Joaquin Carmona — DevSecOps Engineer

Expertise in DevOps (0.5 yr.), Security Operations (SecOps) (0.5 yr.).

Last verified on October, 2026

Core Skills

Python

1 yr.

Bash

1 yr.

Docker

1 yr.

Bio Summary

DevSecOps engineer specializing in AWS cloud infrastructure, CI/CD pipelines, and integrated security gates including SAST and dependency scanning.
Expert in automating multi-environment deployments using GitHub Actions, Terraform, Docker, and managing secrets with AWS SSM and IAM least-privilege access.
Implemented full observability stacks with Grafana, Prometheus, Loki, Tempo, and OpenTelemetry, reducing incident diagnosis time significantly.
Proficient in Python and Bash automation, building secure microservices and RAG platforms with PostgreSQL and PGVector.
Hands-on experience with identity integration via Okta SAML SSO, container orchestration, and event-driven messaging using RabbitMQ.

Technical Skills

Programming Languages	Go, Java, Python
AI & Machine Learning	AI, Prompt Engineering, RAG
Java Frameworks	Spring Boot
Security	IAM, Security
Data Analysis and Visualization Technologies	Vector
Databases & Management Systems / ORM	PostgreSQL, SQL
UI Frameworks, Libraries, and Browsers	SAML
Cloud Platforms, Services & Computing	AWS, GCP, Serverless
Amazon Web Services	AWS CloudWatch, AWS EC2, AWS IAM, AWS Lambda, AWS S3, AWS SSM
SDK / API and Integrations	API, OpenTelemetry
Scripting and Command Line Interfaces	Bash
Logging and Monitoring	Cadvisor, Grafana, Prometheus, Sentry
Deployment, CI/CD & Administration	CI/CD, DevOps, DevSecOps, loki, OpenVPN, SonarQube
QA, Test Automation, Security	Dependabot, SSO
Virtualization, Containers and Orchestration	Docker, Docker Compose, Kubernetes, OpenVPN, Terraform
Version Control	Git, Github Actions
Operating Systems	Linux
Methodologies, Paradigms and Patterns	microservices, REST
Web/App Servers, Middleware	Nginx
Platforms	Okta
Mail / Network Protocols / Data transfer	OpenVPN
Message/Queue/Task Brokers	RabbitMQ
Collaboration, Task & Issue Tracking	Tempo
Other Technical Skills	Backend, Containerization, database, IDENTITY, LLMs, Monitoring, Observability, Parameter Store, PGVector, SAST, Software Development

Joaquin Carmona

DevSecOps Engineer

Mérida, Yucatán, Mexico · Remote (LATAM) · +52 999 114 7231

[email protected] · linkedin.com/in/joaquin-carmona · github.com/JoaquinCar

Professional Summary

DevSecOps engineer with hands-on experience securing and automating multi-environment cloud infrastructure on AWS. Builds CI/CD pipelines with integrated security gates (SAST, dependency scanning), manages secrets and IAM-scoped least-privilege access, and operates full observability stacks. Fluent in Python and Bash automation, Docker, Terraform (IaC), and identity integration (Okta SSO). Currently building a secure, vector-database-backed RAG platform in Python. English C1.

Work Experience

DevSecOps / DevOps Engineer (Intern) — AIVARA Remote, Mérida MX · Sep 2025 – Present

Summary: Build and secure multi-environment cloud infrastructure on AWS: CI/CD automation with integrated security gates, secrets and identity management, and full observability across 38 repositories and 25+ microservices.

Responsibilities:

Integrated security gates into CI/CD: deployed SonarQube with Okta SAML SSO for automated code-quality / SAST analysis on every QA deploy, and enabled Dependabot for continuous dependency vulnerability scanning.
Centralised secrets management, migrating 38 repositories from GitHub Secrets to AWS SSM Parameter Store with IAM-scoped least-privilege access; hardened networking by moving dev/QA from OpenVPN to FortiVPN.
Designed and deployed CI/CD pipelines (GitHub Actions, self-hosted runners) across 38 repositories and 3 environments, enabling on-merge automated deployments for 25+ microservices and eliminating manual SSH deploys.
Built a full observability stack (Grafana, Prometheus, Loki, Tempo, Alloy, cAdvisor, OpenTelemetry) across 4 environments, cutting incident diagnosis from hours to minutes; extended Sentry to 25+ services with distributed-trace correlation.
Prevented a production outage by catching a CI/CD misconfiguration (generic Docker container names) that would have terminated a shared Redis instance serving live customer traffic.

Technologies: GitHub Actions, Docker, AWS (SSM, IAM, EC2, S3, CloudWatch, Lambda), Terraform, SonarQube, Dependabot, Okta SSO, Grafana, Prometheus, Loki, Tempo, OpenTelemetry, Sentry, Python, Bash.

Projects

Citadel — Knowledge API (in progress)

Summary: Self-hostable Retrieval-Augmented Generation (RAG) platform: Python microservices over PostgreSQL with PGVector for vector search, containerized with CI and a security focus (prompt-injection defenses, IAM, rate limiting).

Technologies: Python, FastAPI, PostgreSQL, PGVector, Docker, CI/CD, Go (planned).

CloudOps AI Advisor

Summary: Serverless anomaly-detection system on AWS Lambda with CloudWatch monitoring 50+ metrics, provisioned via reusable Terraform modules for scalable, maintainable infrastructure.

Technologies: AWS Lambda, CloudWatch, Terraform.

AI-Powered Skill Analyzer

Summary: Spring Boot REST backend using large language models (LLMs) and prompt engineering to evaluate engineer skill profiles, deployed on AWS EC2.

Technologies: Java, Spring Boot, PostgreSQL, Docker, AWS EC2, LLMs, prompt engineering.

Technical Skills

Cloud & IaC: AWS (EC2, S3, IAM, Systems Manager/SSM, CloudWatch, Lambda), Terraform, GCP

Security: SAST (SonarQube), dependency scanning (Dependabot), secrets management (AWS SSM), IAM least-privilege, Okta SAML SSO / IdP, network hardening (FortiVPN), OWASP awareness

CI/CD & Automation: GitHub Actions, self-hosted runners, security gates, automated rollback, Docker Compose

Containers: Docker, Docker Compose, Kubernetes (certified, in progress)

Data & Messaging: PostgreSQL, PGVector, RabbitMQ (event-driven)

Observability: Grafana, Prometheus, Loki, Tempo, Alloy, cAdvisor, OpenTelemetry, Sentry

Languages & Tools: Python, Bash, SQL, Java, Go (learning); Git, Linux, Nginx

Education

Associate of Applied Science, Software Development and Innovation Aug 2024 – In progress

Tecnológico de Software, Mexico

Certifications

AWS Academy Cloud Developer — Amazon Web Services (2025)
Docker & Kubernetes: Containerisation and Virtualisation — DataCamp (2025)

Languages

Spanish (native); English — ITEP C1 (Advanced)

How to hire with Upstaff

1

Talk to Our Talent Expert

Our journey starts with a 30-min discovery call to explore your project challenges, technical needs and team diversity.

2

Meet Carefully Matched Talents

Within 1-3 days, we’ll share profiles and connect you with the right talents for your project. Schedule a call to meet engineers in person.

3

Validate Your Choice

Bring new talent on board with a trial period to confirm you hire the right one. There are no termination fees or hidden costs.

Why Upstaff

Upstaff is a technology partner with expertise in AI, Web3, Software, and Data. We help businesses gain competitive edge by optimizing existing systems and utilizing modern technology to fuel business growth.

Real-time project team launch

<24h

Interview First Engineers

Upstaff's network enables clients to access specialists within hours & days, streamlining the hiring process to 24-48 hours, start ASAP.

x10

Faster Talent Acquisition

Upstaff's network & platform enables clients to scale up and down blazing fast. Every hire typically is 10x faster comparing to regular recruitement workflow.

Vetted and Trusted Engineers

100%

Security And Vetting-First

AI tools and expert human reviewers in the vetting process is combined with track record & historically collected feedbacks from clients and teammates.

~50h

Save Time For Deep Vetting

In average, we save over 50 hours of client team to interview candidates for each job position. We are fueled by a passion for tech expertise, drawn from our deep understanding of the industry.

Flexible Engagement Models

Custom Engagement Models

Flexible staffing solutions, accommodating both short-term projects and longer-term engagements, full-time & part-time

Unique Talent Ecosystem

Candidate Staffing Platform stores data about past and present candidates, enables fast work and scalability, providing clients with valuable insights into their talent pipeline.

Transparent

$0

No Hidden Costs

Price quoted is the total price to you. No hidden or unexpected cost for for candidate placement.

x1

One Consolidated Invoice

No matter how many engineers you employ, there is only one monthly consolidated invoice.

Ready to hire Joaquin Carmona
or someone with similar Skills?

Book a call with Joaquin Carmona

Start Hiring