Cloud Platform Engineer focused on building scalable, well-structured infrastructure on AWS. I care about clean code, solid automation, and solving problems the right way.
I'm an ownership-driven engineer — I take the lead, figure out the problem, design the solution, and ship it.
- Design and implement multi-account AWS architectures (Organizations, IAM, Identity Center, SCPs)
- Build and maintain infrastructure as code with OpenTofu / Terraform / Terragrunt
- Deploy and operate containers on EKS and ECS with Helm Charts, ArgoCD, and CNCF addons
- Create CI/CD pipelines and IssueOps workflows with GitHub Actions to make infra self-service
- Enforce security guardrails, end-to-end encryption, and compliance standards (ISO 27001, SOC 2)
- Build Golden AMIs, manage EC2 fleets, and automate database operations with PL/SQL
I started my career in support, climbed fast to L2, and transitioned to cloud in 2021. I got here by understanding systems from the ground up:
- Application support — Tomcat tuning, Oracle DB troubleshooting, PL/SQL scripts for production fixes
- Infrastructure operations — hands-on management of EC2 fleets, networking, security groups, manual provisioning before IaC
- AWS Organizations — multi-account governance, IAM roles, Identity Center, SCPs
- Golden AMIs — building hardened, standardized images from scratch for consistent deployments
- IaC evolution — migrated manual infra to Terraform/OpenTofu, adopted Terragrunt, built layered state architectures
5 years experience in cloud. Today my focus is 100% automation: OpenTofu modules, GitHub Actions workflows, IssueOps pipelines, and making infrastructure self-service for development teams.
Public repos showcasing how I build and organize infrastructure:
| Project | Description | Stack |
|---|---|---|
| tofu-aws-infra | Multi-account AWS infrastructure with layered state isolation (global → regional → vpc-scoped → app) | OpenTofu AWS GitHub Actions |
| tofu-aws-core-infra | Reusable OpenTofu module for core AWS resources (IAM, VPC, ECS, ALB, Valkey) | OpenTofu AWS ECS EKS |
| tofu-aws-application | OpenTofu module for application-level resources (RDS, ECS services, secrets, S3, EventBridge) | OpenTofu AWS RDS S3 |
| tofu-aws-modules | Shared OpenTofu utility modules (Route53 domain delegation, platform state readers) | OpenTofu AWS HCL |