2. DevOps & Infrastructure

Automates ArgoCD deployment and management via App-of-Apps pattern, including bootstrap Applications and GitOps workflows for Kubernetes.

Optimizes cloud infrastructure costs through resource rightsizing, tagging, reserved instances, and spending analysis for cost governance.

Configures secure private GKE clusters with Workload Identity, Shielded Nodes, and Binary Authorization using Terraform for Google Cloud infrastructure.

Reduces GitHub Actions execution time and costs by skipping unnecessary steps through content change detection and build caching.

Provides a security hardening guide for Google Kubernetes Engine (GKE) using Pulumi, covering private clusters, Workload Identity, and network policies.

Provides step-by-step instructions for accessing Rackspace Spot Kubernetes cluster, including installation, authentication, and debugging commands.

Recovers Terraform state after infrastructure recreation, resolving orphaned resources, state drift, and cluster recovery during apply failures.

Provides best practices for running GitHub Actions runners on Rackspace Spot Kubernetes, emphasizing cost optimization and preemption resilience.

Provides defensive programming patterns for Bash scripts to ensure reliability in production environments and CI/CD pipelines.

Provides disposable runner patterns for GitHub Actions with container-based, VM-based, and ARC deployment strategies and state isolation.

Configures Prometheus for comprehensive infrastructure and application metric collection, storage, and alerting system setup.

Provides production-ready release workflows with signed releases, SLSA provenance, and artifact attestations for secure software supply chain integrity.

Automates final release steps including closing issues/PRs, creating GitHub releases with changelogs, and finalizing documentation.

Creates production-ready Kubernetes manifests for Deployments, Services, ConfigMaps, and Secrets following security best practices and industry standards.

Architects multi-stage CI/CD pipelines with approval gates, security checks, and deployment orchestration for secure, automated software delivery.

Creates reusable Terraform modules for cloud infrastructure provisioning on AWS, Azure, and GCP, adhering to IaC best practices.

Executes Taskfile commands for Terraform infrastructure operations (init, plan, apply, destroy) and project development tasks (backend, frontend, testing, linting) in Summerhouse.

Automates project initialization by validating prerequisites, executing setup.sh, and renaming templates with preflight checks for reliable setup.

Manages Vercel deployment workflows for web applications, including staging/production deployment, progress monitoring, and post-deployment verification with safety checks.

Configures secure, high-performance connectivity between on-premises infrastructure and cloud platforms using VPN and dedicated connections for hybrid cloud architectures.

Coordinates runner configuration updates across repositories to ensure workflow labels match runner scale set names for seamless CI/CD pipeline management.

Manages Vercel frontend app deployments including CLI, environment variables, configuration, and rollback capabilities.

Optimizes CI/CD and platform engineering automation through idempotency, safe retries, and work avoidance to skip unnecessary operations.

Manages Vercel deployments for frontend applications with CLI, environment variables, configuration, and rollback capabilities.