Platform Engineer · Delivery infrastructure for regulated environments — I build what other engineers ship on: Terraform-managed cloud estates, CI/CD pipelines, and the metrics that tell a team whether it got faster.

Eight years shipping in environments where releases have to be defensible — connected medical devices, patient data, and mobility data at scale. Comfortable owning the whole path from terraform apply to the deploy workflow to the dashboard.

📍 México · remote, US time zones 💼 Available for contract engagements 📫 LinkedIn

Infrastructure as code — Terraform · AWS CloudFormation · module design · state and drift management

CI/CD & delivery — GitHub Actions · Azure Pipelines · release-train branching · container image build and promotion · deployment workflows

Cloud — AWS (Batch, ECR, S3, Secrets Manager, CloudFormation, OIDC federation) · Azure (DevOps, SQL, Synapse) · Docker

Security & access — OIDC workload identity · secrets management · RBAC and read-only tiers · supply-chain hardening · credential rotation

Delivery engineering — DORA metrics · value-stream mapping · CD discovery · monolith decomposition

Languages — Python · SQL · TypeScript · Go

• Fourth-highest of 13,941 commits across 35 contributors on a connected medical-device platform, shipping on a release-train cadence under documentation and traceability requirements.
• Replaced long-lived deploy credentials with OIDC workload identity, authoring the CloudFormation templates and baseline GitHub Actions workflows a team now deploys through.
• Drove supply-chain hardening on a connected-device platform, removing an arbitrary-execution path at install time across the build.
• Own a Terraform-managed estate — Snowflake with Apache Iceberg tables, AWS Batch compute, ECR image delivery, Secrets Manager — on an engagement running since 2018.
• Contributed to a group DORA metrics and value-stream mapping initiative, including CD discovery across active and legacy repositories.

• sshclip — an ssh wrapper that translates remote OSC 52 sequences into the local X11 clipboard, for terminals that don't support it.