Carl-Fredrik Arvidson

I really love building things for the internet together with other people. I enjoy mob programming, pair programming and doing things solo.

Since 2004, I’ve held various roles focused on system administration, operations and development.

My main employer has been the Swedish Armed Forces (2004-2012), the Swedish Security Service (2012-2017), Kundo (2017), Sveriges Television (2017-2022), and Code Labs AB (2022-present).

By working with the aforementioned agencies and companies, I have acquired a deep knowledge of what's required to run and operate complex software systems within organizations which have extremely high security standards.

I have continuously kept my skills up to date driven largely by a strong personal interest in programming, systems networking and security, working with amazing people and by attending security-focused courses and conferences.

I love building things together with other people and seeing the finished product. I enjoy mob programming, pair programming and doing things solo.

Skills

Programming

I have extensive experience developing web applications, mostly with Javascript and Python to develop fully-tested and working services.

• Javascript. React, Node.js, Typescript
• Python. Flask, Django, Celery
• Templating. HTML, Jinja2, Handlebars, SASS, CSS
• Automated testing.Jest, Cypress, Unittest, Pytest
• CI/CD. Travis, Circle, Github CI, GitLab CI, CodeShip
• Cloud Infrastructure. AWS, Firebase, Google Cloud Platform, Digital Ocean, Heroku

IT Security and Networking

The Swedish Military and Swedish Security Service are highly security orientated. I’ve worked with technologies for vulnerability scanning in networks, penetration testing, Cisco routers/switches, firewalls, web proxies, VPNs, logging, web servers, 2-factor and OTP authentication systems and incident handling.

I’ve developed Security Guidelines suited for Developers. I believe that responsible people thrive on freedom.

Operating Systems and Virtualization

I have built cloud native applications running in docker.

I have worked with both Microsoft Windows and Unix/Linux/Mac based systems, both clients and servers. I have worked with virtualization products from VMware.

Automation

I have worked with various Continues Delivery platforms to automate testing and deployment workflows.

Experience

Code Labs AB​, Stockholm - Fullstack Developer

November 2022 - Present

• I joined the team at codelabs.se as a consultant in november 2022.
• Technologies: Node.js, React, Next.JS, MySQL/Postgres, Type-ORM, Redux
• Deployment on Vercel and AWS using CircleCI and Github Actions

Sveriges Television​, Stockholm - Developer

December 2019 - November 2022

• In December 2019, I joined the News and Sports team at Sveriges Television
• Developing a new platform for live reporting
• Technologies: Node.js, React, Firebase/Firestore, Knex, MySQL
• Deployment on Heroku, Google Cloud Platform and Firebase

Sveriges Television​, Stockholm - Developer

December 2017 - December 2019

• In December 2017, I joined the Developer Experience team at Sveriges Television
• Mission: Make SVT the best place for developers to do great work
• Developer Support, onboarding, documentation, Security Practices
• Automated Developer Workflows with GitLab CI/CD
• Internal tooling mostly written in NodeJS, React and Python
• Built reference implementations of various technologies. One example was a company specific SAML2 application using NodeJS

Kundo​, Stockholm - Developer

January 2017 - December 2017

• In January 2017, I joined the Product Development team at Kundo
• As a Python developer I have written and deployed Python and JavaScript code for Kundo’s Forum, Email, and Chat products
• Building deployment tools for internal use
• Developed using tools and methods like Docker, Vagrant, PyCharm
• Worked in an agile way with daily standups and sprint planning
• Code-review using GitHub.com and Continuous Integration with CircleCI.com

Swedish Security Service​, Stockholm - Developer

September 2015 - December 2016

• In 2015, I joined a development team and started to focus on application development in *nix systems

Swedish Security Service​, Stockholm - System Operations Engineer

January 2012 - September 2015

• In February 2012, I joined the Systems Operations team at the Swedish Security Service (SÄPO), located on Kungsholmen in central Stockholm
• My focus was on *nix based systems, networking and security technologies
• IT Security incident handling and response

Swedish Armed Forces and Swedish Defence Materiel Administration​, Stockholm - Consultant

September 2007 - December 2011

In September of 2007, I started as a full-time consultant at the Swedish Defence Materiel Administration (FMV) in Stockholm on project Fenix. Fenix is a web based aviation maintenance system for the Swedish Air-Force.

I was part of the early team that took the Fenix platform into production, and worked on migrating the existing JAS–39 Gripen (Swedish fighter jet) fleet from its previous archaic systems onto the new Fenix aviation maintenance platform. Since the project went live, the Swedish Air-Force has continued to migrate several other aircraft types onto the new Fenix platform.

I started as a systems administrator for the development and testing infrastructure, which consisted mainly of Microsoft Windows and Sun Solaris servers. Part of my responsibility was also to work with the development team on quality assurance and testing of new releases before they went into production.

As the project grew in size, the demand for more rapid deployment and testing increased. I was tasked with designing and configuring a new development platform, which was based on technology from Dell, EMC and VMWare.

In 2010, I switched roles and began working as part of the development team at FMV. As part of the export of the JAS–39 Gripen to the Royal Thai Air-force, I worked on creating product specifications and test cases for any new functionality that was required.

Ström2 Consultant Group​, Stockholm - Consultant

2007 - 2011

In 2007, I started at Ström2 Consultant Group. Along with the change of employment from IT-Resurs to Ström2, I also started working at the Headquarters of the Swedish Armed Forces in Stockholm.

In addition to being a full-time consultant for the Swedish Armed Forces, I worked with the in-house IT Infrastructure at Ström2. As the IT Manager at Ström2 I was responsible for keeping the main office systems up and running.

To make the server environment more manageable I rebuilt it and virtualized it using technology from VMware, Microsoft and Linux (mostly Debian).

IT-Resurs/Swedish Armed Forces​, Uppsala - Consultant

2005 - 2007

In October 2005, I started as a IT-Support Technician at the Military Garrison in Uppsala. I was part of the team that supported the Swedish Operational Command, which was stationed in Uppsala at the time.

Although I mainly worked with the unclassified infrastructure, I went through additional training on handling classified material and equipment.

Swedish Armed Forces​, Stockholm - Conscript

2004 - 2005

In July 2004, I began my basic military training at the Karlskrona Naval Base. After the 8 weeks of basic training and an additional leadership training course we moved from Karlskrona to the Swedish Military Headquarters in Stockholm.

The daily activities consisted of user support, logistics, user training, server and network management, IT security and a final individual project. We worked side by side with both employees of the Armed Forces and Consultants. We had the daily support responsibility for one of the floors of the Headquarters in Stockholm.

My final project consisted of the development of a Light Touch Deployment Server, used for remote installation of Microsoft Windows XP clients. The server was later taken into production and used on the Internet LAN at the Operational Command in Uppsala. I left the Swedish Armed Forces after my 15 months conscription was over as a Sergeant, with the final mark of 10–8–9 out of 10–9–9.

Training & Certifications

2014

• SANS Security 561: Intense Hands-on Pen Testing Skill Development. Las Vegas USA
• HP ArcSight ESM Administrator 6 CORR Engine. London UK

2013

• SANS Security 504: Hacker Techniques, Exploits and Incident Handling, Amsterdam Netherlands.

2012

• Dell Compellent Storage Area Network, Minneapolis USA
• 5 day Malware FBI lead course, in-house at the Swedish Security Service, Stockholm.

2007-2012

• VMware Infrastructure 3 Fast Track Program
• Managing and Maintaining a Windows Server 2003 Environment
• Mastering Microsoft System Center Configuration Manager 2007 SP2 R2 and R3
• Programming with C# Using Microsoft.NET Framework 4

2005–2007

• ITIL Introduction
• Service management
• Basic Combat Training by the Swedish Armed Forces
• Crypto and Security Training by the Swedish Armed Forces

Education

Katedralskolan, Uppsala, Sweden​, 2004 - High school

References

Available upon request.