lexor

Brought 100% of the infrastructure under code control and slashed provisioning times by architecting a modular Terraform/Terragrunt framework from scratch, fully importing and describing the entire ecosystem into code, and leading high-level architectural designs for new global sites, clouds, and Kubernetes clusters. Eliminated 100% of manual configuration management and established a real-time, zero-maintenance single source of truth by engineering an automated CMDB ecosystem leveraging NetBox, integrating it with Terraform and a custom Python microservice. Secured real-time, automated host resolution across all environments by polishing core Ansible roles and introducing a dynamic inventory integrated directly with the NetBox CMDB API. Dramatically reduced production deployment incidents by architecting a GitOps model that routed all Ansible and Terraform updates through automated GitLab CI/CD pipelines with mandatory peer reviews. Slashed cluster provisioning time and standardized hot-priority operations by leading high-level architectural designs for new global sites, clouds, and Kubernetes clusters. Established secure, zero-downtime deployment pipelines with real-time observability by deploying Flux CD and standardizing workload monitoring.

Unlocked enterprise revenue in secure, air-gapped environments by designing, implementing, and supporting a unified on-premise software product, featuring a custom Kubernetes-based architecture and a companion CLI tool (written in Python) to orchestrate automated installation, lifecycle updates, and disaster recovery. Accelerated delivery and GitOps adoption for the main cloud DevOps team by building robust Terraform and Terragrunt pipelines and deploying/configuring their core Argo CD environments.

Minimized developer cognitive load and accelerated onboarding by designing and implementing an Internal Developer Portal (IDP) based on Backstage, delivering automated self-service pipeline provisioning and standardized platform capabilities. Eliminated legacy Windows server dependencies and modernized hosting by installing and supporting an on-premises OpenStack private cloud to host highly available Kubernetes clusters deployed via Kubespray. Enhanced data-layer performance and cut operational overhead by migrating Kafka, PostgreSQL, and RabbitMQ into Kubernetes clusters managed via operators, while significantly reducing latency by moving Elasticsearch, ScyllaDB, and Redis to high-speed NVMe-backed VMs using custom Ansible roles keeping all of them up-to-date. Enabled comprehensive, end-to-end platform observability by designing and implementing unified APM dashboards that consolidated metrics, logs, and traces from the core monitoring system. Secured faster network response and granular user access control by redesigning the legacy corporate VPN architecture and implementing Cloudflare Zero Trust. Consolidated sprawling hybrid infrastructure across Azure, GCP, and on-premises (OpenStack) into a single, drift-free IaC blueprint using Terraform, Terragrunt, and Ansible. Accelerated deployment speeds by migrating system delivery to a GitOps model via Argo CD and deploying centralized Prometheus, Grafana, and ECK monitoring. Mentored a high-performing DevOps team while managing multi-cloud budgets, vendors, and driving cross-functional SLO/SLI adoptions.

Accelerated application delivery and simplified platform operations by deploying, supporting, and upgrading an on-premises OpenStack private cloud integrated with a self-managed OpenShift PaaS layer directly on top of it. Eliminated manual VM provisioning and standardized deployment patterns by introducing Infrastructure as Code (IaC) via Terraform and Terragrunt, alongside designing shared Ansible roles for infrastructure and DevOps teams. Boosted platform availability and minimized incident MTTR on a high-traffic platform by automating container deployments via GitLab CI/CD. Optimized backend data layer performance under heavy traffic spikes by fine-tuning MariaDB, ClickHouse, Redis, and Cloudflare configurations.

Reduced infrastructure hosting costs and modernized application delivery by leading the migration of legacy workloads from LXC to Docker, enabling more native, dense, and transparent hosting of multiple applications per server. Accelerated developer onboarding and eliminated environment drift by designing and automating local development environments using docker-compose, enabling new engineers to spin up the entire application stack locally in minutes. Enabled uninterrupted, automated daily releases by optimizing GitLab CI/CD workflows and parallelizing test stages.

Delivered client-recognized, compliance-heavy automated releases for a major bank by building dynamic, custom Python-driven GitLab CI/CD approval pipelines. Improved internal engineering velocity by building and maintaining scalable bare-metal Kubernetes and Ceph storage clusters.