About

Core Tech:

Infrastructure:

Key Responsibilities:

• Led the migration and owned the target architecture for a large AWS platform moving from a manually operated, untagged single account to a multi-account model
• Designed account topology, networking, and IAM baselines, then implemented them with AWS CDK
• Embedded Snyk and Wiz into CI/CD for continuous vulnerability and cloud security scanning
• Applied AWS Well-Architected principles; the resulting setup passed an external security audit

Core Tech:

Key Responsibilities:

• Built a webhook service that ingests UptimeRobot events and routes personalized Slack alerts to subscribed users and project channels
• Enabled self-service subscribe/unsubscribe flows so teams own alert responsibility without shared inbox noise
• Exposed secure monitor create/delete via Azure Entra auth, removing the need for direct UptimeRobot account access
• Added an audit log of employee actions to support ISO 27001 traceability and operational accountability
• Created a you build it, you own it culture: product teams became accountable for their monitors and incident notifications

Core Tech:

Infrastructure:

Key Responsibilities:

• Designed and managed Kubernetes clusters on both cloud providers and on-premise bare-metal servers
• Built hybrid and edge infrastructure solutions
• Implemented GitOps workflows using FluxCD and Helmfile for reliable state synchronization
• Orchestrated zero-downtime deployments for production environments

Core Tech:

Key Responsibilities:

• Designed high-availability infrastructure for authentic payment gateways
• Implemented serverless architectures using AWS Lambda
• Managed migrations of applications and data layers to modern cloud environments
• Performed security optimizations of AWS platform
• Applied AWS Well-Architected Framework principles to ensure operational excellence, security, reliability, performance efficiency, and cost optimization
• Integrated SAST and CodeQL for automated security vulnerability detection in CI/CD pipelines

Core Tech:

Key Achievements:

• PaaS:Designed and deployed Platform-as-a-Service solution to streamline application hosting and standardize deployments
• Backup-as-Code:Architected a backup system using Restic and GoBackup driven by a custom Go application, treating backup configurations as code
• AI-Driven Ops:Implemented AI Agents to autonomously audit infrastructure and verify the integrity and presence of backup archives

Core Tech:

Key Achievements:

• Complex Pipelines:Developed matrix builds, automated versioning, and multi-environment release chains
• Cross-Platform Builds:Optimized CI/CD for AMD64/ARM64 and custom embedded platforms (nRF, ESP)
• Mobile DevOps:Automated iOS application builds and publishing workflows (TestFlight/Apple Developer)
• Cost Optimization:Implemented specific strategies to curb cloud and build resource usage
• Custom GitHub Actions:Developed custom GitHub reusable Actions to automate complex CI/CD processes

Core Tech:

Key Responsibilities:

• Built custom CLI tools, helper services and chat bots to automate routine DevOps tasks
• Developed "DevOps helper apps" to bridge gaps between diverse systems
• Implemented AI-powered components for infrastructure optimization

Core Tech:

Key Responsibilities:

• Standardized deployment workflows across a microservice and monolith ecosystem
• Troubleshot and resolved complex production issues including architecture conflicts, performance bottlenecks, and integration failures
• Optimized Azure resource utilization and costs
• Implemented comprehensive monitoring solutions for distributed systems

Core Tech:

Key Achievements:

• Access Re-architecture:Completely redesigned system access workflows using Teleport and Netbird, moving away from traditional VPNs to ephemeral, identity-based access
• Secure Connectivity:Implemented mesh networking for secure, peer-to-peer inter-service communication

Core Tech:

Key Achievements:

• ISO 27001 Compliance:Implemented ISMS practices, establishing secure access workflows and privileged access management
• DevSecOps:Integrated artifact signing, dependency control, and automated security scanning into CI/CD pipelines
• Infrastructure Hardening:Implemented Zero-Trust access models
• Vulnerability Management:Analyzed and patched critical vulnerabilities

Core Tech:

Activities:

• Designed load testing plans (K6) to validate infrastructure for high-traffic marketing campaigns
• Optimized database functions (MongoDB Atlas) for performance and cost efficiency