10/01/2026 updated
100 % available
Principal Cloud & Platform Architect | Multi-Cloud | Kubernetes | IaC | DevSecOps | AI Platforms
Madrid, Spain
Worldwide
Computer Engineering, Honours Bachelor Degree - 2014SAP CloudAmazon Elastic Compute CloudMicrosoft AzureClient Server ModelsCloud EngineeringCloud FoundryApache CloudStackDevOpsEnterprise Architecture FrameworkIBM Cloud ComputingICloudOpenShiftOpenStackAWS CLIAnsible
Cloud & Multi-Cloud Architecture
Expertise in designing and operating cloud foundations across Microsoft Azure, AWS and GCP, including Azure Landing Zones, Management Groups, Azure Policy, Front Door, Application Gateway/WAF, Private Endpoints/DNS, APIM, Functions, Logic Apps, App Services, Azure AI Foundry, OpenStack and OpenShift, as well as hybrid cloud and datacenter integration.
Infrastructure as Code (IaC)
Proficiency in Terraform, Terragrunt, OpenTofu, Bicep, ARM and Ansible, with reusable module catalogues, remote state management, multi-environment and multi-subscription patterns, PR plans and controlled promotion workflows.
Kubernetes & Platform Engineering
Hands-on experience with Kubernetes, AKS, Azure Red Hat OpenShift (ARO), Amazon EKS, Backstage, Software Catalog, Software Templates, Golden Paths, developer self-service, ArgoCD, FluxCD, Atlantis, Helm and KEDA for building internal developer platforms.
Cloud Networking & Security
Knowledge of Hub-and-Spoke/VNet architectures, subnets, peering, Azure Firewall, Fortinet, WAF, Private Link, NSGs, UDRs, NAT/egress, VPN/ExpressRoute, TLS, network segmentation, isolation and secure ingress/egress configurations.
Identity & DevSecOps
Experience with Active Directory, Microsoft Entra ID, RBAC, Managed Identities, OIDC, Workload Identity Federation, Key Vault, Azure DevOps, GitHub Actions, GitLab, Bitbucket, IaC/security scanning and SonarQube.
Operations & Observability
Operational background covering Windows/Linux physical and virtual infrastructure, IIS, backup/DR, Azure Monitor, Log Analytics, Application Insights, Prometheus, Grafana, Elastic, Velero, Python, PowerShell and Bash.
AI Platform & FinOps
Foundations in Azure AI Foundry, RAG/OCR/image-generation platform setups, APIM-based AI Gateway patterns, private connectivity, secure model access, governance, observability, tagging/allocation, consumption analysis, rightsizing and cost/performance optimization.
CI/CD Pipeline Design
Design and implementation of CI/CD pipelines across SSRS, SSIS, Power BI, SSAS, Azure Data Factory, React, Angular, .NET, IaC, DACPAC, VMs, App Services, Kubernetes and Docker, including deployment patterns for private and hybrid virtual infrastructure.
Expertise in designing and operating cloud foundations across Microsoft Azure, AWS and GCP, including Azure Landing Zones, Management Groups, Azure Policy, Front Door, Application Gateway/WAF, Private Endpoints/DNS, APIM, Functions, Logic Apps, App Services, Azure AI Foundry, OpenStack and OpenShift, as well as hybrid cloud and datacenter integration.
Infrastructure as Code (IaC)
Proficiency in Terraform, Terragrunt, OpenTofu, Bicep, ARM and Ansible, with reusable module catalogues, remote state management, multi-environment and multi-subscription patterns, PR plans and controlled promotion workflows.
Kubernetes & Platform Engineering
Hands-on experience with Kubernetes, AKS, Azure Red Hat OpenShift (ARO), Amazon EKS, Backstage, Software Catalog, Software Templates, Golden Paths, developer self-service, ArgoCD, FluxCD, Atlantis, Helm and KEDA for building internal developer platforms.
Cloud Networking & Security
Knowledge of Hub-and-Spoke/VNet architectures, subnets, peering, Azure Firewall, Fortinet, WAF, Private Link, NSGs, UDRs, NAT/egress, VPN/ExpressRoute, TLS, network segmentation, isolation and secure ingress/egress configurations.
Identity & DevSecOps
Experience with Active Directory, Microsoft Entra ID, RBAC, Managed Identities, OIDC, Workload Identity Federation, Key Vault, Azure DevOps, GitHub Actions, GitLab, Bitbucket, IaC/security scanning and SonarQube.
Operations & Observability
Operational background covering Windows/Linux physical and virtual infrastructure, IIS, backup/DR, Azure Monitor, Log Analytics, Application Insights, Prometheus, Grafana, Elastic, Velero, Python, PowerShell and Bash.
AI Platform & FinOps
Foundations in Azure AI Foundry, RAG/OCR/image-generation platform setups, APIM-based AI Gateway patterns, private connectivity, secure model access, governance, observability, tagging/allocation, consumption analysis, rightsizing and cost/performance optimization.
CI/CD Pipeline Design
Design and implementation of CI/CD pipelines across SSRS, SSIS, Power BI, SSAS, Azure Data Factory, React, Angular, .NET, IaC, DACPAC, VMs, App Services, Kubernetes and Docker, including deployment patterns for private and hybrid virtual infrastructure.
Experience
Professional experience5 - 10 years
Freelancer since2020
Languages
EnglishGoodSpanishNative speaker
Project history
Freelance B2B consultant based in Spain, available for remote European projects up to 160 hours per month. Engagements include Cloud/Platform Architecture, Platform Engineering, Terraform/IaC modernization, Kubernetes, DevSecOps, Backstage/Internal Developer Platforms, cloud security/networking and AI platform infrastructure.
Engineered a Backstage-based Internal Developer Platform with Entra ID integration, Software Catalog, self-service templates and Golden Paths for cloud services and Landing Zone components. Built and governed Terraform/Terragrunt platform capabilities with reusable modules, Azure Verified Modules patterns, explicit dependencies and automated multi-environment deployments. Designed AKS, ArgoCD and Atlantis GitOps workflows with Azure DevOps and Workload Identity Federation. Architected secure Azure AI Foundry environments and APIM-based AI Gateway patterns using private connectivity, RBAC, Managed Identities and centralized observability.
Solution Architect role for the United Nations Volunteers organization within InterEx Group.