Cloud DevOps Engineer

Deployment and maintenance of secure cloud environments on AWS.

• Deployed production workloads on AWS using GitLab CI/CD pipelines.
• Designed and deployed an automated GitLab token rotation service using Lambda, EventBridge, Secrets Manager, and SNS, eliminating manual PAT renewals.
• Maintained and versioned infrastructure templates using AWS CloudFormation.
• Executed EKS and FluxCD version upgrades on production clusters via CloudFormation templates.
• Investigated and identified root causes of performance degradations using CloudWatch, pinpointing bottlenecks at the database and application layers.
• Managed AWS infrastructures across IAM, EC2, S3, Elastic Beanstalk, Secrets Manager, CloudWatch, VPC, ECR, EKS, Cost Explorer, and RDS services.
• Automated Spring Boot application deployments via Rundeck.
• Maintained and applied GitLab and Gitaly infrastructure upgrades.
• Reviewed container image vulnerability reports and identified upgrade paths for flagged dependencies.
• Analyzed AWS budget forecast alerts for FinOps, distinguishing true cost drivers from baseline structural growth.
• Technical environment: AWS, GitLab CI/CD, Lambda, EventBridge, Secrets Manager, SNS, CloudFormation, EKS, FluxCD, CloudWatch, IAM, EC2, S3, Elastic Beanstalk, VPC, ECR, RDS, Cost Explorer, Spring Boot, Rundeck, Gitaly.

Optimization of automation processes, infrastructure governance, and security as a DevOps Engineer.

• Handled the Terraform drift report review process, collaborating with security teams to analyze unmanaged Terraform resources and bring them under IaC governance.
• Led the development of a Python-coded offboarding automation tool, reducing manual intervention by 80% and improving efficiency for HR and IT teams.
• Designed an end-to-end architecture integrating Workday, Jira, Firstbase, Cloudflare R2, and Google Cloud Platform (GCP) using REST APIs.
• Set up monitoring with Prometheus and Grafana for the offboarding automation tool.
• Provisioned and secured cloud infrastructure using Terraform on GCP.
• Implemented scheduled executions for the Python Flask application on Google Cloud Run using Cloud Scheduler.
• Enhanced security posture on GCP by implementing OAuth 2.0 authentication, VPC-only access controls, and optimized logging practices.
• Configured IAM roles and permissions for secure access control.
• Managed secrets with Vault and Google Secret Manager to protect sensitive configuration data.
• Managed version control using Git and GitLab.
• Wrote clean, maintainable code while working closely with QA and security teams.
• Managed Jira tickets, backlogs, and sprint tasks to ensure timely delivery.
• Collaborated with multidisciplinary teams and stakeholders, ensuring handover to HR by automating the generation, storage, and processing of Workday reports in Cloudflare R2.
• Worked within an Agile team, participating in daily stand-ups and sprint planning.
• Technical environment: Terraform, Python, Python Flask, Google Cloud Platform (GCP), Cloud Run, Cloud Scheduler, Workday, Jira, Firstbase, Cloudflare R2, Prometheus, Grafana, OAuth 2.0, Vault, Google Secret Manager, Git, GitLab.

Participation in the development and configuration of deployment workflows and web servers for front-end and back-end applications.

• Developed a CI/CD pipeline using GitHub Actions for automated deployment workflows.
• Configured self-hosted GitHub Actions runners and implemented the SSL protocol using Certbot.
• Configured the Nginx web server to host a React front-end and a Node.js back-end.
• Configured a Hostinger VPS with Nginx, SSH, the Node.js runtime, and PM2.
• Technical environment: GitHub Actions, Certbot, Nginx, React, Node.js, Hostinger VPS, SSH, PM2.

Contribution to the implementation of Infrastructure as Code, Kubernetes cluster management, and code quality automation.

• Implemented Infrastructure as Code on DigitalOcean using Terraform.
• Deployed Kubernetes clusters and applications using Terraform and Helm.
• Implemented automatic cluster scaling with KEDA and performed load testing with K6.
• Configured and administered a Rancher Kubernetes cluster and automated user management with Bash scripts.
• Configured Ansible AWX for centralized automation management.
• Provisioned and configured a SonarQube code quality analysis and vulnerability scanning server with Ansible, managing playbooks via Ansible AWX.
• Maintained source code versioning using Git on GitLab and Bitbucket.
• Implemented Kubernetes monitoring with Prometheus for metric collection.
• Created technical documentation for deployments and infrastructure configurations.
• Delivered features within Agile Scrum sprints.
• Technical environment: DigitalOcean, Terraform, Kubernetes, Helm, KEDA, K6, Rancher, Bash, Ansible, Ansible AWX, SonarQube, Git, GitLab, Bitbucket, Prometheus.

Administration of cloud infrastructures, versioning, and observability of multi-tenant clusters.

• Built IaC on GCP using Terraform, GitHub Actions, and Rancher Kubernetes.
• Deployed Prometheus, Grafana, and Alertmanager using Helm Charts in a multi-tenant Rancher Kubernetes cluster.
• Configured namespace-level metric and log separation using Prometheus Federator.
• Managed Kubernetes resource configuration files using Lens IDE.
• Technical environment: GCP, Terraform, GitHub Actions, Rancher, Kubernetes, Prometheus, Grafana, Alertmanager, Helm Charts, Prometheus Federator, Lens IDE.

Participation in setting up CI/CD pipelines, application containerization, and building a private cloud infrastructure.

• Built a Jenkins CI/CD pipeline for web application deployment integrating Maven and JUnit.
• Configured SonarQube for continuous code quality analysis within the pipeline.
• Containerized the application using Docker and deployed build artifacts to Nexus.
• Orchestrated database, back-end, and front-end services using Docker Compose.
• Supervised pipeline health using Prometheus and Grafana.
• Implemented Ansible roles within Jenkins for continuous delivery.
• Built a private cloud infrastructure with OpenStack on a multi-node architecture.
• Automated the deployment of a multi-node Kubernetes cluster with Ansible, provisioning it within the OpenStack infrastructure.
• Developed a microservices web application using Spring Boot and Angular.
• Containerized both services by creating Docker images for the front-end and back-end.
• Deployed the containerized application on a Kubernetes cluster hosted on OpenStack.
• Collaborated within an Agile Scrum team to streamline development.
• Documented CI/CD workflows, containerization, and orchestration configurations.
• Technical environment: Jenkins, Maven, JUnit, SonarQube, Docker, Nexus, Docker Compose, Prometheus, Grafana, Ansible, OpenStack, Kubernetes, Spring Boot, Angular.