Senior Platform & DevSecOps Engineer

I own architecture and Linux security engineering for a Go-based robotics runtime.

My work covers process isolation, least privilege, cryptographic trust, reproducible execution, namespaces, seccomp-BPF, Landlock, cgroups v2, RFCs, ADRs, and automated validation across application, runtime, and kernel boundaries.

I build a Kubernetes-native Go project for workload observation and least-privilege policy engineering.

I use eBPF, Landlock, seccomp, CRDs, operators, and end-to-end validation. I also contribute upstream to the Kubernetes Security Profiles Operator, including maintainer-reviewed work on syscall observation and coverage semantics.

I led the security workstream within a 15-person Platform Engineering team operating shared multi-tenant cloud platforms.

I industrialized more than 70 reusable Terraform modules and AWS account baselines, integrating GitLab CI, Checkmarx SAST, and Checkov infrastructure-as-code controls. These improvements increased pipeline security posture by more than 80%.

I built and led an SRE practice focused on SLO and SLI design, observability, incident analysis, and post-incident reviews.

I advised engineering teams on reliability practices, operational risk, and continuous improvement of production systems.

I led the AWS migration of approximately 10 business-critical applications as part of a pan-European cloud program.

I designed an AWS Control Tower Landing Zone and standardized a multi-account cloud architecture with IAM and security baselines.

I operated business-critical infrastructure and CI/CD platforms in a regulated financial-services environment.

My responsibilities included reliability operations, incident handling, change management, and compliance support.

I designed and operated CI/CD platforms supporting robotics engineering teams.

I automated Linux system administration, software delivery, and monitoring workflows to improve engineering efficiency and platform reliability.

I administered Linux production systems and CI/CD pipelines.

I improved automation practices and operational reliability for production environments.

I administered large-scale Linux environments across industrial engagements.

I deployed and supported CI/CD platforms, automation workflows, and production infrastructure operations.

Digital MBA program focused on technology leadership.

Engineering degree in systems and networks.

Technical degree in software solutions and applications.