Cloud Infrastructure & DevOps Engineer
I design and operate production-grade cloud infrastructure, CI/CD pipelines, and distributed systems. Infrastructure as Code, Kubernetes, observability, and security-by-default are my building blocks.
Production-grade infrastructure platforms, security automation, and distributed systems.
Flagship fintech microservices platform on AKS with Istio mTLS, ArgoCD GitOps, Prometheus/Grafana/Loki observability stack, and Helm-based deployments. 4 services with blue-green and canary rollout strategies.
Production-grade multi-environment AWS infrastructure: VPC, EC2 ASG, ALB, RDS with Terraform modules. Ansible hardening (CIS baseline), SSM Session Manager (zero SSH), OIDC CI/CD pipeline.
Event-driven AWS security automation platform. 7 Lambda functions detecting & auto-remediating misconfigurations via CloudTrail → EventBridge → Lambda → DynamoDB pipeline. 70 tests, 85% coverage.
Production IAM service with FastAPI — OAuth2 + PKCE, TOTP MFA, refresh token rotation, RBAC, session management, audit logging, brute force protection. Deployed on Render.
Async job queue and webhook delivery engine built with Node.js/TypeScript. BullMQ, Socket.io real-time updates, HMAC-signed webhooks, circuit breaker, sliding window rate limiting.
Full LGTM observability stack (Loki, Grafana, Tempo, Prometheus) on Kubernetes. Custom Python Prometheus exporter, dashboards-as-code, Alertmanager routing with severity-based receivers.
GitLab CI + ArgoCD + Argo Rollouts with Cosign image signing, SOPS secret encryption, canary deployments with Prometheus analysis. Demonstrates alternative CI and supply chain security.
Real-time Kafka event pipeline with FastAPI producers, Avro Schema Registry, dead letter queues, consumer lag monitoring, and MongoDB/PostgreSQL sinks.
AWS ECS Fargate platform with zero-downtime blue-green deployments via ALB weighted target groups. Terraform-managed, OIDC-authenticated CI/CD, full evidence capture.
Python CLI simulating AWS VPC networking from first principles — Linux network namespaces, bridges, veth pairs, iptables. Zero cloud account required.
CLI scanner detecting AWS cost waste (idle EC2, unattached EBS) and CIS-aligned security misconfigurations (public S3, permissive SGs). JSON + Markdown output with severity scoring.
5 services in 4 languages (Go, Node.js, Java, Python, Vue.js) with Terraform Cloud, Ansible, drift detection, and Redis-backed async log processing. HNG13 DevOps internship project.
The technologies I reach for to build reliable infrastructure.
Open to remote Cloud Infrastructure, DevOps, and Platform Engineering roles.