoys long walks on the beach).
17 years of coding experience
24 years of employment as a software developer
UNSW Sydney
Github Skills (65)
python10
testing10
bash10
automation10
serverless10
backend10
encryption10
develop10
dockers10
helm10
jsonnet10
kubernetes-pods10
protobuf10
test-automation10
kubernetes10
Programming languages (30)
Github contributions (5)
bitnami-labs/sealed-secrets
May 2017 - Apr 2019
A Kubernetes controller and tool for one-way encrypted Secrets
Role in this project:
Back-end & DevOps Engineer
Back-end & DevOps EngineerContributions:16 releases, 1 review, 117 commits in 1 year 11 months
Contributions summary:Angus's primary contribution was the initial implementation of the core functionality of the `sealed-secrets` project, which involved defining the `SealedSecret` custom resource definition and associated logic for encryption and decryption. The user also implemented the controller loop to track outstanding tasks with workqueue for rate-limited retries and the explicit deletion of Secrets when the corresponding SealedSecret goes away. Furthermore, they were responsible for the addition of HTTP server and the trivial healthcheck endpoint and publishing certificate via /v1/cert.pem.
controller1passwordencrypt-secretsencryptedsecrets
vmware-archive/kubeless
Mar 2017 - Nov 2017
Kubernetes Native Serverless Framework
Role in this project:Back-end & DevOps Engineer
Back-end & DevOps EngineerContributions:37 commits, 21 PRs, 10 pushes in 8 months
Contributions summary:Angus primarily focused on improving the python runtime environment for the Kubeless framework, rewriting it to leverage bottle/cherrypy for multithreading and adding Prometheus metrics for monitoring. They also contributed to the event-consumer, integrating Prometheus metrics and addressing exception handling. Furthermore, the user made significant changes to the deployment process, including adding Prometheus annotations to function pods and refactoring the controller to use an informer+workqueue pattern. These changes improve runtime performance, monitoring capabilities, and overall stability of the serverless framework.
golangserverlesskubelesskubernetesaws
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.