Architect / DevSecOps / Applied AI
Cloud Solutions Architect
From complex ideas to cloud systems that ship.
I design, automate, and deliver secure, scalable platforms on AWS and Azure, building security and compliance into every stage.
01 / The starting point
Technology caught my attention early. By twelve I had taught myself to code, and running Minecraft servers became my first real lesson in infrastructure, automation, troubleshooting, and system design.
That curiosity grew into a career that started in DevOps and moved into cloud architecture, security, and AI. Today I like to own problems end to end: I work with product and engineering teams to turn ideas into production-ready software, from the first architecture decision through implementation, troubleshooting, and delivery.
The mindset: continuous improvement, useful failures, and constant adaptation.02 / Experience
Ewents
Architected a FedRAMP 20x continuous-compliance platform that validates AWS, Okta, GitHub, and other services against NIST SP 800-53 controls. Led the design of the multi-account AWS landing zone and a federated identity service, and built zero-trust authentication, multi-tenant data isolation, and DevSecOps CI/CD with automated security gates.
Globant
Built multi-region Terraform for an enterprise GenAI platform on Azure with private-only networking, led releases of a production RAG API, and built an AI usage and cost analytics platform. Administered 1,000+ Azure subscriptions and the organization's ChatGPT Enterprise and Claude Enterprise plans.
Parallel Staff
Migrated .NET applications to containers, running 100+ Windows containers, and automated customer deployments with Terraform. Improved cloud cost management, networking, and observability with Grafana.
Endava
Progressed from intern to senior technician while automating infrastructure with Terraform and CI/CD pipelines, running 25+ microservices on Kubernetes, and delivering secure Azure and AWS environments.
Software Engineering
Universidad Tecnológica Nacional
03 / Practice
Multi-account AWS landing zones, multi-region Azure platforms, private networking, identity, and event-driven services, designed for scale and governance.
Security built into delivery: CI/CD security gates, zero-trust authentication, least-privilege access, and compliance as code mapped to FedRAMP 20x and NIST SP 800-53.
Production RAG services, Azure AI Foundry solutions, and AI usage and cost analytics, plus administering enterprise AI platforms across the organization.
04 / Credentials
Sixteen credentials that mark the path across cloud architecture, DevOps, containers, data, and AI. Each part of the record belongs here.
Issued Feb 2026
Verify credential ↗
Issued Dec 2024
Verify credential ↗
Issued Nov 2024
View achievement ↗
Issued Jun 2024
View achievement ↗
Issued Apr 2024
View credential ↗
Issued Oct 2023
Verify credential ↗
Issued Jul 2023
View credential ↗
Issued Jul 2023
Verify credential ↗
Issued Jul 2023
Verify credential ↗
Issued Jul 2023
Verify credential ↗
Issued May 2023
Verify credential ↗
Issued Apr 2023
View credential ↗
Issued Dec 2022
View credential ↗
Issued Oct 2022
View credential ↗
Issued May 2022
View credential ↗
Issued Mar 2022
Verify credential ↗05 / This site
A personal site built with plain HTML, CSS, and JavaScript, with no framework or build step. It ships through the same infrastructure-as-code and DevSecOps practices I use at work.
Terraform provisions an Azure Storage static website behind Azure Front Door, with a custom domain and managed HTTPS, and publishes only the public files.
CodeQL analyzes the code and Gitleaks scans the full Git history for secrets on every push and every week.
Every pull request and push validates the site files and the Terraform formatting and configuration.
GitHub Actions signs in to Azure with OIDC federation, so no cloud secrets are stored, uploads with a least-privilege role, and then checks the live site's health endpoint.
06 / Contact