SRE Lead • DevSecOps Architect
Aug 2022 – Present- Owned platform architecture for 12+ data centers running distributed services such as Kafka, Cassandra, MongoDB, Solr, and ZooKeeper.
- Owned the platform and operations behind the AI stack used by data-science and ML engineering teams — LLM gateway (LiteLLM), Langfuse tracing, vector databases — covering high availability, autoscaling, observability, guardrails and cost controls.
- Eliminated legacy single points of failure by redesigning critical services into highly available, fault-tolerant multi-data-center systems.
- Designed the Azure/AKS platform and migrated all Mesos/Marathon workloads to it — every application converted to Helm charts and hybrid traffic fronted by AGIC v2, routing internet traffic to both VM-hosted applications and Kubernetes services through a single ingress.
- Standardized regional high availability with HAProxy, VRRP, and Keepalived, then led the zero-downtime migration of the global traffic entry point from Oracle Dyn to Cloudflare Load Balancer.
- Single-handedly designed, built and operated a centralized logging system for 12+ data centers, routing application logs through local appenders to Kafka, then into central Logstash and Elasticsearch, sustaining 21M logs per hour.
- Established infrastructure and uptime monitoring with Datadog and Uptime Kuma to improve operational visibility and incident response.
- Automated infrastructure and service delivery with Ansible across both containerized (Docker/Podman) and host-based environments, reducing deployment friction and manual toil.
- Introduced Bitbucket Pipelines with self-hosted Remote Runners as a modern CI/CD path and laid the groundwork for migration away from legacy Jenkins workflows.
- Strengthened production security by adding subdomain takeover controls and enforcing SPF, DKIM, and DMARC policies.
- Executed zero-downtime LDAP storage migrations (BDB to HDB to MDB), preserving data integrity and service continuity.
- Introduced PgBouncer to take over connection pooling for a legacy PostgreSQL application, avoiding an application rewrite while hardening the database tier.
- Built internal platform products with Amazon Q, Claude, and GitHub Copilot, including:
- A Spring Boot and React status platform with Go-based agents for global latency and synthetic monitoring.
- A custom LDAP Manager UI built with React, shadcn/ui, and Tailwind CSS to simplify directory operations.
- Drove platform upgrades and infrastructure improvements that reduced operational toil and improved service reliability for globally used systems.