Specializing in highly available, secure, and scalable solutions for cloud infrastructure. Leading teams in DevSecOps practices, infrastructure automation, and observability.
Explore some of my recent work in DevSecOps, Cloud Infrastructure, and Automation
Built and led high-performing DevOps teams, driving modularization and standardization of infrastructure and CI/CD pipelines
Co-engineered Vault integrations, OpenTelemetry stacks, and automated cloud infrastructure across GCP, AWS, and Azure
Designed highly available, secure solutions using Kubernetes, Vault, Terraform, and Cloudflare Zero Trust
Implemented SPIRE/SPIFFE for workload identity, SSO integrations, and advanced security automation
Nov 7, 2026
Porting a Huawei P9 lite home server from its vendor 4.4 kernel to mainline Linux 7.3.1 with postmarketOS — the Wi-Fi driver port, a boot-fail mode that ate my test images, and the one Kconfig default that silently killed every boot
Oct 1, 2026
Turn an AI review of Atlantis plans into a required GitHub check: explicit pass/fail policy, safe outputs, and the safeguards that make a merge gate trustworthy.
Jul 10, 2026
A CI-native pattern for self-service Terraform: shared module, per-input workspace, ephemeral variables — no .tf files, no commits, no GitOps overhead