Infrastructure & Projects

A selection of systems I've architected, infrastructure I've automated, and tools I've built to make engineering teams faster and more reliable.

Global Kubernetes Fleet Management

Architected a multi-region Kubernetes setup using GitOps (ArgoCD) and Cluster API. Standardized deployments across 50+ clusters, reducing configuration drift to near zero and improving deployment velocity by 40%.

Kubernetes ArgoCD Terraform

High-Availability Postgres Topology

Designed and implemented a 99.99% available PostgreSQL cluster capable of 50k+ TPS. Utilized Patroni for automated failover, pg_bouncer for connection pooling, and continuous WAL archiving to S3 for point-in-time recovery.

PostgreSQL Patroni Linux/sysctl

Zero-Trust Network Mesh

Migrated legacy VPN-based access to a zero-trust architecture using Tailscale and Envoy proxy. Implemented identity-aware access controls for internal tools, drastically reducing the attack surface while improving developer experience.

Networking Envoy Security

Observability Pipeline in Rust

Built a custom, high-throughput log routing service in Rust to replace a heavily-resourced Logstash deployment. Reduced memory footprint by 85% and latency by 60% while handling 100k+ events per second.

Rust Vector Prometheus