Cloud Engineer
Cloud Engineer specializing in building secure, scalable and cost-optimized AWS-based cloud solutions that drive measurable business impact. Demonstrated success in reducing operational costs, implementing infrastructure automation, CI/CD optimization and building comprehensive observability solutions that enhance security and compliance.
I thrive in environments that value curiosity, continuous learning and knowledge sharing, where motivated and forward-thinking people build solutions that make a meaningful impact.
Cloud infrastructure, services and best practices
System administration, scripting and automation
Logging, monitoring and data analysis
Version control and collaboration workflows
Infrastructure as Code and automation
CI/CD pipelines, automation workflows and DevOps practices
Full professional proficiency
Native proficiency
Mix of personal and professional projects
Built this resume website as part of the Cloud Resume Challenge (AWS edition), a full-stack project using AWS services, Terraform, CI/CD with GitHub Actions, and serverless architecture. The site is hosted on S3 behind CloudFront and Route 53, secured with SSL certificate managed by AWS Certificate Manager. It includes a live visitor counter backed by Lambda and DynamoDB
Designed and implemented a secure, scalable and auditable authentication mechanism for production databases using IAM and SSO, replacing MySQL native password-based authentication to meet audit requirements
Implemented a secure and federated access mechanism for EC2 instances using AWS SSM Session Manager integrated with IAM Identity Center (SSO). Developed custom SSM documents to tailor session behavior and logging, and defined fine-grained IAM policies with resource tagging and condition keys to enforce least privilege.
Built an end-to-end monitoring and alerting solution using custom Terraform modules for EC2, EKS and AWS API activity with ADOT, Amazon-managed Prometheus and Grafana, AWS CloudTrail, AWS CloudWatch and SNS
Built a company-wide SIEM solution using the ELK stack (Elasticsearch, Logstash, Kibana), integrating AWS services, identity providers, security platforms and other third-party tools to enable centralized logging, end-to-end traceability and compliance with audit requirements.
Built Logstash pipelines and fine-tuned index settings —including sharding and field mappings— to optimize indexing and search performance. Customized Elasticsearch Index Lifecycle Management (ILM) policies across environments to improve log and metric retention strategies, reducing storage costs and saving the company over $150,000 annually.