Skills & Proficiency
Tooling and platforms I work with daily, built up across a decade-plus of SRE, cloud, release, and platform engineering roles.
Platform & Cloud
Kubernetes
GKE, EKS, custom operators & admission webhooks (Go), ingress, multi-cluster architecture
Bare-Metal Kubernetes
Talos Linux via Omni; Multus multi-CNI (Cilium + SR-IOV) for high-performance networking
GCP
GKE, Compute Classes, GPU/TPU ML infrastructure, Spanner, Pub/Sub, Cloud SQL, hub-and-spoke network design
AWS
EKS, Control Tower, VPC CNI networking, Lambda, multi-region platforms
Terraform / Terragrunt
Custom modules, base infrastructure provisioning at org scale
Crossplane
Self-service developer infrastructure — scratch to deployed app in under 15 minutes
Linkerd / Service Mesh
Enterprise + HAZL multi-cluster deployment; $300k/yr transit savings
Delivery & Automation
ArgoCD / GitOps
Company-wide GitOps delivery, custom Helm charts, Helmfile
Progressive Delivery
Kargo, Argo Rollouts, Gateway API — canary promotion pipelines
CI/CD
GitHub Actions at org scale, reusable workflows, dynamic dispatch, runner infrastructure
Ansible / AWX
Fleet automation, dynamic inventories, NetBox-driven datacenter ops
Python & Go
Automation, Kubernetes operators, API tooling, high-performance services
Security & Compliance
Access Control
JIT access operators, GCP PAM, RBAC — eliminated standing production access
Policy & Supply Chain
Kyverno, CEL policies, image validation, sealed secrets
Compliance-Driven Engineering
SOC 2, FedRAMP-oriented design, LUKS/Tang encryption at rest
Observability & Data
Grafana LGTM Stack
Mimir, Loki, Tempo, Pyroscope at 28M series / 1.5 TB logs per day; Alloy, Beyla eBPF
Elasticsearch
500 TB multi-datacenter bare-metal clusters
Datacenter Operations
Colo/on-prem infrastructure, hardware lifecycle, NetBox source of truth