Career

I provide development teams with Azure landing zones, and I deploy and run the cloud infrastructure that sits on them. Day to day, that also means:

• GitHub managed entirely with Terraform: users, teams and permissions are described as code.
• Security: all code goes through SonarCloud, and Dependabot is in place.
• GCP: taking part in securing the data platform, and in following it up.
• Observability: monitoring with Datadog, and a minimal proxy written in Go that forwards GitHub events to Datadog.
• FinOps: tracking each team’s cloud costs and helping them bring those costs down.
• Architecture and incidents: architecture reviews, support for migrations to Azure or GCP, and incident response.

Coming next: rolling out JFrog Artifactory.

I built and maintained infrastructure automation on AWS with Terraform and Packer, and ran the AKS and EKS clusters the applications depended on. I led the rollout of HashiCorp Vault to strengthen security, wrote GitLab CI/CD pipelines that automate testing and deployment, and created several Ansible roles for configuration management. I also wrote internal tools in Go for the development teams.

I built internal tools, mostly in Go, to help teams ship faster. I worked across the HashiCorp stack (Terraform, Vault, Packer, Consul, Nomad and Sentinel) and ran private clouds on vSphere. I also helped teams adopt DevOps tooling.