Selected engineering work

Work

Selected engineering projects from my SRE and platform engineering work.

Implementation

04
01
CI/CD · Database Reliability · AutomationImplemented & tested · Merge gate coverage pending

Cross-Repository Schema Compatibility CI

A CI validation workflow for shared-module alignment, migration integrity, and database schema compatibility across repositories.

GitHub Actions · Python · Go Modules · SQL · Git
02
AWS Infrastructure · Reliability Engineering · Capacity ManagementImplemented & partially validated · Production state not verified

AWS Auto Scaling Policies & Capacity Scheduling

A CDK-based EC2 Auto Scaling design combining reactive CPU and network controls with scheduled capacity planning.

AWS CDK · EC2 Auto Scaling · CloudWatch · Mixed Instances Policy · Spot
03
Platform Engineering · CI/CD · KubernetesImplemented & partially validated · Production validation incomplete

Self-Hosted GitHub Actions Runner Platform

Platform work spanning self-hosted runners and a shared development host that routes engineers to separate branch sites over common ingress and data services.

GitHub Actions · Actions Runner Controller · Kubernetes · Terraform · Docker · Nginx · PostgreSQL · Redis · Google Compute Engine
05
AWS Infrastructure · Deployment AutomationScripts implemented · End-to-end rollout pending

AWS EC2 Deployment & AMI Automation

Shell automation for EC2 release preparation and AMI workflows, including safer operation flags and compatibility fixes.

EC2 · AMI · AWS CLI · Bash · AWS CDK · IAM · SSM

Architecture & Design

03
04
Data Infrastructure · Cloud Architecture · Infrastructure as CodeArchitecture implemented in code · Deployment validation pending

BigQuery Infrastructure as Code & CDC Architecture

Scope-aware BigQuery and CDC infrastructure design with regional ownership, private connectivity, and reusable Terraform compositions.

BigQuery · Terraform · Datastream · AlloyDB · Private Service Connect
06
Cloud Architecture · Infrastructure as CodeArchitecture design & incremental implementation · Rollout scope not fully validated

Multi-Country GCP Infrastructure Architecture

A multi-country GCP target architecture that separates regional ownership, shared dependencies, and environment-specific infrastructure.

GCP · GKE · AlloyDB · VPC · Terraform · PostgreSQL · Redis
08
Infrastructure Security · Developer PlatformArchitecture designed · Partial IAM implementation

Secure Vendor Development Environment Design

An isolation and access-governance design for external developers, with only part of the IAM configuration implemented and statically validated.

GCP · GitHub · Terraform · IAM · CI/CD · PostgreSQL · Redis

Reliability & Operations

03
07
Data Reliability · Incident InvestigationIncident investigated · Full historical recovery unverified

Datastream CDC Reliability & Data Consistency Investigation

A CDC reliability investigation comparing stream health, backfill signals, source access, and destination data to reason about end-to-end completeness.

Datastream · BigQuery · PostgreSQL · CDC
09
Reliability Engineering · ObservabilityPartially implemented · End-to-end validation pending

Cloud Observability & Alerting Infrastructure

Monitoring changes and design reviews for alert delivery and centralized logs across Kubernetes and AWS.

Prometheus · Alertmanager · Grafana · AWS Lambda · Secrets Manager · S3
10
Messaging Infrastructure · Cloud ArchitectureArchitecture evaluation & troubleshooting · WSS deployment and migration not confirmed

MQTT Infrastructure & WebSocket Architecture Assessment

An assessment of secure browser MQTT connectivity, EMQX hosting trade-offs, and Kubernetes startup dependencies.

EMQX · MQTT · WebSocket Secure · TLS · Kubernetes · GKE · VM