Platform Engineering¶
DevSecOps Environment Setup
Designed and operated a production-grade Kubernetes platform for modern cloud-native workloads — Cilium networking (with Calico and MetalLB in place), DirectPV/MinIO/NFS storage, and security built in — and created an end-to-end DevSecOps delivery pipeline with GitLab CI/CD, Argo CD, Jenkins, and SonarQube, embedding security and PCI-DSS compliance at every stage.
My Role
Role: Platform Engineering Lead — Kubernetes & DevSecOps Scope: production Kubernetes platform (networking · storage · security); end-to-end CI/CD pipeline; PCI-DSS controls Ownership: architecture → build → operations Leadership: delivered platform and delivery capabilities for application teams — infrastructure, CI/CD, and security as a service
Key Contributions
- Architected the platform on Cilium — with Calico and MetalLB in place for network policies and load balancing — plus Gateway API, ingress, and WireGuard encryption
- Designed storage with DirectPV, MinIO, and NFS — persistent volumes and storage classes for application teams
- Embedded security: RBAC, secrets management, CIS hardening, image scanning, admission controls
- Automated everything with IaC and GitOps — provisioning, configuration, deployments, upgrades
- Built CI/CD on GitLab CI/CD and Jenkins with Argo CD GitOps deployments
- Centralized artifacts with Harbor and Artifactory; quality gates with SonarQube
- Automated testing (Selenium), docs (Kroki), and security monitoring (Wazuh)
- Wired PCI-DSS compliance controls into the pipeline
Lessons Learned
Networking decisions shape everything — Cilium paid off. Storage is the hardest part of production Kubernetes. Security should accelerate delivery, not gate it — GitOps makes every deployment auditable.