// what I work on
What I do
I work across both ends of the stack — the applications people use and the infrastructure underneath them. These are the areas I go deep in: MLOps platforms, Kubernetes, observability, and platform security — the systems that keep production honest.
Software & Product Development
Full applications, built and shipped: multi-tenant SaaS, internal tools, admin panels with fine-grained access control, dashboards, APIs and backends. I take products from spec and design through to running in production.
AI-Powered Application Development
Products with LLMs at the core — Claude and other model APIs integrated into real workflows, agentic systems, retrieval/RAG, and the memory and inference infrastructure that makes them dependable.
MLOps Platform — Zero to Production
MLOps platforms built from scratch: experiment tracking and model registry (MLflow), LLM observability (Langfuse), data labeling (Label Studio), CI/CD for models, and reproducible environments — with SSO, Vault-managed secrets, and S3 artifact storage. Multiple teams training and deploying independently, on a platform they own.
Kubernetes & Cloud Infrastructure
Production Kubernetes on AWS (EKS) and bare-metal, built with OpenTofu/Terraform — multi-region clusters, Istio service mesh with mTLS, Kyverno policy enforcement, autoscaling, and custom controllers/operators. Reproducible, reviewable, GitOps-driven.
Observability & Reliability Engineering
Prometheus / VictoriaMetrics and Grafana stacks that scale to high-cardinality workloads, OpenTelemetry distributed tracing, meaningful SLOs, Alertmanager alerting that doesn't cry wolf, and dashboards that shorten incidents.
Platform Security & Secrets
Defense-in-depth: HashiCorp Vault with internal PKI, SSO/OIDC (Keycloak / Authentik / Pocket ID), Kyverno and Pod Security Standards, image scanning (Trivy) and SAST in CI, intrusion prevention, network policy, mTLS, and tenant isolation done properly.
Self-Hosted & On-Prem Infrastructure
Proxmox/Kubernetes clusters, private registries (Harbor/Nexus), self-hosted GitLab and CI runners, GPU/NPU passthrough for local AI workloads. Sovereignty without the chaos.
// how I work
How I work
I build systems meant to be read: documented, reproducible, and reviewable — not black boxes.