I am a Senior DevOps Engineer with over a decade of experience designing, scaling, and operating cloud-native platforms in production environments. My focus is on building reliable, secure, and cost-efficient infrastructure that enables engineering teams to move quickly without sacrificing stability or governance.

I specialize in AWS-based platforms, Infrastructure as Code (Terraform), Kubernetes, and CI/CD systems, with deep experience supporting large microservice architectures and data-intensive platforms. Beyond hands-on engineering, I routinely act as a technical leader and mentor—guiding developers and DevOps engineers in modern DevSecOps practices, platform reliability, and operational excellence.

When I'm not architecting cloud platforms, I engineer local-first AI agents and developer tooling to automate everyday tasks and monitor AI coding workflows.

Connect with me on LinkedIn.

┌───────────────────────────────┬───────────────────────────────┐
│  🤖 AI & Agentic Systems      │  ☸️ Kubernetes & Cloud Native  │
│  • Local-first LLMs & Ollama  │  • Amazon EKS at scale        │
│  • Browser automation (CDP)   │  • GitOps with ArgoCD         │
│  • Autonomous task execution  │  • Service mesh & mTLS        │
│  • Agent observability        │  • Microservices architecture │
├───────────────────────────────┼───────────────────────────────┤
│  ☁️ AWS & Infrastructure      │  🔒 DevSecOps & Observability │
│  • Multi-region architectures │  • CI/CD (GitHub Actions)     │
│  • Terraform modules at scale │  • Datadog, Prometheus, Loki  │
│  • Cloud cost optimization    │  • Secrets management         │
│  • Data & streaming platforms │  • Zero-trust security        │
└───────────────────────────────┴───────────────────────────────┘

• Large-Scale Cloud & Kubernetes Migrations:
  • Led migration of 30+ microservices from ECS to EKS, leveraging ArgoCD for declarative GitOps delivery, improved orchestration, and auto-scaling.
  • Consolidated multi-account AWS and EKS acquisition workloads into unified, secure cloud architectures.
  • Migrated legacy Ansible + EC2 workloads to containerized EKS applications.
• Enterprise CI/CD & Developer Velocity:
  • Led migration of 100+ repositories from Bitbucket to GitHub & GitHub Actions, standardizing CI/CD pipelines and boosting build reliability and developer velocity.
  • Managed scalable CI environments supporting thousands of Linux-based build containers.
• Infrastructure as Code & Platform Engineering:
  • Designed and authored reusable, enterprise-grade Terraform modules managing Snowflake, Datadog, Confluent Cloud, Databricks, GitHub, and AWS resources at scale.
  • Standardized AWS multi-region environments using Terraform and AWS CloudFormation.
  • Led migration from AWS MSK to Confluent Cloud, reducing operational complexity and cost while improving Terraform automation.
• Security, Observability & FinOps:
  • Architected AWS App Mesh to enforce mTLS service-to-service communication across ~30 microservices.
  • Centralized secrets management architectures to enhance zero-trust security posture.
  • Implemented 24/7 observability and monitoring across AWS and Kubernetes using Prometheus, Datadog, CloudWatch, Grafana, Loki, and Fluent Bit.
  • Drove cloud cost-optimization initiatives saving $10K+/month within two months through architectural optimization and vendor rationalization.

A collection of production-minded, local-first autonomous AI agents built to solve real-world daily problems.

• Campsite Finder Agent: Automated availability scanner across ReserveCalifornia and Recreation.gov utilizing Chrome DevTools Protocol (CDP), batch grid endpoints, AI scoring, and headless booking assists.
• Gmail Inbox Agent: Local triage agent that reviews incoming emails, labels priority communications, archives noise, and outputs daily summaries.
• Personal Finance Agent: Ingests bank CSVs, categorizes transaction history, and produces monthly breakdown reports.
• Survey Copilot Agent: Chrome extension paired with a local Ollama backend for assisted form completion.
• PRs in Progress: Integrating Laya (System 1 fast-inference decision engine for sub-50ms email triage, rapid transaction categorization, and survey solving).
• Tech Stack: Python, Laya, Ollama / Local LLMs, CDP / Puppeteer, Docker, OAuth2

Real-time status monitoring for AI coding agents right inside WezTerm tabs.

• Tracks active states (working, waiting for input, idle, inactive) across modern AI agents (Claude Code, OpenCode, Codex, Aider).
• Native tab indicators and desktop notification alerts with macOS sound support (terminal-notifier).
• Tech Stack: Lua, WezTerm, Shell

Kubernetes controller & exporter that monitors Ingress endpoints for Prometheus.

• Discovers Kubernetes Ingress resources dynamically and generates synthetic HTTP/HTTPS health checks.
• Exports status codes and response metrics into Prometheus for automated alerting and cluster visibility.
• Tech Stack: Go, Kubernetes API / client-go, Prometheus, Docker

My personal workstation configuration optimized for terminal velocity and AI pairing.

• Configured for WezTerm, Neovim, and Zsh.
• Includes custom CLI utilities, token/cost statusline integrations, and agent launch scripts.