Heavy, hands-on user of AI agentic coding (Claude Code), focused on getting the most out of it: directing AI agents on implementation, debugging, and operations while owning architecture and review. Author of custom skills, slash commands, and subagents that encode real operational runbooks (SOC 2 evidence, Datadog cost debugging, GKE/Pulumi/ArgoCD ops, RDS IAM migrations, automated code review) so agents skip discovery and go straight to the point.

Designing and shipping production MCP (Model Context Protocol) servers and autonomous AI agents (LangGraph/LangChain) as microservices with streaming APIs and tool access over MCP/SSE — including an 18-tool blockchain data server with dynamic GraphQL-introspection tool generation and pay-per-query monetization.

Running a persistent AI engineering memory on Obsidian (PARA compound-engineering vault, on the open-source claude-obsidian plugin) so AI sessions have instant recall of past tasks and projects — an ingest → lint → query pipeline with hybrid contextual retrieval (BM25 + rerank) for fast, precise context.

Orchestrating containerized workloads at scale, including managed EKS and GKE clusters and self-managed clusters running directly on bare-metal servers, with Karpenter autoscaling, KEDA, HPA, ArgoCD GitOps, and Helm. Certified Kubernetes Administrator (CKA) and Application Developer (CKAD).

Infrastructure as Code across AWS, GCP, and DigitalOcean environments, using Terraform and Terragrunt to manage multi-environment, multi-account cloud infrastructure with Atlantis for automation.

Deep experience across EKS, ECS Fargate, RDS Aurora, ElastiCache, Lambda, ALB, Route 53, IAM, Secrets Manager, Transfer Family, CloudWatch, and more, across multi-account production environments.

Containerizing applications for development, CI/CD, and production, with strong knowledge of image optimization, security scanning, and registry management.

Building internal platform tools, automation scripts, deployment tooling, data pipelines, and CLI utilities across multiple production environments.

Hands-on experience implementing ISMS, SOC 2, PCI-DSS, ISO 27001, and NIST frameworks. Background includes CISO leadership, security awareness programs, PAM, vulnerability management, and compliance auditing.

IaC with Pulumi and TypeScript to define and manage full Google Cloud architectures, including GKE, Cloud Armor, Cloud SQL, and GCS.

Building full observability stacks with Prometheus, Grafana, Loki, Promtail, and Datadog for metrics, logs, and alerting across Kubernetes and cloud environments, including Datadog cost and custom-metric cardinality control via DogStatsD relays.

GitOps continuous delivery for Kubernetes using ArgoCD, managing application deployments across multiple clusters and environments.

Building CI/CD pipelines for application builds, infrastructure automation, container image publishing, and multi-environment deployments.

Configuration management and infrastructure automation using Ansible for provisioning and server hardening.

Extensive experience with GKE, Cloud Run, Cloud Armor, Cloud SQL, BigQuery, Airflow, GCS, Cloud NAT, IAM, Workload Identity Federation, and site reliability engineering for production workloads.

Migrating containerized workloads from GKE to second-generation Cloud Run with internal load balancers, VPC egress, Cloud NAT, and IAM-authenticated internal services for lower cost and operational overhead.

Operating MongoDB Atlas in production, including replica-set health, TLS/CA rotation, IP allowlists and Private Service Connect endpoints, and connection-pool tuning to resolve egress and saturation incidents.

Driving large cloud cost reductions across AWS and GCP through workload right-sizing, spot and preemptible nodes, serverless migration, observability-agent centralization, and detailed cost-analysis tooling.

Managing secrets across environments with Infisical, External Secrets Operator, SOPS with KMS, and Secret Manager, including project-level IAM and Workload Identity Federation for CI pipelines.

Building stealth browser-automation services (headed Chromium under Xvfb with spoofed fingerprints) driven over JSON APIs and MCP for reliable data gathering against modern anti-bot stacks.

Managing Kubernetes application deployments and configuration with Helm charts across multiple environments.

Operating full and archive nodes for Ethereum, Optimism, Arbitrum, Polygon, Avalanche, and Shape, with RPC proxying, failover, and indexing pipeline management.

Deep Linux systems administration experience across server management, networking, shell scripting, and security hardening.

Running production workloads on dedicated bare-metal servers (OVH), including self-managed Kubernetes clusters on physical hardware, edge firewall management, SSH certificate-authority access, and full ownership of the stack from hardware through networking without a managed cloud control plane.

Managing Proxmox VE hypervisors on bare-metal hosts, carving physical servers into VMs and containers to consolidate production workloads on dedicated hardware.

Building CI/CD pipelines for mobile (iOS, Android), API, and infrastructure deployments with CircleCI.

Building frontends for internal platform tools, including security dashboards, access request portals, and secrets management UIs.

Building APIs and web services, containerizing Node.js applications and migrating them to Kubernetes for cost and scalability improvements.

Source code management and CI/CD pipelines with GitLab for microservice delivery across multi-tenant cloud environments.

Building and managing CI/CD pipelines with Jenkins for infrastructure automation and application delivery.

Multi-cloud continuous delivery with advanced deployment strategies.