Matthew Thompson

Current average mark: 90% Modules include: - Artificial Intelligence - Machine Learning - Neural Networks - Deep Learning - Python - AI Applications - Data Management - Big Data - Data Science

Bespoke AI Systems and Agentic solutions, focused on Rational Agents. Member of Cohere Lab's Open Science ML Agents group and Summer School. Corporate Risk capture system. Python-based engineering, two specific solutions: 1. A Prompt Version solution. This enabled prompts, including validation classes, to be versioned and updated outside of the Software Development lifecycle. 2. A LLM abstraction solution. This created a separation of concerns between the UI/API code and the implementation of the LLM code. The LLM code is based on LangChain and uses LangChain’s Expression Language.

40% of my time developing solutions with GenAI (specifically LLMs). 60% of my time as a SRE. Working as part of GenAI Taskforces + Implemeted GenAI quick wins for Cyber Threat Intelligence + Leveraged LangChain to develop reusable Prompt and LLM managers. + Built proof of concepts with Gradio + Designed controls (e.g. for limiting hallucinations). + Run GenAI workshops, leading a company wide initiative to upskill on GenAI and find value. Working with Security and SRE Managers + Introduced technical risk management for engineering + Defined security roadmap for Engineering + Completed engineering part of a SOC2 audit + Automated infrastructure controls around IAM and Backup/restore + With the team introduced Workload Identity to reduce secret usage + Developed Infrastructure as Code responses to GCP Security Command Centre findings.

Bootstrapped a DevSecOps function: • Sprint based way of working working, managed backlog and epics (Jira and excel) • Epic based roadmap (goals included technical and compliance) • Epics, with rough estimates, are filtered up to Product and Technology Management for visibility and planning • Implemented GitOps based CI\CD for Terraforming AWS with Gitlab • Managed creation of new platform instance in Japan (to support 5000 lockers) • Met regularly with Dev leads and Head of Architecture to work together Technical: • PoC for Zero-trust style operator access (using AWS SSM) • PoC for Zero-trust style IoT device access • PoC for Secure pipeline (no credentials in Gitlab or on disk unencrypted) • Worked with engineers to centralize security management (AWS Security Hub, Inspector, Prowler and Guard Duty) • Worked with Solution Architect to centralize AWS networking (AWS Transit gateway based) Compliance • Risk analysis across AWS architecture and technical change • Documented controls and suggested owners for SOC2 compliance • PoC for automated evidence collection (where possible)

Learning French via Alliance Francais and continuing to learn more about Cloud Security.

Ran and secured Bankable's Banking-as-a-Service platform mixing Site Reliability Engineering principles (24*7), automated SecOps and an ITIL-based Service Operations. The platform supports authorisation and clearing, MasterCard and VISA card management, Open Banking, Virtual Accounts, FX, SEPA Payments, Swift payments and UK Faster Payments. It runs on a Hybrid (On-prem, GCP and AWS) infrastructure with supporting Paas/SaaS solutions. Security certification: SOC2 Type2, PCI DSS Level 1, ISO27001

• Defined and evangelised new Service and Software Delivery processes. ITIL, DevOps and Continuous Deployment based. • Responsible for the creation of an IT Operations Organisation within GFIT • Responsible for the on boarding of GFIT applications to Nordea’s Identity Access Management system.

• Successfully led a change in the way of working, improved the teams’ performance, the delivery of service and customer satisfaction. • Mentored and transferred subject matter expertise to off shore locations. • Acted as point of escalation; faced UBS Business and IT Managers for general reporting\escalations. • Managed Continuous Improvement initiatives.

• Managed Production and pre-Production releases. Created release processes, addressed deficiencies with the development teams and automated where beneficial. • Developed and improved bespoke monitoring solutions (C#, SQL and PowerShell) • Handled day to day Incident Management. Owned incidents during the EMEA workday, handed over from APAC and to AMER when required. • Implemented and maintained BCP strategy.