End-to-end DevOps and cloud architecture — Kubernetes platforms, infrastructure-as-code foundations, secure CI/CD pipelines, and observability that keeps production honest.
I'm a Senior Cloud & DevOps Engineer with seven-plus years building production cloud infrastructure for healthcare and fintech — domains where security, audit, and uptime are non-negotiable.
My focus is on the regulated end of cloud platforms: multi-environment Kubernetes, infrastructure-as-code with Terraform and Pulumi, zero-trust access via Teleport, and CI/CD pipelines with security gates that actually block bad artifacts from reaching production.
I'm GCP Professional Cloud Architect certified with deep AWS literacy. I've shipped HIPAA-compliant clinical platforms and PCI-DSS aligned fintech systems serving over a million monthly active users. I work fully remote, hold consistent overlap with US-ET, and have done so for years across multiple US clients.
Each represents a different constraint set: regulatory audit, transaction-grade reliability, and data-intensive performance. Click through any of them in conversation if you'd like a deeper walkthrough.
A correctional health management system facilitating clinical workflows, pharmacy tracking, and patient records in high-security institutional environments. Designed and operated the cloud infrastructure backbone end-to-end.
A digital insurance marketplace and underwriting engine automating multi-family property insurance through data-driven risk assessment and instant quote generation. Led a full infrastructure security redesign.
An interactive real-estate analytics platform providing housing market intelligence, neighborhood demographics, and investment forecasting tools for property investors.
Cloud-agnostic where it matters, cloud-specific where it pays off. The list below reflects production work, not dabbling.
I refine my own thinking on production patterns through technical writing — both internal docs and external pieces commissioned for engineering audiences. Topics where I have depth:
Right-sizing strategies, request and limit calibration, spot and preemptible patterns, and how Cluster Autoscaler vs Karpenter changes the cost curve. Drawn from production tuning across regulated workloads.
Building observability that surfaces signal not noise — alerting on symptoms not causes, error budgets that drive release decisions, and the difference between dashboards that look good and dashboards engineers act on.
Embedding SAST gates, container vulnerability scanning, signed images, and policy-as-code into CI/CD without making delivery painful. Trade-offs between blocking and advisory gates, and why advisory gates rarely change behavior.
When each wins. The trade-off between broad ecosystem familiarity (Terraform) and first-class abstractions plus policy-as-code (Pulumi) — and how to decide based on team shape rather than cloud preference.
I'm currently available for senior remote roles — full-time, contract, or contract-to-hire. Healthcare, fintech, and platform-engineering work especially welcome.