Francisco – Azure DevOps, Python, Microsoft Azure

A production-grade full-stack web application for creating, sharing, and collaboratively planning travel experiences. It combines social travel content, a role-based collaborative planner, real-time notifications, and geolocation features into a single platform for individual travelers and small groups, with secure authentication, media uploads, discovery and search, and cloud-based deployment for reliable production use.

• Designed, developed, and deployed a production-grade full-stack web application;
• Engineered a RESTful API with 40+ endpoints spanning authentication, travel content management, social interactions, real-time notifications, and a collaborative travel planner with role-based access control;
• Implemented OAuth and email/password authentication using JWT, bcrypt hashing, email verification, and admin role management;
• Built social features including follows, nested threaded comments, likes, and a smart discovery feed with in-memory caching, full-text search, and pagination;
• Developed a collaborative travel planner with multi-phase workflows, team invitations, interest voting, and itinerary management;
• Integrated Google Maps API for geolocation, Cloudflare R2 for object storage, and Cloudflare Workers for serverless image uploads with content moderation;
• Containerized the application with Docker and Docker Compose and deployed it behind a reverse proxy with automatic TLS/SSL;
• Automated CI/CD pipelines with GitHub Actions for testing, building, and deploying container images;
• Wrote automated tests with pytest across authentication, comments, travel CRUD, and planner modules;
• Applied security best practices including parameterized queries, CORS policies, rate limiting, constant-time secret comparison, input validation with Pydantic, and HTTPS enforcement.

Cloud infrastructure and deployment automation for a large-scale engineering environment supporting critical semiconductor manufacturing systems. The work centered on building secure, scalable Azure-based infrastructure, improving network availability and cost efficiency, and creating reliable self-service and monitoring capabilities for cloud operations.

• Designed, implemented, and managed infrastructure and deployment pipelines using YAML, PowerShell, and ARM/Bicep;
• Visualized and implemented automated solutions with a focus on security using Azure cloud-native services;
• Expanded the existing network infrastructure with special attention to cost management and availability;
• Developed monitoring solutions with Log Analytics to track performance, ensure reliability, and proactively manage risks;
• Leveraged Python, YAML, PowerShell, Azure CLI, ARM/Bicep, and C# to build robust, secure, and scalable automated solutions;
• Developed infrastructure deployment pipelines in Azure DevOps;
• Developed automated solutions to provide a self-service way of working in the cloud;
• Designed and implemented network automation logic.

A cloud-native platform for a large-scale microservices ecosystem on Azure Kubernetes Service (AKS). It provided secure, highly available, and scalable infrastructure for business-critical APIs, background processing services, and customer-facing applications, with a strong focus on platform engineering, Kubernetes automation, networking optimization, infrastructure standardization, and operational excellence.

• Designed and deployed a production-grade Azure Kubernetes Service (AKS) platform supporting dozens of containerized microservices;
• Built reusable Terraform modules for AKS clusters, networking, storage, monitoring, and security controls;
• Developed deployment automation pipelines using Azure DevOps;
• Implemented container lifecycle management using Azure Container Registry and automated image promotion workflows;
• Configured Kubernetes namespaces, RBAC policies, network policies, ingress controllers, and resource quotas;
• Optimized cluster scalability through node pools, autoscaling, workload segregation, and resource governance;
• Designed advanced networking architecture leveraging Azure Load Balancers, Application Gateway, WAF policies, Private Link, DNS Zones, and hybrid network connectivity;
• Integrated PostgreSQL, MongoDB, RabbitMQ, and ElasticSearch services into the platform architecture;
• Implemented centralized observability using Azure Monitor, Log Analytics, Application Insights, and Kubernetes metrics collection;
• Automated disaster recovery and backup strategies for stateful workloads;
• Reduced infrastructure provisioning effort by over 80% through Infrastructure as Code and platform standardization;
• Collaborated with development teams to modernize applications and improve deployment reliability.

A modernization initiative for the software delivery platform of a multinational organization, focused on moving legacy build and deployment workflows from on-premises tooling to Microsoft Azure. It redesigned the CI/CD ecosystem to standardize delivery across teams, improve release safety and velocity, strengthen security controls, and enable cloud-native operations through Infrastructure as Code, containerization, and automated pipelines.

• Assessed and migrated legacy build and deployment pipelines from traditional deployment tools to Azure DevOps.
• Designed enterprise-grade CI/CD pipelines using Azure Repos, Azure Pipelines, GitHub Actions, and Infrastructure as Code practices.
• Implemented Terraform modules to provision Azure resources consistently across development, staging, and production environments.
• Architected Azure networking topology including Virtual Networks (VNets), Subnets, Network Security Groups (NSGs), Route Tables, Private Endpoints, Private DNS Zones, and VPN connectivity.
• Migrated monolithic applications to containerized Docker workloads running on Azure Kubernetes Service (AKS).
• Implemented automated deployment strategies including Blue-Green and Rolling Deployments.
• Integrated Azure Key Vault for secrets management and secure credential rotation.
• Automated infrastructure provisioning, reducing environment setup time from days to less than one hour.
• Established monitoring and alerting using Azure Monitor, Log Analytics, Application Insights, and custom dashboards.
• Improved deployment frequency by over 400% while significantly reducing deployment failures.
• Implemented security scanning, code quality gates, and policy enforcement throughout the delivery lifecycle.
• Created reusable Terraform and pipeline templates adopted across multiple engineering teams.
• Provided architecture documentation, governance standards, and operational runbooks.