Senior DevSecOps/SRE | AWS-first | Terraform/CDK | Containers & Serverless | Observability & Incident Response
- 🔒 Cloud & Security: IAM least privilege, mTLS, PrivateLink, WAF, Security Hub, secrets mgmt
- ☁️ Platforms: AWS (ECS/EKS/Lambda/API Gateway/CloudFront/S3), VPC endpoints, NAT optimization
- 🏗 IaC: Terraform, CDK, CloudFormation, Serverless Framework/Compose
- 🚀 CI/CD: GitHub Actions, GitLab, Jenkins, GitOps, distroless containers, image scanning (Trivy, Clair, SonarQube)
- 📈 Observability: CloudWatch (logs/metrics/alarms/X-Ray), ADOT/OTEL, Prometheus, Grafana, Loki, New Relic
- ⚡️ Languages: Python, TypeScript/Node.js, Bash
- 📡 Data/Events: EventBridge, SQS/SNS, Kinesis, MSK/Kafka
- 🔧 SRE: Runbooks, RCAs, capacity planning, performance tuning
- CloudFront OAC + API Gateway — Multi-tenant delivery with signed URLs/cookies, Bedrock/Transcribe/Comprehend/Translate, full CloudWatch observability.
- Private Facial Age Verification — NLB→ALB mTLS, ACM PCA, PrivateLink, Lambda layers for JWT/JWS, OTEL + CloudWatch, encrypted audit trails.
- Weather → MSK → EKS — Real-time ingestion with Lambda/EventBridge, Kafka fan-out, EKS microservices, Prometheus + OTEL tracing.
- Cost Optimization Framework — Python/boto3 cleanup for EBS/AMIs/RDS snapshots, log retention enforcement, scheduled EC2 shutdowns.
- Serverless Migration (50% faster) — Rebuilt Bash+CloudFormation into Serverless Framework + Compose, parallelized deploys.
- Hardening AWS edges (network/IAM) with clean IaC patterns
- Low-noise observability (SLOs, alarms, traces) and incident runbooks
- Secure serverless/container delivery with fast CI/CD and guardrails