Expertise

Technical expertise

Deep expertise across the modern infrastructure stack, from DevOps and cloud architecture to AI/ML infrastructure and security engineering.

Discuss your project

DevOps Excellence & Platform Engineering

CI/CD
GitHub Actions GitLab CI Jenkins ArgoCD FluxCD Tekton Drone CI
IaC
Terraform Terraform Cloud Terraform Enterprise HCP Terraform Ansible CloudFormation Pulumi AWS CDK Crossplane
GitOps
ArgoCD FluxCD Rancher Fleet
Config Management
Ansible Chef Puppet SaltStack
Service Mesh & Networking
Istio Linkerd Consul Consul Connect AWS App Mesh Envoy
HashiCorp Stack
Vault Consul Nomad Packer Waypoint Boundary
Key achievements
  • — Designed CI/CD pipelines processing 1000+ deployments daily
  • — Reduced deployment time by 75% through automation
  • — Implemented GitOps for 100+ microservices

Multi-Cloud Architecture & FinOps

AWS
EKS Lambda EC2 S3 CloudFront RDS DynamoDB SQS/SNS API Gateway Step Functions EventBridge CloudWatch X-Ray
Azure
AKS Functions Cosmos DB Service Bus Logic Apps Application Gateway Key Vault Monitor
GCP
GKE Cloud Run BigQuery Pub/Sub Cloud Functions Firestore Cloud CDN
Cloudflare
Pages Workers R2 D1 KV Durable Objects Queues Stream Images Vectorize AI Gateway Hyperdrive Cloudflare CDN WAF Zero Trust Access Gateway Tunnel Workers AI
Key achievements
  • — Architected CDN handling 50TB daily traffic
  • — Achieved 40% cost reduction through FinOps practices
  • — Designed 99.99% uptime multi-region architectures
  • — Migrated 200+ services to cloud-native architectures

Kubernetes at Scale

Platforms
EKS AKS GKE Rancher OpenShift K3s MicroK8s Nomad
Container Runtime
Docker containerd CRI-O gVisor Podman
Package Management
Helm Kustomize Carvel Operator Framework
Scaling & Scheduling
HPA VPA KEDA Cluster Autoscaler Karpenter Volcano
Networking
Calico Cilium Weave Flannel Multus Gateway API
Storage
Rook/Ceph Longhorn OpenEBS Portworx CSI Drivers
Security & Policy
OPA/Gatekeeper Kyverno Falco Pod Security Standards Network Policies
Developer Tools
kubectl k9s Lens Telepresence Skaffold Tilt
Key achievements
  • — Managed 500+ node production clusters
  • — Implemented zero-downtime deployment strategies
  • — Built custom operators for automated operations

AI Platform Engineering & LLM Infrastructure

LLM Integration & Deployment
OpenAI GPT-4 Anthropic Claude OpenRouter Ollama vLLM AWS Bedrock Azure OpenAI GCP Vertex AI Cloudflare Workers AI
Retrieval & Context Engineering
LangChain LlamaIndex Pinecone Weaviate ChromaDB Qdrant Milvus FAISS pgvector OpenAI Embeddings Sentence Transformers
AI Automation Pipelines
Automated content generation Intelligent CI/CD AI-powered monitoring Code review agents Documentation automation
MCP, Tool-Using Agents & Orchestration
Model Context Protocol (MCP) OAuth 2.1 Dynamic Client Registration Tool allowlisting & capability scoping LangChain LlamaIndex CrewAI AutoGen LangGraph Semantic Kernel Haystack Multi-agent systems
MLOps & Model Serving
KServe Seldon Core BentoML Ray Serve TorchServe MLflow Kubeflow Weights & Biases Model versioning A/B testing
GPU Infrastructure
NVIDIA A100/H100 GPU Operator Multi-instance GPU (MIG) CUDA cuDNN Model optimization Quantization LoRA/QLoRA
Prompt Engineering
System prompt design Few-shot learning Chain-of-thought ReAct patterns Prompt templates Context management
Key achievements
  • — Built low-latency retrieval infrastructure serving millions of queries at <100ms
  • — Deployed automated blog generation pipeline using LLMs and trending topic analysis
  • — Deployed DCR-enabled MCP servers across multiple organizations with least-privilege scopes and automated credential rotation
  • — Shipped a tool-using agent with server-validated capabilities and prompt-injection defenses
  • — Optimized LLM inference costs by 60% through intelligent caching and batching
  • — Built agent pipelines with human-in-the-loop approval before any infrastructure change
  • — Managed GPU clusters for distributed model training and inference

Observability & Performance Engineering

Elastic Stack
Elasticsearch Kibana Logstash Beats (Filebeat, Metricbeat, Heartbeat, Auditbeat, Packetbeat) Elastic APM Elastic Agent Fleet Elastic Cloud Elastic Observability
Grafana Stack
Grafana Mimir Loki Tempo Grafana Agent Grafana Cloud Grafana Faro Grafana OnCall Grafana Phlare
Logging
ELK Stack (5TB+ daily) Splunk Fluentd Fluentbit Vector Loki Logstash Filebeat
Metrics & Time Series
Prometheus Grafana Mimir Cortex Thanos VictoriaMetrics InfluxDB Metricbeat Telegraf OpenTelemetry Collector
Tracing
Jaeger Zipkin AWS X-Ray Google Cloud Trace Tempo Elastic APM OpenTelemetry
APM & Performance
DataDog New Relic AppDynamics Dynatrace Elastic APM Grafana Faro Sentry
Data Collection
OpenTelemetry Elastic Agent Grafana Agent Beats Telegraf Fluentd Vector Prometheus Exporters
Incident Management
PagerDuty Opsgenie VictorOps Grafana OnCall Alertmanager Elastic Alerting
Load Testing & Chaos
K6 Gatling JMeter Locust Chaos Mesh Litmus Gremlin
Visualization & Dashboards
Grafana Kibana DataDog Tableau Apache Superset Chronograf
Key achievements
  • — Built ELK cluster ingesting 5TB+ logs daily
  • — Reduced MTTR by 60% through intelligent alerting
  • — Implemented chaos engineering practices

DevSecOps & Security Engineering

Container Security
Aqua Security Twistlock Sysdig Secure Anchore Trivy Clair Grype Prisma Cloud
SAST/DAST
SonarQube Snyk Code Checkmarx Veracode Semgrep CodeQL Fortify OWASP ZAP
Secrets Management
HashiCorp Vault AWS Secrets Manager Azure Key Vault GCP Secret Manager SOPS Sealed Secrets Doppler 1Password
Policy as Code
OPA/Gatekeeper Kyverno HashiCorp Sentinel Cloud Custodian Checkov tfsec Terrascan
Runtime Security
Falco Tracee Tetragon Cilium Calico Enterprise AppArmor SELinux
Compliance & Scanning
Chef InSpec OpenSCAP Prowler ScoutSuite CloudSploit Dependency-Track Grype SBOM tools
SIEM/SOAR
Splunk Enterprise Security ELK Security Wazuh TheHive Cortex XSOAR Security Onion
Vulnerability Management
Snyk Aqua Trivy Grype Nessus Qualys Rapid7 Nuclei OWASP Dependency-Check
Adversary Emulation
MITRE ATT&CK STRIDE threat modeling OWASP Top 10 OWASP ASVS Abuse-case review Prompt-injection testing Nmap Wireshark
Zero Trust & IAM
Cloudflare Zero Trust BeyondCorp Okta Auth0 Keycloak AWS IAM Azure AD SPIFFE/SPIRE
Supply Chain Security
Sigstore Cosign in-toto SLSA Notary TUF SBOM generation Artifact signing
Key achievements
  • — Implemented shift-left security in CI/CD pipelines
  • — Reduced CVE remediation time by 80% through automation
  • — Achieved SOC 2 Type II and ISO 27001 compliance
  • — Built zero-trust architecture for 500+ services
  • — Hardened a public, unauthenticated AI agent endpoint against prompt injection, tool abuse and cost exhaustion — each control linked to its test on /work
Back to home