Mannix Graham

Alcohol and Gaming Commission of Ontario (AGCO), Toronto, ON

• Led R&D of the team’s first Playwright automation suite for release-readiness smoke testing, cutting full regression from 3.5 hours (manual) to 7 minutes across 14 test cases.
• Wrote a training guide and ran a live demo so 4 of 6 teammates could build and maintain their own test cases after the internship.
• Ran disaster-recovery scenarios against a 24-hour recovery-time objective, and built a Python scraper that the Communications intern later adopted for ongoing monitoring.

Python · Playwright · Selenium · Azure DevOps (10+ test cases per sprint, defect triage via log analysis) · Power BI · Beautiful Soup

Other experience

Operations Associate, City of Waterloo Sept 2025 – Present

Troubleshoot facility-system incidents for 200+ patrons per shift and coordinate event setups with teams of 6–8.

Facility Attendant, City of Brampton Jan 2023 – Present

Monitor ice, brine and compressor systems each shift and escalate trend deviations before they become outages.

Cloud portfolio project

• Production-structured Terraform codebase (bootstrap, modules, environments) that provisions a multi-AZ VPC, EC2, IAM and CloudWatch, so builds are repeatable and console-free.
• CI/CD through GitHub Actions with short-lived OIDC credentials, so there are no long-lived AWS access keys to leak.
• Adding a site-to-site VPN to a home-lab server to demonstrate hybrid cloud/on-prem networking and observability.

Decision: OIDC instead of stored access keys. Each workflow run gets temporary credentials, so there is nothing to rotate or leak.

Terraform · AWS (VPC, EC2, IAM, CloudWatch) · GitHub Actions (OIDC) · Proxmox · Tailscale

GitHub Repository

Self-managed, running at home

• Designed a VLAN-segmented network with inter-VLAN routing on Cisco IOS, isolating device traffic by security zone to reduce lateral-movement risk.
• Deployed a self-managed k3s Kubernetes cluster running Dockerized workloads across multiple Proxmox-hosted virtual servers.
• Set up Tailscale for secure remote access without exposing services publicly.

Decision: Tailscale instead of port forwarding. Nothing listens on the public internet, and access is tied to my devices.

Cisco IOS · Proxmox VE · Tailscale · Pi-hole · Ubuntu Linux · Docker · Kubernetes (k3s)