Senior infrastructure engineer with 10+ years building and operating production systems at scale — from architecture and IaC through observability, incident response, and mentoring across remote, globally distributed teams. I work the whole delivery path (application code → the pipelines that ship it → the infrastructure it runs on) with a security-first eye, and I like finding the sharp edge in a system and fixing it at the root.

• 🛠️ Modernizing legacy workloads into Dockerized services on Kubernetes / AWS EKS; Kubernetes in production since 2022.
• 📈 Track record of 99.95% uptime SLAs, deployment time cut 45 → 12 min, and −30% incident MTTR.
• 🔎 Read source, not just docs — Kubernetes kubelet security research (subPath traversal, authorization bypass, ImageVolume, Pod resource consistency).

11 merged pull requests in upstream projects, plus reports fixed by maintainers upstream. I fix real, reproducible bugs in the tools I run in production — each with a failing test and a root-cause writeup. The same class of bug shows up across Go, Python, PHP and JS; reproducing and root-causing it is the transferable skill.

Project	Contribution	PR	State
pallets-eco/croniter	DOM/DOW union aborted when only the day-of-month half was unsatisfiable	#243
goreleaser/goreleaser	goarm64 validation regex was unanchored and accepted junk values	#6727
hashicorp/terraform	log()/pow() panicked on NaN results — fixed upstream in 1.17	#38888
symfony/symfony	Yaml parsed .nan as +INF and never round-tripped NAN	#64915
symfony/symfony	ISBN-10 validator accepted a misplaced X check character	#64877
symfony/symfony	ProxyCacheWarmer crashed on non-.php files in the proxy cache dir	#64847
laravel/framework	Number::forHumans() returned "-0" for tiny negatives	#60736
ansible/ansible	is_netmask accepted non-contiguous (invalid) netmasks	#87235
ansible/ansible	Uncaught OverflowError in check_type_int for inf	#87253
argoproj/argo-cd	Surface the Suspended condition message for suspended Jobs	#28738
spinnaker/spinnaker	libdiffs mis-ordered versions with differing component counts	#7805
spinnaker/spinnaker	Packer -var values false / 0 were silently dropped	#7806
nodejs/node	assert.deepStrictEqualTypeError on a null Map key / Set member	#64449
kubernetes/kubernetes	Quantity.String() dropped the suffix for DecimalSI above 10¹⁸	#140459
kubernetes/kubernetes	Label Gt/Lt selectors silently dropped values above int64	#140462
python-humanize/humanize	fractional() emitted degenerate output ("2 1/1") on whole-rounding	#354
argoproj/argo-rollouts	int32 overflow produced negative canary replica counts	#4923
go-task/task	Templated dir: left dynamic sh: vars running in the wrong directory	#2944

_{Selected — more across Kubernetes, Ansible, argo-workflows, act, actionlint, docker-py.}

• ansible-linter — dependency-light static analysis for Ansible playbooks.
• mr-rca-toolkit — infrastructure merge review and incident RCA utilities.
• claude-arena — cost-aware model routing and orchestration for dev tooling.