Nicky's Journal

Day 1 - Product Manager, Secure

• https://about.gitlab.com/job-families/product/product-manager/
• https://about.gitlab.com/company/team/org-chart/
• https://about.gitlab.com/direction/secure/
• https://about.gitlab.com/handbook/engineering/ops/secure/
• https://about.gitlab.com/solutions/dev-sec-ops/
• https://about.gitlab.com/stages-devops-lifecycle/secure/
• https://gitlab.com/gitlab-org/security-products

Day one was mostly on-boarding with a few meetings

Meetings
I had four. I was slightly surprised, and very happy that meetings start on time, meetings end on time, and during meetings everyone collaboratively takes the notes. I when volunteering for non profits and gaming take notes and leave it open for collaboration but rarely get assistance. This is awesome.

On-Boarding
There are so many accounts to sign up / configure!
This was a bit surprising because they are such an integrated product themselves. and promote not having to stitch their product together to get a devops pipeline. But there was chat, HR, video conferencing, email, etc.

Everyone is very welcoming, and there are many ex-Rackers

I didn't get done the target day 1 things so I felt bad, but everyone said not to worry.

I won't be getting my company laptop until next week, and apparently it does not work well with windows or Lenovo, and the only computer I have is windows on lenovo and I am not keen to follow the recommendation to install ubuntu on it. I might spin up a VM if needed.

I submitted an expense report, and will be attending a company meeting next week. I am excited to meet so many people.

• https://about.gitlab.com/company/culture/contribute/

GitLab not just GitHub competitor, it's an integrated end to end code ecosystem.

• https://about.gitlab.com/devops-tools/
• https://about.gitlab.com/features/

There are nearly 600 people!

• https://about.gitlab.com/company/team/
• https://about.gitlab.com/company/team/#countries
• https://gitlab.com/gitlab-com/www-gitlab-com/blob/master/data/team.yml
• See everyone's pets! https://about.gitlab.com/company/team-pets/

They are about transparency, the handbook is online and public

• https://about.gitlab.com/handbook/

They are super big on their values, CREDIT (Collaboration, Results, Efficiency, Diversity, Iteration, and Transparency)

• https://about.gitlab.com/handbook/values/

GitLab is hiring! 100% remote, and is hiring

• https://about.gitlab.com/jobs/apply/

You can know about what you will make before even applying

• https://about.gitlab.com/handbook/people-operations/global-compensation/#compensation-calculator

You can find out about the hiring process before it even starts

• https://about.gitlab.com/handbook/hiring/interviewing/

18F
Government job application notes

https://docs.google.com/document/d/1EieurAPSdpCQT5jghv1RLrncELA0-AxdMZxy3alU_E4/edit

18F TTS Product Manager Application Experience

I applied as a Product Manager to https://join.tts.gsa.gov/join/product-manager/  on Feb 12 via a google form.

I promptly received confirmation from the form of the data I submitted.

Feb 19 I received email confirmation that my application was being reviewed.

Feb 19 I received by email a candidate experience survey.

March 14 I received an email that explained I had not made it past the first stage, qualification.

March 18 I was asked to talk about the application process in more detail. I considered this an odd request but wanted to find out more and accepted.

March 25, 2019

I had a meeting on March 25, 2019 talk about the process in detail, I am glad I did.

I made the following notes during the google hangout call, I hope that they will be useful to anyone applying for a government job or an 18F / TTS job in the future.

First, I got an overview of the (manual, human) process of reviewing applications.

Process

• Applications are collected using google forms, as there is no approved ATS (Applicant Tracking System) for government use.

  • We discussed the attack vectors this opens and potential mitigation. (If humans see these as “trusted” links and attachments, that is bad. Perhaps they should require humans to send links and attachments from unknown sites through scanners first.)

• Qualification verification is done by humans who must check for exact combinations of required skills from the Qualifications of the job posting itself. If there is a combination qualification and you do it as two bullets, that does not count. All Qualifications must be done I a full time one-year minimum role. This is why putting hours in positions matters. If working 20 hours a week, and doing qualifying work, you would need to hold the role two years. Although a poor verbiage choice, candidates then pass or fail qualification. (Really they pass or fail clearly demonstrating the qualifications as asked for.)

  • Feel free to copy paste from the job posting but then add/finish the statement with specifics about how.

  • In some cases where time is available, they schedule calls with people who possibly should have passed stage 1 but didn’t to explain the process the government uses so in the future that candidate might match government needed specificity when applying.

• After qualification stage, applications are passed to multiple SMEs who review the resume and all supporting materials that were submitted (LinkedIn, portfolio, blog, presentations, etc) and grades it against the “Evaluations” section in the job posting.

• The next step is for the hiring manager to review the candidate pool. There are often many applicants for a few spots, and as a result, they will not be able to interview 100% of the pool. This is where the additional information (answering the Q / Q treated as a cover letter) you provided gives you the opportunity to differentiate yourself.

  • In my specific application, the questions were

    • Why do you want to join this organization

    • Tell us why you're interested in the role you're applying for

General government resume notes based on my conversation

• Government resumes, specifics specifics specifics!

  • I am used to summarizing in the private sector, so really push yourself.

• Explicitly include qualifications as stated

  • My idea for next time, include a qualifications section at the top, and direct copy-paste the qualifications then add supporting data, then copy-paste them into the specific job position as well to make it easy and clear to get past stage qualifications.

• Make sure to double check evaluation criteria and try and work them in as extras outside the resume for clarity.

  • My idea for next time, since you can submit a portfolio, LinkedIn, blog post, etc - why not literally write a blog post on how you meet them all referencing specific jobs?

• Do not worry about length, apparently, gov resumes can be as long as needed, keep everything.

• Follow the government style guides

  • https://join.tts.gsa.gov/hiring-process/#government-style-resumes

  • https://join.tts.gsa.gov/resume/

  • Which had me rework my resume a lot to match “key information for each position”

Qualification for this position

To qualify for this role, you must have one year of specialized experience equivalent to the GS-14 in the Federal service. Specialized experience is:

1. Experience leading interdisciplinary product teams in the research, design, development and delivery of digital products or services. This experience must include ALL of the following:

   • Leading the development of multiple digital products or services, or leading the development of multiple features in large products

   • Creating and managing the product vision based on user research & metrics

   • Leading teams through the adoption of new tools, technologies or methodologies

2. Experience leading digital product or service development, from concept to delivery, within highly ambiguous or uncertain situations. This experience must include ONE of the following:

   • Leading products with multiple dependencies requiring joint releases to achieve measurable and demonstrated business objectives

   • Leading intrapreneurial efforts with measurable and demonstrated impact to the organization

3. Experience leading the development, delivery or integration of highly complex digital products or services. This experience must include ONE of the following:

   • Developing new products or services for startups

   • Developing products or services for legacy migrations

   • Developing products or services for large integrations

   • Developing products, services or features for large consumer products

4. Experience applying leading industry practices in the design, development and delivery of digital products or services. This experience must include ONE of the following:

   • Developing digital products or services using experimentation based frameworks

   • Developing digital products or services using iterative development methodologies

   • Developing digital products or services using user-centered design and planning tools

   • Developing digital products or services using continuous delivery methodologies

Evaluation for this position

• Communication: Ability to communicate effectively with a variety of audiences to establish a shared vision and understanding of the project’s objectives and goals

• Product Experience: Ability to deliver the right digital product using user-centered and agile-based methodologies

• Leadership: Ability to effectively lead a cross-functional team to meet digital project/product objectives

• Innovation: Ability to apply innovative tools and technologies and to help partners make strategic & tactical decisions toward innovation

• 18F Core Values Alignment: The ability to work with integrity, transparency and resiliency in civic minded or high impact environment

Today was very frustrating

There was a winter storm warning.

I tried to leave the house around 10 am

I should have arrived before 11 am at the application support center, however, due to weather I got there a bit after 11.

On arrival, the door declared no cameras, no cellphones, no recording devices, no food, no drinks, etc.

I entered, and really had to pee, so I looked around for the bathrooms.

the room was laid out with a guard station by the front door, with lots of clipboards.

There was one waiting area behind the clipboards

there was a long line at the receptionist

there was another waiting area in front of the receptionist.

the bathrooms were past the area in front of the receptionist.

I headed to the bathrooms and was stopped and questioned by the guard, which was weird, i explained i needed to pee and then was let go to the bathrooms.

I then returned to the clipboard area, the guard was now there.
She asked when my appointment was. I said I was a walk in.
She said they do not do walk-ins.
I explained that per the website (pulled out printout) between 11-2 they did.
She grunted and I asked if I should fill out a clipboard paper and she said no.
she said she would let me know when to go to the receptionist.

I was still unsure of what was going on, no one was very helpful, nothing was well labeled.

After watching people get yelled at for about 2 hours, I think I figured it out. Would it not have been better to have signage explaining this and/or a person explaining this?

So you arrive, you must remove any head coverings or face coverings.
you then must take a clipboard and fill out the paper
then return the clipboard and keep the paper
if you make a mistake do NOT take another paper, cross off and continue. she got very upset about people taking more than one paper.
depending on your appointment time that group would be called to reception, then and only then do you line up at the reception desk. For example, the line when I arrived a little after 11 was the 11 am appointments.
After being processed by the receptionist you waited in the other waiting area to the front of reception, there was a number display there so I assume when your number came up you went somewhere (I didn't see far enough to see if there were rooms or cubbies or whatever.

By my rough count, there were over a hundred chairs in each waiting area and they were all full.

After waiting 2 hours they made an announcement, because of the weather all government offices were shutting down. Appointments would be rescheduled.

At this time I got to read small print which was taped to the top of the clipboard stack (which I was denied and told to sit down) which seemed to imply all UK and US visa applicants goto reception. I will have to point this out/lobby for it next time I try. Hopefully tomorrow.

What should have been a slightly less than hour drive home became around 2 hours. There were many accidents, plus poor visibility.

So yesterday I got a noticed I had a message in my account
I was very excited!
The current estimate last time I logged in was July.

I logged in http://www.cic.gc.ca/english/e-services/mycic.asp

I had a message "Biometrics Collection Letter"

Which had me download a PDF

START PDF

This letter refers to your application to Immigration, Refugees and Citizenship Canada (IRCC) for one of the following documents to come to or remain in Canada:
• temporary resident permit; • work permit; • study permit; • temporary resident visa; • visitor record; • permanent resident application; or • permanent resident card renewal.

Under the Immigration and Refugee Protection Act (IRPA) and its Regulations, you are required to have your fingerprints scanned and your photograph taken (your biometrics) at a biometric collection service point to help Visa Officers determine if you may enter or stay in Canada. Most applicants will need to give their biometrics at a biometric collection service point abroad before they travel to Canada.

Only those who are eligible to apply for a or a at a designated port of entry can give their biometrics upon arrival in Canada.

Note: If you received this letter you must give your biometrics before coming to Canada and are not eligible to have your fingerprints and photograph taken at a Canadian port of entry. If you are already in Canada, you will have to leave the country to provide your biometrics.

Why is IRCC collecting my fingerprints and photograph?

Your biometric information will be used under the Immigration and Refugee Protection Act (IRPA) and its Regulations to determine if you may enter or stay in Canada. Your fingerprints may also be shared with law enforcement agencies in Canada and may be used for the enforcement of any Canadian or provincial law. For more information about why the Government of Canada collects biometrics, how it uses your information and how it protects your privacy, please visit: and

https://www.canada.ca/en/immigration-refugees-citizenship/campaigns/biometrics/ protecting-appplicants-privacy.html.
https://www.canada.ca/en/immigration-refugees-citizenship/campaigns/biometrics/facts.html

What you need to do next:
You need to take this letter with you and go in person to any biometric collection service point to have your fingerprints and photograph taken.
• If you are outside Canada or the United States, you may go to any Visa Application Centre (VAC) most convenient to you.
• If you are already legally in the United States, you may go to a United States Citizenship and Immigration Services (USCIS), Application Support Center (ASC) or a Visa Application Centre (VAC) located in the United States or its territories.
For more information on where to give your biometrics, please visit:

What you need to bring with you:
When you present yourself at the biometric collection service point of your choice, you must bring the following: • a copy of this letter, and • the passport or travel document that you referenced in your application.
Note: This letter is also your proof that: • you have paid the biometric fee; or • you have claimed an exemption from the biometric fee under section 315.1 of the Immigration and Refugee Protection Regulations (IRPR). If, after reviewing your request, it is determined that you do not qualify for an exemption and are required to pay the biometric fee, you will be contacted by IRCC and your fee payment options will be explained to you.

Important Information

You have 30 days from the date of this letter to present yourself at a biometric collection service point to give your biometrics:

You must visit a biometric collection service point to have your fingerprints scanned and photograph taken on or before . If you do not comply, your application may be refused. If your application is refused, you will have to submit a new application and pay the applicable fees.

If you cannot provide your biometric information (photograph and/or fingerprints) or if you need more than the 30 days, please contact Immigration, Refugees and Citizenship Canada at and be prepared to provide a detailed explanation.

If you have injuries or medical conditions:

Some injuries and medical conditions may affect your ability to provide your ten (10) fingerprints or photograph. If you have a temporary injury or condition on your face and/or hands, you should wait until the injury heals or condition improves before you give your biometrics. If you have a permanent injury or medical condition on your face and/or hands, your photograph will still be taken and you will be asked to provide as many fingerprints as possible.

If you hold multiple citizenship:

You must use the same travel document throughout the application process, including when you go to a biometric collection service point to give your biometrics. You must also use the same travel document upon arrival in Canada.

END PDF

I followed the link in the PDF to
http://www.cic.gc.ca/english/information/where-to-give-biometrics.asp

clicking on the name of the location takes me to
https://egov.uscis.gov/office-locator/#/
clicked ASC
https://egov.uscis.gov/office-locator/#/asc
which entering my zip brings me right back to
https://egov.uscis.gov/office-locator/#/ascprofile/PA/Philadelphia/XPA

The web page said "The only after filing service that is provided by an ASC is fingerprinting. Fingerprinting services are by appointment only and are related to an application for an immigration benefit.

You will be notified about an ASC appointment by mail. You should follow the instructions on the appointment notice to reschedule the appointment."

Which concerned me, i was expecting walk-in per the PDF

I called USCIS and used the automated system

It lead me to
https://www.uscis.gov/tools
so I made an infopass appointment using
https://my.uscis.gov/en/appointment/v2

It only looks 14 days in advance, and i only have 30, and Philly was booked, so made one in Pittsburgh (5 hour drive) on the day i was supposed to be flying back to Canada

I called USCIS to confirm i made the correct type of appointment, i talked to a person who had to put me on hold and ask a lot of questions

They directed me to
http://www.cic.gc.ca/english/visit/index.asp
I indicated that was not helpful
They sent me to
http://www.cic.gc.ca/english/visit/biometrics.asp

I said that was not helpful and could he confirm if philly did walk ins - he said he could not and did not think that they did

I asked if i could make an ASC appointment, he indicated no, applicants can NOT make an ASC appointment you are given an appointment time as your case is processed.

i repeated i was a citizen and it was Canada that wanted it.

He could not help me. we ended the call.

Information
http://www.cic.gc.ca/english/visit/biometrics.asp
all this does is

START WEBSITE

Find out if you need to give biometrics

Select one: (required) I didn’t give biometrics in the past

Select the country code that matches the one on your passport. (required) USA

Answer: You don’t need to give your biometrics.

As a U.S. citizen or national, you don’t need to give your biometrics.

Exception: If you apply for permanent residence in Canada, you need to give your biometrics.

This tool provides general guidance. Depending on your situation, you may need to give biometrics. If so, we’ll send you a letter to confirm that you need to.

END WEBSITE

OK so that was everything I already knew

I Googled
https://www.canada.ca/en/immigration-refugees-citizenship/campaigns/biometrics.html
Which took me to
https://www.canada.ca/en/immigration-refugees-citizenship/campaigns/biometrics/how-to-give-biometrics.html
which took me to
http://www.cic.gc.ca/english/information/where-to-give-biometrics.asp

AND - REPEAT SAME AS ABOVE

clicking on the name of the location takes me to
https://egov.uscis.gov/office-locator/#/
clicked ASC
https://egov.uscis.gov/office-locator/#/asc
which entering my zip brings me right back to
https://egov.uscis.gov/office-locator/#/ascprofile/PA/Philadelphia/XPA

so... i emailed immigration (Canada) and asked for help

And i emailed my lawyer, they responded they have been experiencing this issue now with multiple people and don't have an answer yet but suggested i try to do a walk in. they are seeking an extension

my app is complete, you have 60 days to do it, waiting on my lawyers sign off (they said this coming week) to submit it after they review

woooo!

i'll let you know what happens next

I got my invitation to apply for permanent residency today!

So today I finally got my education assessment. what a rip-off. but it is over.

in the interim, my lawyers reviewed my file and agreed with my assessment of what was missing (nothing unknown to me was missing.

they made my online account, entered my data, had me review it, now they "cleaned it up" not sure what that means, and we were only waiting on this.

I have provided it to them, and hopefully they will now proceed / complete my application for express entry.

Saturday October 27, 2018

slept in, because up late and drinking

missed keynote but read text here: http://www.bsidesdc.org/history/geer.html

I also missed the (seeing again) Community Based Career Development or How to Get More than a T-Shirt When Participating as part of the Community

Wandered to find tea/food and failed, ended up at starbucks it was raining

I missed Finding the Right Tools and Codes for Your Career Search - will need to catch that on video
I also need to catch the video Bluetooth, Bluetooth BLE, and Tracking with Sonar

came back for

Blue Teams next tool: Social Engineering (Psychology and Sociology at Work) - which was really good
he posted the last page of his deck with resources here: https://www.cafaro.net/2018/10/28/blue-teams-next-tool-social-engineering-psychology-and-sociology-at-work-references/

How online dating made me better at threat modeling was OK

snackies http://maison-kayser-usa.com/

then cookies and milk party with space team and unstable unicorns

then umaya - but due to conflict with a surprise party ended up just sparkles and blu and I - tasty ramen and such though

then iron horse for a drink

then back to crash

Canada express entry, perminant resident

If I had to do this over, i would do this in the below order:

1.
I had a passport if you don't that might take the longest

2.
I had my birth certificate and social security card that might also take a while

3.
I had my resume already together - put that together

4.
I would have started with my education assessment (CES, ECA) ASAP as that seems to take the longest.
To complete it you need your education transcripts and your actual diplomas.

5.
Put settlement funds away ASAP and don't touch, you'll need 6 months of statements, and a letter from the bank, some banks this was easy (Marcus, capital one 360), other it was hard (TD Bank) (15k+)

6.
schedule your Health Exam, only certain people do the assessments, so get it scheduled, and set aside the cash, mine didn't do weekends so i also had to arrange time off work
($500 +)
I had to ring to health exam - 3 passport photo which i got at CVS, they only used two but asked for three (sigh), i bought two sets from CVS but if they give you the proof that might work as your third?
she seemed very fixed on TB, and i needed a chest xray (standard), basically bring your medical history cliff notes (medicine, surgical history) and if you have recurring / permanent issues the information for your specialist (they might need a letter - basically indicating it's under control and you are going to be able to work and navigate and survive in a new place without assistance)

7.
schedule your English Language Test CELPIP-General Test ($300) they are on limited dates in limited locations
i did not study, but i did watch the you tube videos
https://www.youtube.com/channel/UCsSYTLCLK0K2kq6hFSX476A
i think that was useful as i came in and knew what to expect

8.
Police Clearance - didn't take long, but use edge/IE, sign up for FBI background check, then schedule fingerprints (that was cheap and relatively fast but i live in a metro area)
to do: request an Identity History Summary from the FBI online
https://www.canada.ca/en/immigration-refugees-citizenship/services/application/medical-police/police-certificates/how/united-states.html
used: IdentoGo for fingerprints

9.
Digital Photo that meets requirements - i ended up scanning (high res) my passport photo - so do that before medical exam

10.
Work Experience 10 years certified letter - some companies did it fast, some PITA
if you need to get supporting evidence have w2's paystubs and job description - can you find your offer letter? a job posting you applied to? your annual review?

11.
no need for anything else because i am single

I finally scanned a digital picture, waiting to hear if it's good enough

So lawyers did audit

missing TD bank letter (next week follow up with bank)

missing CELPIP paper score (next week call and follow up)

Missing U of T educational assessment (a few moe weeks expected...)