Unstoppable execution: delivering exactly what the business infrastructure demands.

• Infrastructure as Code (IaC): Architecting hybrid-cloud K3s clusters with GitOps (ArgoCD) for automated, state-driven infrastructure management.
• Security Operations (SOC): Implementing threat detection and monitoring using Wazuh (SIEM/XDR). Deploying agents for real-time integrity monitoring and vulnerability assessment.
• Secure Networking: Implementing Zero Trust connectivity using Tailscale (Mesh VPN) and Tailscale SSH for hardened infrastructure access.
• Security Standards: Exploring OWASP ASVS (L1-L3) to ensure application-level security, utilizing FFI to integrate memory-safe Rust modules into cross-platform Flutter applications.
• Cloud-Native Networking: Advanced troubleshooting of CNI (Flannel) and Tailscale Mesh VPN integration, resolving Netfilter/Firewalld isolation and complex routing conflicts.

• Languages: Go, Rust, Express, TypeScript, Bash.
• Systems: Linux (AlmaLinux, Debian, Ubuntu).
• Security & SOC: Wazuh (SIEM/XDR), Lynis (Hardening index: 80%), Kali Linux, Tails.
• Infrastructure: Kubernetes (K3s), Containerization (Docker/Podman), GitHub Actions (CI/CD), ArgoCD, Tailscale.
• Data Stores: Redis, MySQL, PostgreSQL, MongoDB.
• Frontend: Next.js, React, Tailwind CSS, Flutter.

I maintain a private K3s cluster with a fully automated GitOps pipeline. All services are deployed via ArgoCD with strict environment separation (Staging/Production) and professional secret management.