╔══════════════════════════════════════════════════════════════╗
║ PRINCIPAL CLOUD ENGINEER // AWS · K8s · IaC ║
╚══════════════════════════════════════════════════════════════╝

I'm Marcin Cuber, a Principal Cloud Engineer · DevOps based in London, with deep expertise in designing and operating cloud-native infrastructure at enterprise scale. I specialise in AWS, Kubernetes, and Infrastructure as Code — building platforms that are secure by design, observable by default, and automated end-to-end.

I work across the full infrastructure stack: from multi-account AWS landing zones and EKS cluster design, to GitOps pipelines, cost optimisation, and zero-trust security models. I'm equally comfortable in the weeds of a kubectl debug session and in a whiteboard architecture review.

name: Marcin Cuberlocation: London, UKgithub: github.com/marcincuberlinkedin: linkedin.com/in/marcincuberfocus: Cloud Platform · DevSecOps · SRE · GitOps · FinOpsphilosophy: "Any fool can write code that a computer can understand. Good programmers write code that humans can understand."— M. Fowleropen_to: Collaboration · Open Source · Architecture discussions

AWS services I work with daily:EKS · EC2 · S3 · RDS · Lambda · VPC · IAM · CloudFront · Route53 · SQS/SNS · ECS · Secrets Manager · CloudWatch · Control Tower · Organizations · GuardDuty · Security Hub · Directory service

Azure services:Azure Active Directory (Azure AD), now rebranded as Microsoft Entra ID · Azure OpenAI · Networks · AKS

• Production EKS cluster design, multi-tenancy, and hardening (CIS benchmarks, Pod Security Standards)
• Helm chart authoring and lifecycle management via ArgoCD / FluxCD
• Service mesh with mTLS, traffic management, and full observability
• Cluster autoscaling with Karpenter and KEDA
• OPA / Gatekeeper policy enforcement and admission control

• Authoring reusable Terraform modules and multi-environment landing zones with Terraform
• Managing state at scale with remote backends (S3 + DynamoDB, S3 with native locking, and Terraform Cloud), workspaces, and module versioning
• Policy-as-code with Sentinel and OPA
• Configuration management with Ansible across hybrid environments

• Designing GitOps workflows with ArgoCD and FluxCD for Kubernetes-native continuous delivery
• Building GitHub Actions pipelines with security scanning, drift detection, and automated rollbacks
• Blue/green and canary deployments, progressive delivery with Flagger
• OIDC-based keyless authentication between CI systems and cloud providers

• Full-stack observability with Prometheus + Grafana, ELK / OpenSearch, and NewRelic
• Distributed tracing with NewRelic, Jaeger, and AWS X-Ray
• SLO/SLI definition and error budget management following SRE principles
• Chaos engineering with AWS Fault Injection Simulator

• Zero-trust network architectures and least-privilege IAM at scale (ABAC, SCPs, Permission Boundaries)
• Secrets management with HashiCorp Vault and AWS Secrets Manager
• Supply chain security: image signing (Cosign), SBOM generation, Trivy / Snyk scanning in CI
• Compliance automation: SOC 2, CIS, NIST frameworks with AWS Security Hub and Config Rules

Python for automation and AWS Lambda · Bash for infrastructure scripting ·

► Multi-account AWS landing zones with full governance (Control Tower + AFT)
► EKS platforms serving production workloads with 99.99% uptime SLAs
► GitOps-driven delivery pipelines with ArgoCD and FluxCD
► Kubernetes Go microservices with full mTLS via service mesh
► GitLab runner fleets on Kubernetes for scalable CI at scale
► Self-service internal developer platforms reducing deploy times by 70%+
► Multi-region active-active disaster recovery architectures on AWS
► Cost optimisation frameworks delivering 40%+ cloud spend reduction