Francisco – Kubernetes, AWS, Terraform

A school communications platform that gives schools and districts one place to run their websites, publish news, send urgent alerts, and reach parents, students, and staff through a mobile app and messaging channels. It replaces a patchwork of separate website, notification, and messaging tools that left families missing important updates. The product runs as a multi-service SaaS on AWS, with containerized services on Kubernetes and supporting services for messaging, search, and storage.

• Owned the AWS and Kubernetes infrastructure behind the CMS, alerts, and messaging services end-to-end across production, integration, and QA, including per-developer QA environments, all managed as code with Terraform, Jenkins, and Helm.
• Led the migration of cluster traffic routing from Ingress NGINX to NGINX Gateway Fabric (Gateway API), handling the CRD upgrades and RBAC changes through Helm.
• Provisioned infrastructure in new AWS accounts for Kubernetes workloads as the platform moved to a multi-account setup.
• Evaluated Kubernetes, Amazon ECS, and Lambda for auxiliary services and chose ECS as the right-sized option (Kubernetes was overkill, Lambda limits did not fit), then built and deployed those services on it.
• Managed non-Kubernetes AWS resources (EC2, ALB, RDS, S3, SQS, SNS, OpenSearch) with Terraform and set up KEDA-based autoscaling for application workloads.
• Led proof-of-concept work on new delivery tooling, including a GitHub Actions migration POC, and mentored junior and mid-level cloud engineers on IaC standards and DevOps practices.

A subscription-based content platform for a startup that collects articles and news from across the web, summarizes them, and publishes curated digests to paying subscribers. It serves readers who want the key points of the news without having to monitor dozens of sources themselves. The product runs as containerized services on Azure Kubernetes Service (AKS), with deployments shipped through Azure DevOps pipelines.

• Designed and maintained the AKS cluster infrastructure behind the platform with Terraform, Azure DevOps pipelines, Docker, and Helm, owning deployments of new and existing services.
• Deployed and ran the ELK observability stack (Elasticsearch, Logstash, Kibana) inside Kubernetes, giving the team centralized logs for troubleshooting production issues.
• Ran security reviews against Microsoft Defender for Cloud recommendations and vulnerability assessments, and implemented the remediations across development and test environments.
• Automated cluster operations and deployment tasks with Bash scripting.

An infrastructure modernization program for a major US retailer whose business applications ran in on-premises data centers on proprietary Microsoft frameworks. The program moved these applications to AWS and re-platformed them onto open-source stacks (Linux, MySQL, containers). It also introduced service-level objectives for reliability and centralized secrets management across the retailer's AWS and Azure environments.

• Led migrations of legacy on-premises applications to AWS, re-platforming them from proprietary Microsoft frameworks to Linux, MySQL, and containers, redesigning hybrid connectivity, and separating tangled legacy application dependencies.
• Configured HashiCorp Vault and Consul across AWS and Azure, introducing dynamic secrets and encryption at rest for the client's applications.
• Defined, tested, and refined SLOs and SLIs for the retail client's services, giving teams measurable reliability targets.
• Led and mentored a team of DevOps engineers delivering the migration work.

A web platform from a San Francisco healthcare startup in the insurance domain that helps insurance carriers and brokers quote and manage insurance products online. It is built as a Node.js web application backed by a PostgreSQL (Aurora) database and runs on AWS. Because carriers and brokers rely on it for day-to-day quoting, the platform must remain available and recoverable in accordance with the company's disaster recovery and business continuity policies.

• Ran the AWS production environment for the Node.js application and Aurora PostgreSQL database end-to-end, using Elastic Beanstalk, EC2, ELB, Auto Scaling Groups, S3, Route 53, and Jenkins.
• Automated PostgreSQL and MySQL backups and cross-region AMI mirroring, bringing the platform in line with the company's DR/BCP policies.
• Maintained the applications deployed on Amazon EKS clusters and built automated database reporting pipelines.
• Debugged production issues together with the development team to keep the platform available and tune its performance.

An E-Business Suite environment used by a global power and water equipment business to run its contractual services and field service operations. It tracks the work of field service teams, governs changes to contractual service processes, and supports cost control for planned equipment outages. The system serves operations and management teams across the US, the Middle East, Asia, and Latin America.

• Managed cross-functional global projects that extended Oracle EBS to track Field Services team operations.
• Established the Contractual Services EBS Change Control Board, putting quarterly releases under a formal governance process.
• Directed initiatives to implement outage cost-control tools for global field operations across multiple regions.
• Served as the primary interface for executive stakeholders and upper management in the US, Middle East, Asia, and Latin America.