DevSecOps, Cloud, and Platform Engineer applying systems and security engineering to Automation, Delivery, and Observability. I design, build, and operate across on-premises and cloud environment infrastructure. Projects are secured, version-controlled, pipelined through GitLab CI/CD, and shipped publicly on GitHub. Available for defined-scope infrastructure work — full-time or contract.
Domains & Methodologies: Infrastructure as Code (IaC), Continuous Integration and Continuous Delivery (CI/CD), DevOps, GitOps, Configuration Management, Distributed Systems, Storage, Container Orchestration, Linux, Networking, On-premises Infrastructure, Security Hardening, High Availability (HA), Fault Tolerance, Service Discovery, Load Balancing, Horizontal Scaling, SLO/SLI Definition, Reliability Engineering, Secrets Management
Automation: GitLab CI, GitHub Actions, Git, Terraform, Bash, Go, AWS Secrets Manager, Trivy, IAM/Least-Privilege Policy Design, Container/Image Scanning, HashiCorp Vault, SOPS/age
Delivery: Docker, Kubernetes, Nomad, AWS (IAM, EC2, S3, ECS, ECR, ALB/ELB, Fargate), Consul Connect mutual-TLS service mesh, Tailscale
Observability: AWS CloudWatch, Grafana LGTM stack (Loki, Grafana, Tempo, Mimir), Node exporter, Alertmanager, Prometheus, OpenTelemetry Collector, Grafana Alloy
- Infrastructure
- Storage Architecture & Data Management
- Network Segmentation & Traffic Control
- High Availability & Fault Tolerance
- Infrastructure Architecture & Networking
- Linux Systems Administration
- Platform & orchestration
- Containerization & Orchestration
- Configuration Management
- Infrastructure as Code
- Delivery & automation
- CI/CD Pipeline Design & Automation
- GitOps & Version Control Workflows
- Developer Tooling & Process Engineering
- Operations
- Platform Reliability Engineering
- Observability & Monitoring
- Capacity Planning & Resource Optimization
Description:
A Go webhook relay app through multi-stage GitLab CI/CD with Grafana's Loki-Grafana-Tempo-Mimir (LGTM) observability stack, Consul Connect mutual-TLS service mesh, and AWS deployment. Instrumented end-to-end with OpenTelemetry for trace, metric, and log correlation.
Technologies:
Go · GitLab CI/CD · Terraform · AWS ECS Fargate · Nomad · OTel
Description:
Infrastructure-as-code and documentation for an on-premises GitLab CI/CD pipeline, Grafana's Loki-Grafana-Tempo-Mimir (LGTM) observability stack, Nomad orchestration, and Tailscale networking on Linux.
Technologies:
GitLab CE · Docker Compose · LGTM · Nomad · Consul · Tailscale
┌─────────────────────────────────────────────────────────────────────┐
│ cicd-observability-stack │
│ │
│ ┌─────────────┐ ┌──────────────────┐ ┌─────────────────┐ │
│ │ GitLab CE │───▶│ GitLab Runner │───▶│ Loki · Grafana │ │
│ │ Registry │ │ Docker executor │ │ Tempo · Mimir │ │
│ └─────────────┘ └──────────────────┘ │ Alloy · OTel │ │
│ └────────┬────────┘ │
└────────────────────────────────────────────────────────│────────────┘
│ observes
┌────────────────────────────────────────────────────────│────────────┐
│ go-cicd-observability │ │
│ ▼ │
│ ┌─────────────┐ ┌──────────────────┐ ┌─────────────────┐ │
│ │ Go webhook │───▶│ GitLab CI/CD │───▶│ Nomad · Consul │ │
│ │ relay · OTel│ │ 6 stages │ ╔══│ mTLS · homelab │ │
│ └─────────────┘ └──────────────────┘ ║ └─────────────────┘ │
│ ║ │
│ ╚══▶┌─────────────────┐ │
│ │ AWS ECS Fargate │ │
│ │ Terraform · ALB │ │
│ └─────────────────┘ │
└─────────────────────────────────────────────────────────────────────┘