I design and build cloud platforms for AWS and Azure environments with a focus on multi-account governance, reusable Terraform/OpenTofu modules, Kubernetes runtime platforms, CI/CD automation, and production operations.
Most client work cannot be published in full because of confidentiality and NDA constraints. The public repositories here are therefore selected reference implementations and portfolio projects that show the architecture patterns, automation style, and engineering practices I use in real platform work.
- AWS multi-account platforms, landing zones, and governance baselines
- Terraform, OpenTofu, and Terragrunt module frameworks
- Hub-and-spoke networking, account isolation, IAM/SCP controls, and audit trails
- AMI/Image Factory automation with EC2 Image Builder and AWS Systems Manager
- Kubernetes platforms, GitOps delivery, CI/CD pipelines, and runtime automation
- Monitoring, logging, security baselines, cost controls, and operational hardening
| Area | Public Reference | Focus |
|---|---|---|
| AWS Landing Zone | CloudTower AWS Landing Zone | AWS Organizations, SCPs, CloudTrail, Config, GuardDuty, reusable Terraform modules |
| Cloud Networking | Hub-and-Spoke Model with Terraform | Hub/spoke network design, isolation, security, monitoring, Terraform automation |
| AWS Data Platform | AWS Data Infrastructure | Secure AWS network, S3, Glue, Redshift, KMS, CloudWatch, Terraform |
| Azure Data Platform | Azure Data Infrastructure | Azure networking, data services, monitoring, Key Vault, Terraform |
| DevOps Challenge | Azure Container Deployment | Container deployment, CI/CD, Azure infrastructure automation |
I am strongest where platform engineering, infrastructure automation, and governance meet:
- building repeatable infrastructure instead of one-off cloud deployments
- turning manual operations into versioned, reviewable automation
- defining secure defaults for multi-account and multi-environment setups
- stabilizing platforms after the initial architecture work is done
- documenting pragmatic patterns that teams can keep operating
Cloud: AWS, Azure
Infrastructure as Code: Terraform, OpenTofu, Terragrunt, CloudFormation
Containers: Kubernetes, EKS, AKS, Docker, Helm
Delivery: Jenkins, GitHub Actions, GitLab CI/CD, ArgoCD
Security & Governance: IAM, SCPs, RBAC, KMS, CloudTrail, AWS Config, GuardDuty, Security Hub
Operations: CloudWatch, Prometheus, Grafana, Loki, SSM, Linux, Bash, Python
Available for remote contract work as an AWS Platform Engineer, DevSecOps Architect, or Cloud Infrastructure Engineer.