Career Intelligence

Career Timeline

Hands-on DevSecOps, cloud platform engineering, and security infrastructure across 14 years.

11 Roles
36 Tools
10 Domains
15 Yrs exp

Domain Proficiency

Skill level · explicit data only

Domain Score Level
Cloud Security 92/100 expert
K8s / GitOps 90/100 expert
DevSecOps / CI 88/100 expert
Supply Chain 85/100 advanced
Compliance 82/100 advanced
IaC / Terraform 90/100 expert
Observability 78/100 advanced
Offensive Sec 68/100 intermediate

Toolchain Distribution

45 tools · categorised

LabelTool count
Security24
Platform12
Development4
Operations5

Work History

  1. Present

    Senior DevSecOps Engineer

    Multiverse Computing

    Current

    Stack (6 tools)

    LabelUsed
    Kubernetes1
    Terraform1
    Terramate1
    Spacelift1
    Argo CD1
    Helm1
    • Operate and harden EKS clusters with Karpenter autoscaling, Istio, and runtime security agents across dev, staging, production, and ML research accounts
    • Design and maintain GitOps-driven deployments through Argo CD / Akuity with OIDC-based authentication and External Secrets Operator backed by AWS Secrets Manager
    • Govern infrastructure entirely through Terraform + Terramate stacks covering IAM, VPCs, WAF ACLs, CloudFront, EKS, Lambda, and multi-region monitoring
    • Operate AWS security ecosystem — GuardDuty, Inspector2, IAM Access Analyzer, Security Hub, Detective, Macie — feeding alerts into Hunters SIEM and Drata

    Hands-on DevSecOps Architect responsible for secure, scalable, and observable infrastructure across a multi-account AWS environment supporting AI pipelines and enterprise microservices. Scope spans Kubernetes platform engineering, IaC governance, cloud security controls, CI/CD pipeline security, zero-trust access, offensive security validation, and continuous compliance with ISO 27001, SOC 2, NIS2, and DORA.

  2. Senior DevOps Engineer

    Antaes Consulting · Skyguide (Swiss Air Navigation)

    Stack (6 tools)

    LabelUsed
    Jenkins1
    SonarQube1
    Helm1
    Kubernetes1
    Prometheus1
    Grafana1
    • Implemented SAST and DAST pipelines for safety-critical air traffic control software using SonarQube and Jenkins-based CI/CD
    • Developed custom CI plugins for Maven, Docker, and JFrog Artifactory to improve build efficiency and reduce overhead
    • Applied SAFe Framework and Lean Six Sigma principles to foster team collaboration and eliminate delivery bottlenecks
    • Managed Linux system administration including AppArmor/SELinux hardening, RPM package administration, and SSH/cert management

    Integration and implementation of DevSecOps practices — SAST, DAST, test automation, CI/CD — for Swiss air traffic management systems operating under strict safety and regulatory requirements. Applied SAFe and Lean Six Sigma to optimize delivery workflows and eliminate operational inefficiencies.

  3. Senior DevOps Engineer

    Ciklum · Sportsbook Betting Platform

    Stack (6 tools)

    LabelUsed
    Kubernetes1
    Argo CD1
    Helm1
    Kustomize1
    Terraform1
    Pulumi1
    • Built declarative GitOps CI/CD on AWS (IAM, S3, EC2, ECS, ECR, EKS, ALB) with Terraform, ArgoCD, and Argo Rollouts for blue/green and canary deployments
    • Automated infrastructure validation using Terratest; enabled progressive delivery and feature flags via Argo Rollouts and LaunchDarkly
    • Integrated K6 for load and stress testing, Datadog for distributed tracing, and GitHub Actions for cross-stack orchestration across EKS, Helm, and Kustomize
    • Designed a multi-tenant public services platform with .NET Aspire 8 and Angular 18+, federated identity via Keycloak and Entra ID (OIDC, SAML 2.0, OAuth2)

    Designed and operated a high-performance sportsbook platform for the betting and gambling industry using ASP.NET Core 8, Microsoft Orleans (Virtual Actor Model), Apache Pulsar, and a fully event-driven microservices architecture — alongside declarative GitOps CI/CD on AWS EKS.

  4. DevOps Engineer & Full Stack Developer

    BBVA IT España

    Stack (6 tools)

    LabelUsed
    Kubernetes1
    Terraform1
    Jenkins1
    GitHub Actions1
    Prometheus1
    Grafana1
    • Maintained and improved CI/CD pipelines for banking-grade internal platforms
    • Contributed to full-stack development of internal tooling using Java and TypeScript
    • Applied secure SDLC practices in a PCI-DSS and DORA-regulated environment
    • Collaborated with distributed engineering teams across Spain

    DevOps and full-stack engineering role at one of Spain's largest financial institutions, contributing to internal platform tooling, CI/CD pipelines, and backend services within a regulated banking environment.

  5. DevSecOps Engineer

    European Commission

    Stack (6 tools)

    LabelUsed
    Kubernetes1
    Helm1
    Kustomize1
    Argo CD1
    AWS1
    Microsoft Azure1
    • Designed and enhanced Kubernetes-native CI/CD using AWS EKS, Azure AKS, PKS, and OpenShift — with Helm, Kustomize, KEDA, Prometheus, Grafana, Kyverno, and OPA Gatekeeper
    • Integrated SAST/DAST tooling — SonarQube, Checkmarx, CodeQL, Snyk, Semgrep, OWASP Dependency-Check, Fortify, Burp Suite Pro, OWASP ZAP, and Trivy
    • Enabled full-stack vulnerability management via Tenable Nessus, OpenVAS, Checkov, tfsec, AWS Security Hub, Azure Policy, Wiz, Grype, and Dependency-Track with OPA
    • Monitored runtime security using Falco, Wazuh, Elastic Security, Datadog Cloud Security, AWS GuardDuty, and Microsoft Defender for Cloud

    Planned, maintained, and upgraded enterprise-grade DevSecOps pipelines to support secure, scalable, and cost-efficient software delivery across hybrid and multi-cloud environments for European Commission IT projects. Promoted DevSecOps adoption through technical leadership and security-as-code practices.

  6. Head of Architecture, Cloud & Security

    Savana Med

    Stack (6 tools)

    LabelUsed
    AWS1
    Terraform1
    Kubernetes1
    Prometheus1
    Grafana1
    Jenkins1
    • Architected cloud infrastructure for EHR-to-ML pipelines using Amazon SageMaker, MLflow, Apache Airflow, and TensorFlow Serving in containerized environments
    • Built automated CI/CD workflows for infrastructure and ML workloads using Jenkins, Bitbucket Pipelines, AWS CodeBuild, SonarQube, and Airflow DAGs
    • Automated provisioning via Terraform, Python, and Boto3 for reproducible ML training and inference environments
    • Deployed Dockerized microservices on AWS (IAM, VPC, EC2, ECS Fargate, ECR) with Security Hub, GuardDuty, and Inspector for threat monitoring

    Designed and implemented scalable cloud infrastructure solutions for transforming Electronic Health Records (EHRs) into big data and ML pipelines. Led end-to-end MLOps responsibilities — data ingestion, model training, and automated deployment of ML models — in a HIPAA-aligned regulated health-tech environment.

  7. Solutions Architect

    VASS U.S.

    Stack (6 tools)

    LabelUsed
    Kubernetes1
    Jenkins1
    GitLab CI1
    Grafana1
    Prometheus1
    Terraform1
    • Designed and deployed enterprise platforms on Kubernetes OpenShift, managing SELinux hardening, persistent volumes, and kernel tuning for container workloads
    • Implemented API platform for Santander Bank US using IBM API Connect, MuleSoft/Anypoint Studio, integrating SQL and MongoDB backends
    • Built and maintained CI/CD pipelines with Docker, GitLab, Jenkins, Sonatype Nexus, and SonarQube
    • Configured full observability stack — ELK (Elasticsearch, Logstash, Kibana), Kafka, Grafana, Prometheus, and Alertmanager

    Designed and developed enterprise-grade applications, APIs, and backend services for US clients on Kubernetes OpenShift Platform. Combined technical architecture with hands-on coding in Java and Kotlin, and implemented observability and CI/CD pipelines across cloud-native environments.

  8. Application Architect

    MAPFRE

    Stack (6 tools)

    LabelUsed
    Kubernetes1
    Argo CD1
    Helm1
    Kustomize1
    Terraform1
    Pulumi1
    • Defined and implemented API-first architecture with Java Spring Boot, Kotlin Ktor, Scala, NestJS, and FastAPI — bounded contexts, CQRS, event sourcing
    • Transformed legacy SOAP services into cloud-native REST/gRPC APIs via MuleSoft, AWS API Gateway, and AWS Lambda
    • Designed secure multi-VPC AWS architectures with hub-and-spoke topology, Transit Gateway, IPSec VPN, Route Tables, and NACLs
    • Provisioned infrastructure with Terraform, Pulumi, CloudFormation, and AWS CDK across VPC, Lambda, IAM, and Route 53

    Led API-first architectural vision for a major international insurance group, delivering secure and scalable multi-tenant platforms using Java, Kotlin, Scala, Node.js, and Python. Architected distributed backend systems with event-driven messaging and transformed legacy SOAP services into cloud-native REST/gRPC APIs.

  9. Senior Software Engineer

    4Sight Technologies

    Stack (5 tools)

    LabelUsed
    Kubernetes1
    Terraform1
    Jenkins1
    Grafana1
    Prometheus1
    • Designed and implemented microservices architectures and integration patterns for enterprise clients using DDD and Clean Architecture principles
    • Guided adoption of Agile/Scrum, CI/CD pipelines, and DevOps practices across cross-functional teams
    • Introduced Docker, Kubernetes, and Terraform in early-adoption contexts for infrastructure automation
    • Provided technical guidance to project managers and developers, aligning IT strategy with business objectives

    Contributed to the design, planning, and governance of strategic enterprise services and components across multiple US and Colombian clients. Led adoption of microservices architecture, DDD, Agile methodologies, and early DevOps practices including Docker, Kubernetes, and Terraform.

  10. Senior Analyst Programmer

    Bull (Atos Group)

    • Designed and implemented key modules for a web-based employee task assignment system using IBM iRules for rule-based logic
    • Re-architected Controller-View layer in Java/J2EE (Spring, JSF, Hibernate, XHTML, Oracle SQL) to improve responsiveness and maintainability
    • Developed custom Servlet entry points and XHTML templates for improved UI consistency and performance
    • Extended application features for operational workflows — train dispatch, station events, medical coordination, incident tracking

    Contributed to development of a large-scale enterprise application for Metro de Madrid as part of the SIAR initiative — a critical operational management system for train dispatch, station events, medical response coordination, and incident tracking.

  11. Advanced Analyst / Programmer

    Everis (NTT Data)

    • Developed key modules for task assignment and workflow management using Java/J2EE, Spring, JSF, Hibernate, and Oracle SQL
    • Implemented IBM iRules-based rule engine logic for dynamic employee scheduling and task dispatch
    • Optimized Controller-View architecture patterns, enhancing application modularity and responsiveness
    • Contributed to UI consistency through custom Servlet endpoints and XHTML templates

    Contributed to the SIAR initiative for Metro de Madrid — a large-scale Java/J2EE enterprise application for optimizing employee task assignments, operational workflows, and incident tracking within the metropolitan transit network.

Full Stack

LabelCategory coverage
Aikido Security2
Argo CD2
Astro1
AWS1
Microsoft Azure2
BetterStack2
Checkov2
Cilium1
Cosign1
Datadog2
Drata2
External Secrets Operator2
Falco2
Fermyon1
Google Cloud2
GitHub Actions1
GitLab CI2
Grafana2
Grype1
Helm2
Hunters SIEM2
Istio2
Jenkins2
Karpenter1
Kubernetes2
Kubescape2
Kustomize2
Nanostores1
Open Policy Agent2
OpenTelemetry1
Prometheus2
Pulumi2
Semgrep2
Snyk2
SonarQube2
Spacelift2
Spin1
Syft1
Teleport2
Terraform1
Terramate1
Three.js1
Trivy1
Twingate2
TypeScript1