Skills & Expertise
15+ years of hands-on experience across the full stack — from datacenter hardware to cloud architecture to AI-driven automation.
Certifications
AWS Solutions Architect – Professional
Issued Sep 2023 · Expires Sep 2026
AWS SysOps Administrator – Associate
Issued Sep 2022 · Expires Sep 2025
Cloud & Infrastructure
EKS, EC2, Lambda, S3, ALB/NLB, WAF, ElastiCache, SSM, Inspector, IAM, CloudWatch, ASG, Route53, CloudFront, Cognito, SES
Modules, multi-account, state management, OIDC providers
Compose, multi-stage builds, registries, 40+ production containers
EKS (16+ clusters), Helm, Helmfile, Karpenter, Istio
VM management, GPU passthrough, clustering
Hybrid AD, basic compute/networking
DevOps & CI/CD
Reusable CI components, multi-env promotion chains, custom runners
Self-hosted runners, OIDC, multi-arch Docker builds, matrix strategies
Playbooks, roles, AWX/Tower
Static analysis pipelines, quality gates
Self-hosted, cron deploys, SSH-based deployment
Chart packaging, environment values, release management
Programming & Scripting
FastAPI, Flask, Celery, Playwright, asyncio, testing
Automation scripts, system administration, CI pipelines
React, Node.js, Astro, Svelte
Terraform modules, Packer templates
Windows automation, Active Directory management
CI/CD pipelines, Kubernetes manifests, Docker Compose
AI & Automation
vLLM, Ollama, LocalAI, OpenAI API patterns
Reconciler architectures, self-healing systems, decision loops
Statistical methods (Z-score, IQR), adaptive baselines
Kiro collaboration, AI-driven code generation, prompt engineering
Monitoring & Observability
PromQL, custom exporters, SNMP, alerting rules
Dashboards, Infinity datasource, annotations, alerting
LogQL, structured logging, Alloy collector
APM, infrastructure monitoring, custom metrics, dashboards
28+ monitors, multi-protocol health checks
Security
WAF, IPS, AppSec, community threat intelligence
Container CVE scanning, automated reporting, CI integration
Authentik, OAuth2, OIDC, SAML2, forward-auth, PKI
Nuclei, Nmap, ZAP, Nikto, testssl
Vault, AWS Secrets Manager, env-based patterns
AWS Inspector, triage, remediation tracking, lifecycle
Networking & Storage
Reverse proxy, Let's Encrypt wildcard, middleware chains
Route53, internal DNS, DDNS, split-horizon
WireGuard, Tailscale, Microsoft RAS
VLANs, firewall rules, UniFi, DHCP
SANs (Dell EQL, IBM Storwize, HP Nimble), iSCSI, Fiber Channel, S3, SMB/NFS
Hardware & IoT
Firmware development, WiFi, OTA updates, LED control
Schematic capture, 4-layer layout, DRC/ERC, BOM
CadQuery (parametric Python), FDM/SLA, enclosure design
Rack deployment, GPU passthrough, NAS, datacenter ops