AWS architecture, Linux operations, automation, observability and AI-assisted development—grounded in production systems, published field notes and continuous learning. I connect design decisions with the realities of running, securing and paying for systems.
Evidence behind the keywords
Practical experience and documented learning. Certification status is shown in the dedicated archive.
From bare-metal origins to a private S3/CloudFront platform: I design for scalability, recoverability and cost. Serverless components handle background work while the public request path stays simple.
CloudFormation stacks, IAM boundaries and signed origin access
Versioned storage, repeatable releases and recovery paths
DNS, health checks, load balancing and edge caching connect application behavior to the network. My Akamai project offloaded roughly 90% of requests from the origin during highly variable traffic.
Cache policies, TTL tuning and origin offload
Route 53, ALB health checks and HTTPS troubleshooting
From early C++ development to Linux administration, VMware virtualization and storage troubleshooting. I look beyond CPU utilization to I/O wait, worker saturation and shared-storage constraints.
Linux · Storage · VMware
EFS burst credits, throughput modes and capacity trends
EBS volumes, ext4 filesystems and bare-metal consolidation
I turn recurring operational work into repeatable code and deployment workflows. CloudFormation and Python power this site; Ansible, Puppet, Git and GitLab CI/CD belong to my broader automation toolkit.
Python · Puppet · Ansible · CI/CD
Infrastructure as Code, configuration management and CI/CD
AWS CDK coursework complements practical CloudFormation work
Infrastructure as CodePythonAnsiblePuppetGitGitLab CI/CD
Monitoring should help responders act before customers report a problem. My experience spans Nagios, Zabbix, Checkmk, Grafana, Prometheus, ELK and CloudWatch.
TLS expiry, service health, SNMP diagnostics and trend analysis
Actionable alerts, escalation paths and 24/7 on-call response
Shift-left security combines security linting, dependency awareness and engineering review. I focus on actionable findings, least privilege and verified updates rather than treating a passing scanner as proof of security.
Dependabot triage, lockfiles and reproducible builds
Secure defaults, narrow IAM policies and automated quality gates
Container training and hands-on labs in Docker, Kubernetes and AWS container services. My focus is understanding how workloads are packaged, deployed and operated across a platform.
Containerization, orchestration and service deployment concepts
Kubernetes the Hard Way and documented ECS/Fargate training
Codex helped me build Kraftwerk, digitize handwritten training notes and rebuild this site. Recent coursework extends that practical work into Claude Code, agent orchestration, RAG, MCP and Amazon Bedrock.
Human review, tested outputs and clear agent handoffs
Prompt engineering, multimodal input and Python/Streamlit coursework
I have led systems-administration teams, supported 24/7 operations and guided infrastructure change. Scrum Master and IT Escalation Manager roles connect technical decisions with prioritization, communication and incident response.
Professional Scrum Master I, earned in 2023
Knowledge sharing, architecture guidance, German and English