Internal title: Technology Expert in Development and Operations. DevOps engineer within the SAFe System Team Squad, supporting the development squads and acting as the liaison with the different security teams — a role that evolved into Environments and Security SPOC.

DevOps (2025)

• Deployed and operated Kafka on Kubernetes with Helm, with secrets managed in AWS Secrets Manager.
• Hardened the event streaming platform by migrating its authentication to the mTLS protocol, and built a Python / AWS Lambda automation that generates, signs and distributes internal certificates, reinforcing security end-to-end.
• Consolidated standalone Kafka Connect instances into a centralized Kafka Connect cluster, standardizing how connectors are deployed and operated.

Environment SPOC (2026)

• Reduced synchronization incidents between production and non-production environments in the vast majority of cases, improving delivery times and the development teams' day-to-day experience.
• Defined, documented and implemented processes for provisioning and managing non-production environments, improving their governance and auditability.
• Held regular meetings with the different stakeholders to understand their needs and continuously improve the processes for a better experience.

Security SPOC (2026)

• Managed SAST and DAST findings and security notifications from the company's global security teams, acting as the liaison between technical and security teams.
• Built AI agents in VS Code connected to an internal security API to retrieve findings and their evidence, so engineers assess them faster and spend less time on false positives.

• Covered SRE, DevOps, Platform Architecture and Level 3 support in a small team without dedicated specialists, and acted as Platform Architect for scalable infrastructure.
• Ran containerized workloads on Docker and AWS EKS, provisioning and managing the infrastructure with Terraform.
• Built and maintained CI/CD pipelines with GitLab CI and GitHub Actions, and drove the implementation of an SSDLC.
• Implemented monitoring and observability with Grafana, and automated key processes with Python.
• Oversaw the migration of services to AWS and SAP, working with developers and other departments.

Embedded with the security team of an international sporting goods and apparel retailer, moving from Senior DevSecOps into a Cybersecurity Analyst role.

• Monitored security incidents, vulnerabilities and compliance across the infrastructure, and prepared response plans for 0-day incidents.
• Built custom in-house hardened Docker images, and helped developers secure their code, Dockerfiles and GCP services.

Embedded with the security team of an international sporting goods and apparel retailer.

• Kept services highly available for an international sports retailer on Kubernetes, GCP and AWS, resolving platform, security and code incidents.
• Implemented the monitoring and observability service (logs, metrics and distributed traces) for the deployed applications.
• Evaluated and implemented CI/CD tooling (Jenkins, Google Cloud Build, Flux CD, GitLab, GitHub Actions) and provisioned infrastructure with Terraform.
• Rotated the keys of all service accounts on GCP and AWS, and responded to 0-day CVEs and security patches.

• Migrated APIs and services from VMs to a Kubernetes architecture on Google Cloud (GKE), automating Docker image creation and improving the CI/CD workflow.
• Covered 24/7 shifts to keep the service running while processing large volumes of data, and improved security and access.

Delivered from a technology hub serving an international insurance company.

• Migrated projects from the client's on-premises data center to a container platform in the cloud, hardening images and building a new CI/CD workflow.
• Part of the day-shift Level 3 incident response team for Europe, with occasional support for the Japan branch; worked in English.
• Supported over 15 development teams, and took part in CAB meetings, post-mortems and disaster recovery simulations.

Worked from a technology hub serving an international capsule coffee brand.

• Migrated on-premises services to Azure, creating a custom Docker image and documented process for each one, and reviewed build, test and deploy pipelines (Python, Bash, Groovy).
• Implemented Jenkins with on-demand build agents on Kubernetes, replacing static slaves and reducing idle infrastructure costs.
• Worked within the QA team, automating the build pipelines for the iOS and Android apps.

• Led the backend and systems team, evaluated new technologies and reported KPIs to the board and stakeholders.
• Introduced microservices and DevOps practices on Kubernetes to remove outages when deploying new versions, and adapted systems to GDPR.

• Maintained and continued developing the existing platform, adding new features such as the Redsys payment integration.
• Migrated everything from physical servers to virtual machines on Google Cloud.

• Maintained web apps and developed a new platform for a local eco-friendly association.