// Staff Platform Engineer
Platform/DevSecOps/SRE engineer with extensive expertise in development, integration, deployments, monitoring, and security. Kubernetes gigachad. Golang wizard. Blockchain connoisseur.
$ Built Linea Edge EKS clusters in different AZs hosting P2P EL/CL nodes, defining a clear separation between core infrastructure and public-facing P2P nodes.
$ Built GitOps stack with ArgoCD, GitHub Actions and AWS IAM using "Apps of Apps" pattern for seamless K8s deployments.
$ Implemented rigorous RBAC policies for Kubernetes and ArgoCD relying on OKTA and AWS IAM.
$ Implemented Web3Signer REST service in a restricted AWS account with HSM for signing core transactions.
$ Contributed to Infura's Kubernetes Operator enabling seamless blockchain node scaling, syncing, backup and peer discovery.
$ Implemented Karpenter across all EKS clusters replacing AWS ASG; reduced overall infrastructure costs by 60% via Spot instances.
$ K8s security hardening: NetworkPolicies, Istio service mesh, Velero, VolumeSnapshot CronJobs, External Secrets Operator.
$ Created a pod autodiscovery service multiplexing CL engine API requests to all pods enabling out-of-sync pods to resume syncing.
$ Engineered a GitOps framework leveraging GitHub Actions, AWS IAM, AWS OIDC and AWS SSM, orchestrated with Terraform.
$ Designed and launched a complete observability platform: Grafana, Prometheus, Telegraf, InfluxDB, Loki and Grafana Pyroscope.
$ Developed backend Go codebase integrating aws-sdk for AWS interaction and go-ansible to provision services on EC2 instances.
$ Among the top 5 core contributors to the now deprecated Polygon Edge project.
$ Architected a comprehensive network stress testing and TPS benchmark framework with real-time Slack notifications per deployment.
$ Led the team in developing Terraform code for the Polygon Edge AWS Quick Start project.
$ Led the team in creating Helm Charts for Polygon Edge.
$ Designed and implemented core services on an on-prem VMWare cluster including routing, firewall, security, VPN and Veeam D&R backup.
$ Deployed IPAM, IDP and IDS solutions; managed a team of 5 engineers.
MikroTik router automated discovery and backup service.
Teams Direct Routing SBC — connect your PBX with MS Teams.
Run scripts on EC2 instances without direct SSH access via AWS SSM.
Veeam B&R metrics exporter for InfluxDB and Grafana observability.
Block utilization and TPS benchmarking tool for any EVM-compatible chain.
Filter and export VMware vCenter VMs to an Excel report.
K8s admin swiss knife — VolumeSnapshot from PVC, k9s plugin (wip).