Senior Cloud & Kubernetes Engineer - Expedia Group (Large-scale Kubernetes infrastructure management and migration at Expedia Group)
Duration: Mar 2024 - Present
Summary:
- Manage and optimize a large-scale Kubernetes infrastructure on AWS with over 300 EKS clusters, focusing on high availability, performance, and developer productivity
- The project includes migrating multi-cluster orchestration from Kubefed to ArgoCD and transitioning load balancers from Istio to AWS Network Load Balancers
Responsibilities:
- Manage Kubernetes clusters and infrastructure on AWS.
- Lead migration to GitOps workflows using ArgoCD.
- Develop Helm orchestration platform for standardized deployments.
- Manage autoscaling with Karpenter and KEDA.
- Implement security policies with Kyverno and runtime threat detection with Falco.
- Enforce zero-trust architecture and federated IAM.
- Automate infrastructure provisioning with Terraform and Terragrunt.
- Act as senior incident commander and mentor SREs.
- Develop automation tooling and support developer teams.
Technologies: AWS, Kubernetes (EKS), Terraform, Terragrunt, ArgoCD, Helm, Istio (mTLS, AuthorizationPolicies), Karpenter, KEDA, Kyverno, Falco, IRSA, OIDC, Teleport, Backstage, CNAPP/CSPM, PagerDuty, ServiceNow, Prometheus, Grafana, Datadog, AWS NLB, Custom CRDs, Python, Ansible, GitOps, CI/CD
Senior DevOps & Cloud Engineer - Time (CDN infrastructure and cloud-native application delivery at Time)
Duration: Mar 2023 - Mar 2024
Summary:
- Architected and managed CDN infrastructure using Fastly and CloudFront to optimize global content delivery for high-traffic digital media properties
- Managed GKE clusters and Cloud Run services on GCP, and built data pipelines feeding BigQuery for real-time analytics
Responsibilities:
- Architect and manage CDN infrastructure with Fastly and CloudFront.
- Design and maintain CI/CD pipelines using GitHub Actions for Node.js microservices.
- Manage GKE clusters and Cloud Run services ensuring scalability and cost efficiency.
- Build and maintain data pipelines for analytics in BigQuery.
- Provision and manage cloud infrastructure using Terraform with GitOps principles.
- Manage organization-level security and governance on GCP.
- Implement edge computing strategies with Fastly VCL and Compute@Edge.
Technologies: Fastly CDN, CloudFront, GitHub Actions, Node.js, GKE, Cloud Run, BigQuery, Terraform, GCP, GCP Org Policies, Cloud Identity, Entra ID, IAM, Docker, Datadog, Fastly VCL, Compute@Edge
Senior DevOps Engineer - Zazmic Inc (Multi-cloud migration and automation at Zazmic Inc)
Duration: May 2020 - Mar 2023
Summary:
- Led multi-cloud migrations from AWS and Azure to GCP, automating provisioning workflows and managing Kubernetes clusters across hybrid and on-premises environments
- Standardized infrastructure configuration and improved CI/CD pipelines for diverse client projects
Responsibilities:
- Lead multi-cloud migration strategies including EKS to GKE and RDS to CloudSQL.
- Automate GCP migration and provisioning workflows using Ansible.
- Provision Kubernetes clusters with kubeadm and Ansible playbooks.
- Manage Ansible automation at scale with Tower/AWX.
- Build and optimize CI/CD pipelines using GitHub Actions, Terraform, and Kubernetes manifests.
- Maintain and enhance GKE, EKS, and AKS clusters ensuring compliance and cost-effectiveness.
- Use Helm, Istio, ArgoCD, and Kustomize to standardize deployments.
Technologies: AWS, Azure, GCP (GKE, IAM, VPC, networking), Ansible (Roles, Inventories, Tower/AWX, Jinja2), kubeadm, Azure AKS, Azure SQL, Kubernetes (GKE, EKS, AKS), Terraform, Istio, Helm, ArgoCD, Kustomize, GitHub Actions, Lambda, Cloud Functions, Fargate, Cloud Run, S3, Cloud Storage, RDS, CloudSQL
Senior DevOps Engineer - Engineering Company (Cloud architecture and observability consulting at Engineering Company)
Duration: Mar 2019 - May 2020
Summary:
- Delivered consulting services across GCP and AWS including architecture design, implementation, and automation
- Built event-driven architectures and secure APIs, implemented observability stacks, and contributed to container security and governance
Responsibilities:
- Consult on cloud architecture and automation for clients.
- Build event-driven architectures using Pub/Sub, Lambda, and EventBridge.
- Implement and maintain observability stacks with Prometheus, Grafana, Thanos, and Alertmanager.
- Develop and maintain CI/CD pipelines using GitLab, Jenkins, and IaC tools.
- Enhance container security and governance with DevSecOps practices.
Technologies: AWS, GCP, Lambda, EventBridge, EKS, AKS, GKE, Anthos, Prometheus, Grafana, Thanos, Kong, CI/CD, GitLab, Jenkins, Terraform, Elasticsearch, GCP Cloud Functions, Cloud Run, Cloud Storage, FireStore, MemoryStore
Senior DevOps Engineer - SuperDigital (Microservices migration and Kubernetes infrastructure at SuperDigital)
Duration: Jan 2018 - Mar 2019
Summary:
- Orchestrated migration from monolithic system to microservices architecture on Azure Kubernetes Service (AKS)
- Built and managed Kubernetes infrastructure on-premises and in Azure with focus on high availability and observability within a financial compliance context
Responsibilities:
- Migrate monolithic system to microservices on AKS.
- Build and manage Kubernetes infrastructure on-premises and Azure.
- Implement CI/CD pipelines with Azure DevOps.
- Ensure compliance with SOC2 standards including secure access and auditability.
- Deploy and maintain monitoring and logging tools such as Prometheus, Grafana, and ELK.
Technologies: Azure, AKS, Kubernetes, Terraform, Azure DevOps, Prometheus, Grafana, ELK, API Gateway, SOC2
Senior Infrastructure Engineer - Federal Justice (Storage architecture and virtualization at Federal Justice)
Duration: Jan 2014 - Jan 2018
Summary:
- Specialized in storage architecture including SAN/NAS design, replication, and virtualization
- Managed VMware environments and automated server provisioning and configuration management using Ansible and Puppet
Responsibilities:
- Design, implement, and administer SAN/NAS storage solutions.
- Configure storage replication, virtualization, and multipathing for high availability.
- Manage VMware ESXi, vSphere, and vCenter environments.
- Automate server provisioning and configuration with Ansible and Puppet.
- Develop scripts in Shell, AWK, and Python for automation and maintenance.
Technologies: Linux, AWS, VMware, Docker, Kubernetes, Ansible (Roles, Inventories, Jinja2), Puppet, Python, AWK, Shell Scripting
Linux System Administrator - Information Technology Agency (Unix/Linux infrastructure maintenance at Information Technology Agency)
Duration: Jan 2008 - Jan 2014
Summary:
- Maintained Unix/Linux infrastructure supporting state-wide operations and mission-critical services
- Automated server administration and configuration management with Ansible and custom scripting
Responsibilities:
- Maintain Unix/Linux infrastructure and networking services (DNS, NFS, LDAP, SMTP, Apache).
- Automate server administration and configuration with Ansible roles and Jinja2 templates.
- Develop custom Bash, AWK, and Python scripts integrated with Ansible playbooks.
- Provide 24/7 support and implement high-availability solutions.
Technologies: Linux, Bash, AWK, Python, Ansible (Roles, Inventories, Jinja2), Apache, DNS, NFS, LDAP, SNMP, Shell Scripting, System Monitoring
Upstaffer since October, 2026
