I build infrastructure that deploys reliably, scales automatically, and costs what it should, across fintech, e-commerce, SaaS, and blockchain platforms serving 1M+ users.
● node: healthy
Every engagement runs through the same hardened delivery path: commit to production without anyone watching the deploy. Safe rollbacks, env parity, and alerting wired into each stage.
I'm a DevOps & Cloud Engineer with over 7 years designing, automating, and operating production infrastructure on AWS and Azure. My work spans fintech, e-commerce, SaaS, blockchain, and platform engineering, environments where reliability and cost both matter.
I cut cloud costs through rightsizing and CDN optimization, rebuild CI/CD pipelines so deployments run unattended, keep Kubernetes stable under load, and provision entire environments with a single Terraform command. I've also deployed and managed the application stacks on top (Node.js, MERN, Laravel, Django, and Android), so infrastructure decisions stay grounded in how the app actually runs.
Currently open to full time, part time, freelance, and contract work, from infrastructure audits and CI/CD overhauls to full cloud builds.
Production systems I've designed and operated. Each opens a live, interactive architecture diagram showing the full request flow, async services, and CI/CD pipeline.
Architected to scale to 1M+ users. Cloudflare → CloudFront → WAF → ALB → ECS (Fargate), with Elasticsearch and RDS, async email/notifications via Lambda + SES/SNS, and identity verification through Rekognition. GitLab CI/CD with rolling dev → staging → prod deploys.
Containerized Web3 application on ECS behind Cloudflare, CloudFront, and an ALB, backed by RDS and DynamoDB. Real-time monitoring with Prometheus + Grafana and Slack alerting; Bitbucket → ECR → ECS deployment pipeline.
Admin platform on ECS running two pipelines: one Bitbucket pipeline runs Terraform plan/apply for infrastructure, and a second builds and deploys containers to ECS. Async notifications via Lambda and SNS, with secrets centralized in SSM Parameter Store.
Hardened, geo-routed wallet infrastructure: Traffic Manager → DDoS Protection → Front Door → WAF → AKS → Cosmos DB (MongoDB API). Secrets via Key Vault + Managed Identity over private endpoints, with App Insights + Azure Monitor and an Azure DevOps rolling-update pipeline.
E-commerce infrastructure behind Azure WAF and Application Gateway, running on Azure Web Apps and VMs with Redis caching and Azure SQL. Governance enforced through Azure Policies, ELK Stack for monitoring, and Azure DevOps pipelines with Bash-based env injection.
Internal HR platform running on AKS with Azure SQL, provisioned end-to-end via Terraform. Azure DevOps → ACR → AKS rolling deployments, with Application Insights and the ELK Stack providing APM and log-level observability.
Products I design, build, and ship end to end, from the app code all the way down to the infrastructure it runs on.
A cosmic merge puzzle for Android built with Jetpack Compose. I own the full release pipeline end to end: signed builds, CI auto-deploy to Google Play, AdMob monetization, and hosting.
An Android card game, a polished take on Old Maid, with local multiplayer over Nearby Connections, achievements, and AdMob ads. Built, signed, and queued for its Google Play release.
An Android app powered by a backend of 9 independent microservices, with an API gateway, inter-service communication, and fully containerized services. I own the infrastructure end to end, from local development to a Kubernetes deployment on AWS EKS.
One more app is in active development, not announced yet. Same approach: built, shipped, and operated entirely in house. Watch this space.
Interactive AWS EKS architecture diagram built with React, TypeScript and ReactFlow, with 44 nodes and semantic zoom.
live demobtop-style real-time terminal system monitor for Windows (PowerShell + LHM) and Linux (Python).
view on githubStrapi CMS provisioned and deployed entirely through Terraform, with reproducible infrastructure as code.
view on githubWhether it's a cloud cost audit, a CI/CD overhaul, a Kubernetes setup, or a full build from scratch, I'm available for freelance and contract work.