Principal Engineer – Cloud Infrastructure, DevOps & Security
Building resilient, secure platforms and using AI to move engineering 10× faster.
I'm a Principal Engineer with 25+ years of experience across cloud, infrastructure, automation, and security. I enjoy big-picture architecture just as much as hands-on implementation, and I put a lot of care into building systems that are resilient, observable, and maintainable.
- Cloud & platforms: Designing and operating multi-cloud and hybrid environments with a strong focus on reliability and cost-awareness.
- Automation & DevOps: Turning tribal knowledge into code—CI/CD, infrastructure as code, and robust release pipelines.
- Security & governance: Baking security into platforms and workflows instead of bolting it on at the end.
- AI-augmented engineering: Integrating LLMs and agentic systems into day-to-day workflows in IP-safe, security-conscious ways.
- Platform & SRE practices: Standardizing golden paths, improving observability, and reducing toil for engineering teams.
- Secure-by-default infrastructure: Using automation to enforce policy, detect drift, and keep systems hardened at scale.
I'm particularly excited about the rapidly evolving field of AI, LLMs, and agentic systems. I've integrated AI into my workflows to dramatically reduce completion times while respecting security boundaries and IP constraints, using it to architect and build everything from small utilities to complex multi-component solutions.
Important
This intersection of AI with traditional infrastructure is a fascinating frontier for automation, analysis, and decision support—and a major leverage point for high-performing engineering teams.
I contribute to open source when I can, especially where reliability, automation, or user experience can be improved.
| Project | Contribution | Language |
|---|---|---|
| GpgFrontend | Added Linux dark mode detection for Fusion theme in Qt6, enabling the application to automatically adapt to system theme changes on Linux desktop environments. | C++ |
| Pangolin | Implemented sticky sessions functionality for backend resources, allowing session persistence when multiple targets exist—essential for stateful applications like VNC console sessions to Proxmox. | TypeScript |
- Languages & development: Bash, Python, Go
- DevOps & automation: Terraform, Ansible, Puppet, GitHub Actions, ArgoCD
- Containers & orchestration: Docker, Kubernetes, Firecracker, AWS Fargate
- Observability & SRE: Prometheus, VictoriaMetrics, Grafana, Loki, Datadog, New Relic, BetterStack, Opsgenie
- Data & storage: PostgreSQL, MongoDB, DynamoDB
- Security & DevSecOps: Snyk, SonarCloud, OWASP ZAP, Veracode, GitGuardian, Nessus, Codacy
- Platforms & virtualization: Linux, Windows Server, Proxmox, VMware
- Cloud & edge: AWS, Cloudflare, Azure, GCP, Vultr, Linode, Fly.io, Hetzner, OVH
Full skill matrix (realistic 1–5 ★ scale – click to expand)
I use a realistic proficiency scale where very few people in the world would truly merit a 5‑star rating in any technology.
[!TIP]
A 2‑star rating represents average proficiency, 3‑stars indicates solid professional competence, 4‑stars represents significant expertise, and 5‑stars is reserved for world‑class mastery.
Building tools and automation frameworks is my passion. I leverage my programming skills to create efficient solutions.
| Technology | Proficiency | Experience |
|---|---|---|
| Bash | ★★★ | Extensive shell scripting for automation and system management |
| Python | ★★ | Building automation tools, APIs, and data processing pipelines |
| Go | ★ | Developing microservices and CLI tools for cloud environments |
I believe in infrastructure as code and automation to enable reliable, repeatable deployments.
| Technology | Proficiency | Experience |
|---|---|---|
| Terraform | ★★★ | Managing cloud infrastructure across multiple providers |
| Ansible | ★★ | Configuration management and application deployment automation |
| Puppet | ★★★★ | Large-scale system configuration and policy enforcement |
| GitHub Actions | ★★★ | CI/CD pipeline automation and software delivery |
Ensuring systems are reliable, scalable, and maintainable is core to my approach.
| Technology | Proficiency | Experience |
|---|---|---|
| PromQL | ★★★ | Creating advanced monitoring queries and alerting rules |
| Groovy | ★★★ | Jenkins pipeline automation and scripting |
| Grafana | ★★★ | Building comprehensive monitoring dashboards and visualizations |
| Prometheus | ★★★ | Implementing metrics collection and alerting systems |
| Victoria Metrics | ★★★ | High-performance time series database management |
| Loki | ★★★ | Log aggregation and analysis at scale |
| InfluxDB | ★★ | Time-series data storage and querying |
| Datadog | ★★★ | Cloud-scale monitoring and observability platform |
| New Relic | ★★★ | Application performance monitoring and diagnostics |
| Betterstack | ★★★ | Uptime monitoring and incident management |
| Opsgenie | ★★ | Alert management and on-call scheduling |
I work with various database solutions to ensure data persistence, performance, and reliability.
| Technology | Proficiency | Experience |
|---|---|---|
| PostgreSQL | ★★★ | High-performance relational database management |
| MongoDB | ★★★ | Document-based NoSQL data storage and retrieval |
| DynamoDB | ★★★ | Serverless NoSQL database operations on AWS |
Containerization forms the foundation of my modern application deployment strategy.
| Technology | Proficiency | Experience |
|---|---|---|
| Docker | ★★★★ | Building optimized container images and deployment workflows |
| Firecracker | ★★★ | Lightweight virtualization for serverless containers |
| Kubernetes | ★★★ | Large-scale container orchestration and management |
| ArgoCD | ★★★ | GitOps-based continuous delivery for Kubernetes |
| AWS Fargate | ★★★ | Serverless container execution without managing infrastructure |
Security is integrated into every stage of my development and operations workflow.
| Technology | Proficiency | Experience |
|---|---|---|
| Snyk | ★★★ | Dependency scanning and vulnerability management |
| Codacy | ★★★ | Automated code reviews and static analysis |
| SonarCloud | ★★★ | Continuous inspection of code quality and security |
| OWASP ZAP | ★★★ | Dynamic application security testing |
| Veracode | ★★★ | Static analysis security testing for applications |
| GitGuardian | ★★★ | Secret detection and remediation in code repositories |
| Nessus | ★★★ | Vulnerability scanning and security auditing |
I work across various operating systems and virtualization platforms to build robust infrastructure.
| Technology | Proficiency | Experience |
|---|---|---|
| Linux | ★★★★ | Deep expertise in RedHat and Ubuntu-based distributions |
| Windows Server | ★★★★ | Enterprise Windows infrastructure management |
| Proxmox | ★★★★ | Open-source virtualization platform administration |
| VMware | ★★★★ | Enterprise virtualization infrastructure design and management |
Multi-cloud expertise allows me to design and implement solutions across various platforms.
| Technology | Proficiency | Experience |
|---|---|---|
| AWS | ★★★★ | Comprehensive Amazon Web Services ecosystem expertise |
| Cloudflare | ★★★★ | Edge network services for content delivery, DDoS protection, and zero-trust security |
| Azure | ★★ | Microsoft Azure cloud platform for enterprise solutions |
| GCP | ★★ | Google Cloud Platform services and infrastructure |
| Vultr | ★★★★ | High-performance cloud computing deployment |
| Linode | ★★★ | Linux server infrastructure in the cloud |
| Fly.io | ★★★ | Deploying applications globally close to users |
| Hetzner | ★★★ | Dedicated server and cloud infrastructure management |
| OVH | ★★★ | European-based cloud and dedicated hosting solutions |
I maintain industry-recognized certifications to validate my expertise in cloud architecture and security.
| Certification | Issuing Organization | Description |
|---|---|---|
| Amazon Web Services | AWS Certified Solutions Architect - Associate Validates expertise in designing distributed systems on AWS. Demonstrates knowledge of AWS services, security best practices, and cost optimization. |
|
| (ISC)² | Certified Information Systems Security Professional (CISSP) Demonstrates expertise across eight domains of information security, including security operations, asset security, and security architecture. |
I'm always open to interesting conversations, hard problems, and collaboration opportunities.
⭐️ From x86txt