1. Cloud-Native Platform Engineering

Design and build of Internal Developer Platforms (IDP) from greenfield. Kubernetes operator development in Go (Kubebuilder) — custom CRDs, reconciliation loops, dependency-graph engines, event-sourced state machines. Pluggable component factories handling 30+ infrastructure services per deployment. Full CLI tooling alongside the operator. Emphasis on TDD: acceptance test coverage from reconciliation loops to post-deployment health checks with automatic rollbacks.

Technologies: Go, Kubebuilder, Cobra, Kubernetes, CRDs, Flutter (operator UI)

2. AWS Infrastructure as Code

Multi-account, multi-environment AWS infrastructure provisioned via CDK (TypeScript). Platform resources (EKS, VPC, ECR, monitoring, CI/CD) separated from environment resources (API gateway, S3/CloudFront, Lambda, subdomain records). Cross-account governance: IAM Identity Center, KMS keys, log buckets, Secrets Manager. IaC Recorder — automated tool scanning all deployed AWS resources to keep IaC in sync with reality.

Technologies: AWS CDK v2 (TypeScript), EKS, EC2, EFS, RDS, ECR, S3, CloudFront, Lambda, IAM IC, KMS, VPC, Control Tower, Security Hub



3. Kubernetes Cluster Operations

Production EKS cluster design and operation. Auto Mode, Karpenter for just-in-time node provisioning (60% cost reduction achieved at Contango). Ingress controllers, service mesh (Istio, Cilium). Policy-as-code with Kyverno. Zero Trust RBAC. Hardware-backed auth (YubiKey). Crossplane for GitOps-driven cloud resource provisioning.

Technologies: EKS Auto-Mode, Karpenter, Kyverno, Crossplane, Istio, Cilium, KEDA, Knative, ExternalSecrets, Harbor


4. GitOps & CI/CD Pipelines

End-to-end continuous delivery: build → test → Docker push to ECR → GitOps commit → ArgoCD sync. Nx monorepo build orchestration. Argo Workflows for pipeline runs with structured JSON metadata, per-step timing, Grafana Loki deep-links, Slack and GitHub Check Run notifications. Tekton for cluster-internal pipeline orchestration. Full acceptance testing layer with automatic rollbacks on regression.

Technologies: ArgoCD, Argo Workflows, Tekton, Nx, GitHub Actions, CodeBuild, CodePipeline, CircleCI, Jenkins

5. SRE & Reliability Engineering

SRE team design, hiring, and management (Structure Financial: 24/7 production platform; Contango: full SRE build). Distributed system deployment platforms. Environment lifecycle management (create, clone, backup, update, delete). Post-deployment health check frameworks with per-service log classification, JWT renewal, load-balancer validation.

Technologies: Kubernetes operators, Golang, Helm, Prometheus, Alertmanager, Grafana


6. Observability & FinOps

Full-stack observability: Prometheus + Grafana dashboards, Alertmanager, hybrid log aggregation (ELK + Loki). KubeCost for resource rightsizing. Karpenter for JIT provisioning. IaC cost automation.

Technologies: Prometheus, Grafana, Loki, Alertmanager, ELK Stack, KubeCost, Karpenter

7. Data Infrastructure

Production operation of distributed data systems: Kafka/Redpanda (event streaming), ClickHouse (analytics), PostgreSQL/CNPG, Elasticsearch, Temporal (workflow orchestration), TimescaleDB, ScyllaDB, Aeron/AeronCluster. Blockchain data indexing pipelines (producer → Kafka → ClickHouse → WebSocket broadcast via Centrifugo).

Technologies: Kafka, Redpanda Connect, ClickHouse, PostgreSQL (CNPG), Elasticsearch, Temporal, TimescaleDB, ScyllaDB, Centrifugo


8. Real-Time Trading System Infrastructure

Specialist track record in financial infrastructure: Adaptive Financial Consulting (10 years financial markets), Structure Financial (Head of SRE), Cargill (trading platform, US/Switzerland), Contango (DeFi perpetuals). Production platforms for trading systems with high-availability, low-latency, and strict security requirements.

9. AI-Augmented Delivery

AI tooling integrated into engineering workflow: Claude Code, Cursor, MCP servers, Enterprise Context Management. Used for operator scaffolding, IaC generation, junior engineer training, and accelerated delivery cycles.