Open to relocation worldwide5+ years shipping production apps for EU & US teamsFull ownership: code → cloud → launchRemote, across every timezone

Cloud & Security

Infrastructure that holds up, and access nobody should have.

Capabilities

Built, hardened, and monitored by the person who owns it.

Cloud & DevOps

AWSFirebaseGCPDockerKubernetesCI/CDTerraformNginxReverse Proxy

Security & Systems

Linux HardeningSelf-HostingRole-Based Access ControlAuditabilityServer Hardening

Data & Storage

PostgreSQLMySQLMongoDBRedisFirestoreSQLite

Why

Security isn't an afterthought.

Integrity by design.

For systems where correctness and auditability matter — result integrity, role-based access, and a clear trail of who did what.

You own it — no vendor lock-in.

Infrastructure as code, documented and reproducible. If you ever need to move providers or hand it to another team, you can.

Monitored and backed up, not hoped for.

Alerting and backups are part of the build, not a "we'll get to it" item on a backlog.

The same person who built it, maintains it.

No hand-off gap between the developer and the ops team — I wrote the code, so I can fix the code.

Process

A focused path from architecture to hardened, monitored infrastructure.

  1. Architecture Review

    Assess the current setup (or design a new one) against your actual traffic, team size, and growth plans.

  2. Threat Modeling

    Identify what actually needs protecting, and from whom — before spending effort on the wrong risks.

  3. Environment Setup

    Provision cloud infrastructure as code — repeatable, documented, not a one-off console session.

  4. CI/CD Pipeline

    Automated builds, tests, and deploys, so shipping is routine instead of risky.

  5. Hardening & Access Control

    Lock down servers, enforce role-based access, and remove standing privilege nobody needs.

  6. Monitoring & Backups

    Alerting for what matters, and backups you can actually restore from.

  7. Documentation & Handoff

    Clear runbooks so your team isn't dependent on me for every change.