Career Experience

Built Azure landing zones from existing subscriptions and an unreliable Pulumi prototype, then expanded the platform across GCP, AWS, and on-prem infrastructure for Kubernetes and GPU-backed compute.

• Expanded an Azure foundation into a multi-cloud landing zone, with Azure as the network hub for GCP, AWS, and on-prem connectivity
• Rewrote the inherited Pulumi code; delivered the first Azure development environment in 10 days, then built staging and production
• Provisioned and operated AKS, GKE, and EKS with Helm, Helmfile, and Kustomize; standardized application delivery through Argo CD
• Introduced Crossplane platform abstractions and Kubernetes admission webhooks to make provisioning and workload policy more consistent
• Built Kubernetes controllers and Go tooling for workload operations, including visibility into running images and their lifecycle
• Operated self-hosted HashiCorp Vault with Kubernetes integration, External Secrets, and sidecar injection for workload secrets
• Unified cluster telemetry with Prometheus, Loki, Tempo, Pyroscope, and Grafana for metrics, logs, traces, and profiles
• Created reusable Azure Pipelines and GitHub Actions workflows, including dedicated CPU and GPU runner capacity
• Reviewed cloud usage and identified savings opportunities through rightsizing, committed-use discounts, and reduced image egress

Built a repeatable Azure delivery foundation across Qomben, KIRRK, and Stellardian: Terraform-managed environments, governed AKS, and secure CI/CD. KIRRK and its Stellardian evolution added connected-device and event-processing workloads.

• Created reusable Terraform infrastructure for multiple environments and standardized Azure Repos and Azure Pipelines as the code-to-deployment path
• Built container delivery around Docker build, test, and SonarQube analysis, publishing images to Azure Container Registry before Helm/Helmfile releases to AKS
• Ran AKS workloads with Istio and applied governance through Azure Policy and OPA Gatekeeper
• Integrated Azure Monitor, SQL Server, Storage, Functions, and other managed services into the shared application platform
• Added Azure IoT Hub and Event Grid event flows for KIRRK and Stellardian; Qomben used the shared platform foundation without the IoT layer
• Established service telemetry with Prometheus, Grafana, Jaeger, and Elastic Stack (Elasticsearch, Logstash, Kibana)
• Integrated Microsoft Entra ID (Azure AD) and identity providers including Okta, Auth0, and Keycloak

Built the application services behind RedFabriQ client products, then carried software-engineering practices into the platform work that followed.

• Led development of RESTful APIs with .NET Core, including versioning, JWT/OAuth authentication, and standardized error handling
• Optimized database interactions with Entity Framework Core including schema migrations and query performance tuning
• Containerized microservices with Docker and managed deployments with Helm on Kubernetes
• Integrated centralized logging and monitoring with Application Insights and Elastic Stack (ELK)

Delivered end-to-end application work for freelance clients, spanning Windows desktop software, backend APIs, and deployment automation.

• Developed WPF desktop applications
• Designed CQRS-based backend services and RESTful APIs
• Established CI/CD pipelines using TFS and Azure DevOps

Started in product engineering, building shared mobile experiences across iOS, Android, and Windows Phone with Apache Cordova and Ionic.

• Built and maintained cross-platform mobile apps for iOS, Android, and Windows Phone