DevOps and Platform Engineer with 7+ years of experience in Linux systems, infrastructure automation, and CI/CD pipelines across embedded and cloud-native environments. CKA-certified with production experience building Kubernetes clusters, containerized workloads, and end-to-end deployment pipelines — backed by a CCNA foundation and a systems-level instinct that goes all the way down to the metal. My path into DevOps wasn't a pivot: at Plaqless I was hired as an Embedded Engineer and became the person who held the entire engineering organization together — Git infrastructure, build automation, Slack integrations, servers, backups, internal tooling, all of it. That's still how I work. Today the stack is Kubernetes, Terraform, Jenkins, and Ansible, with AI-assisted workflows (Claude, OpenCode) to move faster without cutting corners.
Full self-hosted infrastructure I run end-to-end: Proxmox VE virtualizing CI/CD to home automation, ZFS backups replicated to a Proxmox Backup Server, Coolify-managed Docker workloads, per-host Traefik reverse proxying, and Cloudflare Tunnels with zero inbound ports — plus a separate k3s cluster for Kubernetes practice. Every config is sanitized and pulled straight from the running system.
CI/CD · KubernetesFull end-to-end pipeline: git push → Gitea webhook → Jenkins → Docker build → GHCR → deploy to k3s. Custom Jenkins image with kubectl, zero manual steps.
CI/CD · KustomizeProduction-style React pipeline with parallel Jest + Playwright tests, staging E2E validation, and Kustomize overlays promoting staging → prod.
AnsibleAutomates Proxmox VMs: Docker install, deployer user, SSH hardening, Ansible Vault secrets, and a Jenkins-triggered app deployment playbook for k3s.
Kubernetes · CKASelf-hosted CKA simulator — three 17-question exams modeled on killer.sh, covering all five CKA domains on a Vagrant kubeadm cluster.
Production App · MigrationLive full-stack app (React, Node, PostgreSQL) migrated from Docker Compose/Coolify to k3s with Jenkins CI/CD, Ansible deploy, and Traefik ingress.
YAML-driven IAM users & roles with for_each, yamldecode(), and assume-role
policies.
Resource imports, state management, and a public Lambda function URL via
plan -generate-config-out.
Reusable RDS module with input validation, postconditions, and private VPC isolation.
Security · OIDCOIDC federation so Terraform Cloud authenticates to AWS without long-lived access keys.
Terraform CloudVCS-driven workspace with a private module registry and moved blocks for state refactoring.
Workloads, networking, RBAC, cluster upgrades, and troubleshooting.
Jenkins pipelines, Ansible automation, and Terraform with remote state and reusable modules — shipped as portfolio projects.
AWS Cloud Practitioner (CLF-C02), GitHub Actions, and a Prometheus + Grafana + Telegram alerting stack on k3s.
Python for DevOps, ArgoCD/GitOps, and a full application sprint toward DevOps, Platform, and Cloud roles.