Interactive Engineering Capability Map

Architect and operate enterprise on-premises OpenShift 4 clusters supporting mission-critical workloads. Execute zero-downtime HA control plane and MachineConfigPool worker upgrades, configure OAuth/Corporate SSO, and enforce multi-tenant guardrails.

Deep control-plane and workload orchestration expertise spanning stacked etcd HA bare-metal clusters, Rancher RKE2, Cluster API, and fleet-scale multi-cluster governance.

Engineered converged application platforms running virtual machines alongside containerized microservices on OpenShift, enabling application teams to modernize legacy VM workloads without dual-stack operational overhead.

Provisioned and operated 60+ managed clusters across Google Kubernetes Engine (GKE), Azure Kubernetes Service (AKS), Amazon EKS, Anthos, and Rancher multi-cluster control planes.

Architected declarative, zero-drift continuous delivery across Single-Node OpenShift (SNO) staging and multi-node HA production clusters using Argo CD ApplicationSets, sync waves, and PR-driven ephemeral preview environments.

Engineered reusable, serverless Kubernetes-native CI pipelines on OpenShift Pipelines (Tekton) for automated source builds, vulnerability scanning, OCI image signing, and GitOps manifest updates.

Built standardized pipeline-as-code templates across GitLab CI/CD, GitHub Actions, Azure Pipelines, and Kubernetes-hosted Jenkins controllers with dynamic agent pods.

Authored reusable Helm charts and environment-specific Kustomize overlays to promote workload consistency across INT, QA, Dev, UAT, and Production clusters without duplicating YAML.

Built and scaled an Internal Developer Platform using Port that enables developers and application owners to self-service OpenShift namespaces, quotas, and onboarding workflows without manual platform tickets.

Designed and deployed in-cluster autonomous AI SRE agent crews using Python, CrewAI, K8sGPT, kubectl-ai, kagent, and local GPU-accelerated Ollama LLMs to continuously monitor Golden Signals, diagnose pod failures, and execute guarded remediations.

Automated repetitive platform operations using Python, Go templates, Bash, and Kubernetes/OpenShift REST APIs to eliminate operational toil and standardize application onboarding.

Designed and operated enterprise secrets management architectures integrating HashiCorp Vault and Azure Key Vault with External Secrets Operator (ESO), eliminating hard-coded secrets from Git repositories and CI pipelines.

Replaced default cluster-admin credentials with enterprise OAuth/OIDC SSO identity providers, group-based RBAC bindings, restricted Security Context Constraints (SCCs), and zero-trust NetworkPolicies.

Enforced end-to-end software supply chain integrity by scanning images with Trivy/Snyk, hosting private OCI artifacts in Harbor, signing images with Sigstore Cosign, gating admissions via OPA Policy Agent, and monitoring cloud posture with Wiz CNAPP.

Engineered unified monitoring, metrics, alerting, and centralized log aggregation stacks across Kubernetes and OpenShift clusters to track Golden Signals, detect resource saturation, and accelerate root-cause analysis.

Implemented enterprise backup, immutable snapshot replication, and disaster recovery orchestration using Veeam Kasten K10 to protect stateful Kubernetes applications, PVCs, and OpenShift Virtualization VMs.

Deployed and operated self-healing distributed storage platforms using Ceph (RBD/CephFS/RGW) and SUSE Longhorn to provide replicated persistent block and file storage for bare-metal and hybrid Kubernetes clusters.

Architected standardized GCP landing zones, shared VPC topologies, IAM/Workload Identity boundaries, and GKE/Anthos fleets supporting 200+ production and non-production projects.

Led multi-cloud architecture and migration initiatives across Microsoft Azure and AWS at Hewlett Packard Enterprise, designing highly available compute, hub-spoke networking, and cost-optimized workloads.

Deep foundational networking expertise from Cisco routing/switching to Kubernetes CNI (Calico/OVN-Kubernetes), Istio service mesh, OpenShift Routes/Ingress, and bare-metal HAProxy + Keepalived VRRP failover.

Authored and maintained enterprise Terraform module registries provisioning VPCs, IAM roles, GKE/AKS/EKS clusters, and database infrastructure across GCP, Azure, and AWS.

Automated bare-metal and VM day-0/day-2 operations using idempotent Ansible roles and SaltStack states—bootstrapping HA Kubernetes/RKE2 clusters, external Ceph storage, and self-hosted GitLab instances.