Charles Gibbs SRE & Infrastructure Engineering Leader
Incident: reduced capacity Skip intro
Cluster telemetry // node unavailable

Service degraded.

An engineer has been requested. A worker node is unavailable in the primary zone.

kubectl · context: production

Kubernetes · Infrastructure · Engineering leadership

Interactive demo · commands are illustrativeSkip intro to the full career page

Charles Gibbs · Static site on Cloudflare Pages · Scripted recovery illustration, not a live cluster
Charles Gibbs

SRE & Infrastructure Engineering Leader

Charles Gibbs

Reliable platforms. Demanding environments.

I lead site reliability engineering at Onebrief, where the platform ships into secure and air-gapped environments for government and defense. Before that I ran a platform team managing 30+ Kubernetes clusters for a system with 500,000+ end users. I stay hands-on with Kubernetes, Helm and the observability stack while building teams that own their systems end to end.

Service web has 6 of 6 endpoints ready. Replacement pods run on workers 01 and 02. Worker 03 is isolated.
Spec // fig-01 // recovery demo Topology: 2 active nodes · 1 isolated · 6 target pods
Service · 6/6 endpoints ready web.production.svc
Zone Aworker-01
Ready
  • api-11/1 Ready
  • worker-11/1 Ready
  • api-31/1 Ready
Capacity: 0 slots freeKubelet: ok
Zone Bworker-02
Ready
  • api-21/1 Ready
  • worker-21/1 Ready
  • worker-31/1 Ready
Capacity: 0 slots freeKubelet: ok
Zone Cworker-03
Isolated
  • api-3Terminated
  • worker-3Terminated
  • —No pods scheduled
Heartbeat: timed outCapacity: offline
Status: Restored (6/6 ready) Replicas restored · Worker 03 isolated
What happened?

When a worker node stops responding, the Service keeps routing traffic only to pods that still report Ready. The pods on the missing node drop out of the endpoint list, so the application runs at reduced capacity but stays up.

The deployment controller notices it is short of replicas and schedules replacements on the nodes that still have spare capacity. Once those new pods pass their readiness checks they join the Service, and full capacity returns. The failed node is left isolated for investigation rather than repaired in place.

This is a scripted illustration, not a live cluster. It assumes replicated workloads and spare capacity on the remaining nodes, and it compresses timing that would take longer in practice. Paging does not send a real notification.

01 // Selected work

Three kinds of problem I keep coming back to.

A shared Kubernetes platform for a large government program, software delivered into air-gapped environments, and the teams that run both.

Kubernetes platform engineering Project 01 · Core4ce · 2022–2024

A shared Kubernetes platform built for Continuous ATO

Challenge
A government platform serving 500,000+ end users needed to run dozens of Kubernetes clusters consistently, keep pace with compliance, and make technical progress toward Continuous Authority to Operate (cATO) without slowing developers down.
Contribution
Architected and led the platform team. Managed 30+ Kubernetes clusters with GitOps delivery, integrated Cilium, Artifactory, Ansible Automation Platform and Fleet, automated infrastructure with Packer and Terraform, and standardised developer workflows with shared GitLab CI pipeline templates. Directed cloud management for hundreds of servers.
Outcome
Customer infrastructure costs reduced by 70% through automation. Applications architected for 99.999% availability, and a platform team with clear technical direction toward cATO. Capability assessments I authored supported government procurement and expanded the company's contracts.
Reliable delivery into constrained environments Project 02 · Onebrief · 2024–2025

Shipping software into air-gapped and high-touch environments

Challenge
Onebrief's platform has to run in secure, air-gapped and fielded environments for government and defense customers: no direct connectivity, restricted hosting patterns, and no room for a rollout that cannot be reproduced.
Contribution
Packaged and troubleshot the infrastructure for air-gapped deployments, improved the Helm, Kubernetes, Linux, AWS and secure-networking tooling behind them, and evaluated and maintained multiple hosting and deployment patterns for restricted environments. Built the telemetry pipeline on OpenTelemetry, Grafana Alloy, Prometheus, Loki, Tempo and Grafana, with frontend and backend tracing.
Outcome
Operational readiness for production and fielded environments, deployments that are repeatable rather than bespoke, and visibility into customer-impacting behaviour that did not exist before.
Infrastructure team leadership Project 03 · Onebrief · 2025–present

Building an SRE function that owns production

Challenge
As deployment targets multiplied, reliability needed to become a defined practice with clear ownership, rather than something platform engineers absorbed between releases.
Contribution
Lead SRE strategy at Onebrief across observability, incident response and deployment processes. Partner with platform and engineering leadership on reliability initiatives, team structure and ownership, while staying hands-on with Kubernetes, Helm, Linux and monitoring and mentoring the engineers on the team.
Outcome
SRE practices extended across production operations, better system visibility and debugging workflows, and the infrastructure support that opened up new secure and high-touch deployment targets.
02 // Experience

Responsibility, scope and impact.

Twelve years across defense contractors, a start-up shipping to government, and the Army National Guard. Based in Honolulu, Hawaii.

  1. Nov 2025 — Present

    Site Reliability Engineering Manager

    Onebrief · Honolulu, Hawaii

    • Scope: SRE strategy, observability, incident response and deployment processes for production and secure, air-gapped deployments. Manage and mentor the engineering team.
    • Impact: Expanded SRE practice across production operations, improved system visibility and debugging workflows, and enabled new deployment targets.
  2. May 2024 — Nov 2025

    Staff Platform Engineer

    Onebrief

    • Scope: Kubernetes infrastructure and observability for production and restricted deployments; Helm, Linux, AWS and secure-networking tooling; hosting patterns for government and defense.
    • Impact: Operational readiness for air-gapped and fielded environments, and a full telemetry pipeline (OpenTelemetry, Grafana Alloy, Prometheus, Loki, Tempo, Grafana) with end-to-end tracing.
  3. Apr 2022 — May 2024

    Senior DevOps Engineer

    Core4ce

    • Scope: Architected and led the platform team. 30+ Kubernetes clusters, GitOps delivery, hundreds of cloud servers, and a platform supporting 500,000+ end users. Scrum Master for the team.
    • Impact: 70% customer cost reduction through Packer and Terraform automation, 99.999% availability architecture, standard GitLab CI templates, and capability assessments that expanded company contracts.
  4. Jun 2021 — Apr 2022

    Senior DevOps Engineer I

    Sev1Tech

    DevOps engineering for infrastructure reliability and deployment automation.

  5. Jun 2020 — Jun 2021

    DevOps Engineer III

    Millennium · Charleston, South Carolina

    Cloud and DevOps automation for enterprise-scale deployments.

  6. Jan 2019 — Jun 2020

    Systems Engineer II

    Lockheed Martin · Deer Creek, Colorado

    Systems engineering in support of operational excellence and system reliability.

  7. Jan 2018 — Jan 2019

    Linux System Administrator

    Lockheed Martin · Littleton, Colorado

    Administered Linux systems for stability and security in mission-critical environments.

  8. Sep 2013 — Sep 2019

    Specialist

    Army National Guard · Greater Denver Area

    Technical operations and systems administration.

Certifications
Certified Kubernetes Administrator, The Linux Foundation (2022) · CompTIA Security+ (2015) · CompTIA Network+ (2015)
Education
A.S. Network Technology, Cochise College · B.S. Marketing Management, Johnson & Wales University, Denver
Toolkit
Kubernetes · Helm · AWS · Linux · Terraform · Packer · GitOps · Cilium · Ansible Automation Platform · OpenTelemetry · Grafana Alloy · Prometheus · Loki · Tempo · Grafana · GitLab CI · GitHub Actions
03 // Contact

If you run demanding systems, let's talk.

Open to conversations about platform engineering, reliability, and leading infrastructure teams.