Tools I use every day
Grouped by layer — from cloud infrastructure up through delivery, security and observability.
Infrastructure & networking
Container platform
Provisioning & delivery
Guardrails & insight
What I deliver
Platform work is judged on release speed, reliability, security and cloud cost — here's where I move each one.
Faster, traceable releases
A standardised Jenkins → Nexus/JFrog → Argo CD pipeline, reused across services, that takes release lead time from days to minutes with full traceability.
Lower cloud spend
Right-sizing, Auto Scaling policies and storage lifecycle rules — driven by CloudWatch and Datadog analysis — that cut monthly AWS cost without hurting reliability.
Security as a gate
Trivy, SonarQube and Checkmarx wired in as blocking pipeline gates, plus AWS & Cloudflare WAF rules — cutting critical CVEs that ever reach production.
Zero configuration drift
Every deployment moved to GitOps with automated sync, self-healing and pruning — so environments stay identical and recover on their own.
Reliable operations
Primary responder for P1/P2 incidents — root-causing through logs and metrics on a Prometheus / Grafana / Datadog stack and improving MTTR.
Legacy brought into the fold
Legacy services automated with Ansible dynamic inventory, so monoliths and containerised workloads share one release and monitoring process.
Work experience
DevOps Engineer
- Architected AWS environments — EKS, VPC, RDS, Redshift and ALB/NLB provisioned with Terraform and Ansible, standardising every environment and removing manual setup from onboarding.
- Designed the CI/CD platform on Jenkins — automated packaging, container builds, semantic image versioning and artifact publishing to Nexus and JFrog, with environment config updated automatically for full traceability.
- Led the migration to GitOps with Argo CD and Flux — introducing automated sync, pruning and drift recovery so services deploy without manual
kubectlaccess. - Built a reusable Helm chart library covering registry auth, health probes, resource limits and app config — adopted as the standard for all new services.
- Embedded security into delivery — Trivy image scanning, SonarQube and Checkmarx SAST gates, plus Cloudflare and AWS WAF rules, rate limiting and access policies protecting public endpoints.
- Established the observability stack — Prometheus, Grafana, Datadog and CloudWatch with alerting and dashboards used for capacity planning and cost reviews.
- Primary production incident responder — root-caused P1/P2 incidents through log and metric analysis, supported security investigations and improved MTTR.
Certified & verified
Five Linux Foundation / CNCF credentials, each with a verifiable credential ID.
Get in touch
Hiring for DevOps, Platform, SRE or Cloud Infrastructure? I'm happy to talk through your delivery pipeline, EKS setup or cloud cost.