AWS Architecture
EC2, VPC, S3, RDS, Lambda, Route 53, CloudFront, Transit Gateway, IAM, WAF and CloudWatch.
Cloud Platform Engineer
AWS · AZURE · GCP · TERRAFORM
AWS platforms that are secure by default and simple to operate.
I take cloud infrastructure from requirement to running system: Terraform for every environment, pipelines for every release, least-privilege access and monitoring from day one.
AWS SAACertified
Terraform + CI/CDInfrastructure automation
40%Faster deployments at BKS
4+ yearsHands-on AWS in production
0Hardcoded credentials, by design
10+ yearsOperations, finance & tech
HOW I BUILD
Infrastructure treated like software.
- Define it in code. Every resource lives in Terraform with remote state. Nothing is hand-built in the console.
- Review it. Changes go through Git and a plan before they touch an account.
- Automate delivery. Pipelines deploy, not people.
- Monitor the result. Dashboards, alarms and alerting ship with the stack.
ABOUT
Platforms that teams can trust and run.
I design, automate and operate AWS infrastructure, weighing security, reliability, cost and maintainability on every decision.
My work spans cloud networking, identity and access management, monitoring, high availability, disaster recovery and CI/CD. I turn business requirements into infrastructure that is documented, repeatable and easy for the next engineer to operate.
I also bring more than ten years across operations, finance and technology. That background is why I frame technical choices in terms of risk, cost and delivery speed, explain them clearly to non-technical stakeholders, and own a problem from first requirement to a running, monitored system.
CORE CAPABILITIES
Infrastructure, delivery, security and operations.
Infrastructure as Code
Terraform modules, reusable environments, remote state and multi-region stacks.
CI/CD & Automation
GitHub Actions, Jenkins, AWS CodePipeline, CodeBuild, Bash and Python.
Security
Least-privilege IAM, short-lived credentials, AWS WAF, secrets management, encryption and network segmentation.
Observability & Resilience
CloudWatch dashboards, logs and alarms, SNS alerting, RDS Multi-AZ and S3 Cross-Region Replication.
Engineering & Tooling
Python, REST APIs, Git/GitHub, GitHub Apps, JWT and event-driven automation.
EXPERIENCE
Professional impact.
2022 — 2026
Cloud Platform Engineer
BKS
- Cut deployment times by 40% by automating application delivery with CodePipeline and CodeBuild.
- Made infrastructure repeatable by provisioning and managing AWS in Terraform under version control.
- Raised resilience with CloudWatch monitoring, SNS alerting, RDS Multi-AZ and S3 Cross-Region Replication.
- Reduced attack surface through VPC design, least-privilege IAM, Security Groups and AWS WAF.
2021 — 2022
Junior Infrastructure Engineer
PCS
- Ran IAM access management, S3 backups, endpoint security and Conditional Access controls.
- Wrote technical documentation and resolved user-facing issues across business systems.
10+ years
Operations, finance & technology
- Commercial grounding that shapes how I weigh cost, risk and delivery speed in architecture decisions.
CERTIFICATION
AWS Certified Solutions Architect – Associate
Validated knowledge of secure, resilient, high-performing and cost-optimised AWS architectures.
SAA
SELECTED WORK
Systems I’ve designed and built.
Each one is provisioned end to end in Terraform. Source is kept private; I’m happy to walk through the design or demo any of them live.
01
Flagship project
AWS SERVERLESS • SECURITY • TERRAFORM
RepoSentinel — Policy-Controlled Repository Access Broker
Replaces long-lived Git credentials with short-lived, repository-scoped access that is requested, evaluated against policy, approved where required, issued, used and revoked. A Git gateway mints and enforces repo-scoped GitHub App tokens at clone time, behind an auditable grant state machine with replay protection.
02
AWS SERVERLESS • PYTHON • TERRAFORM
Serverless Intake Pipeline
API Gateway receives POST /intake, a Python Lambda validates the request and writes to RDS MySQL. No servers to patch, and nothing sensitive in the codebase.
03
AWS • SECURITY • TERRAFORM
Secure AWS Web Platform
Locked-down infrastructure as code: CloudFront and AWS WAF in front of the application, least-privilege access throughout, and automation that writes its own incident reports when something breaks.
04
AWS • NETWORKING • TERRAFORM
AWS Enterprise App Platform
A private three-tier stack (VPC → EC2 → RDS) provisioned entirely in Terraform, with application and data tiers kept off the public internet.
05
MULTI-REGION • RESILIENCE • TERRAFORM
AWS Multi-Region Resilient Platform
A production-shaped stack across Tokyo and São Paulo: ALB with real TLS, AWS WAF, a CloudFront CDN and cross-region Transit Gateway, all from one Terraform codebase.
06
AWS • STATIC HOSTING • CI/CD
Global Portfolio Hosting Platform
The site you’re reading: delivered through S3, CloudFront, Route 53 and ACM over HTTPS, deployed by pipeline with automatic cache invalidation on every push.
ARCHITECTURE
Designs across AWS, Azure and GCP.
Every diagram maps to infrastructure I’ve built and deployed in Terraform. Select one to view it full size.
ON GITHUB
Public repositories.
Pulled live from GitHub, so the latest public work always shows here.
Loading latest GitHub projects...
Unable to load GitHub projects.
CONTACT
Need someone to own your AWS platform end to end?
I’m open to remote Cloud Platform, DevOps and Infrastructure Engineering roles, and happy to walk through any project above in detail.