08/28/2026 updated
100 % available
Senior Platform & DevOps Engineer | Cloud Infrastructure | IaC | SRE
Kabupaten Bekasi, Indonesia
Worldwide
Bachelor of Informatics EngineeringAbout me
Over 13 years of experience spanning infrastructure architecture, software engineering, and cybersecurity. Proven track record of multi-cloud, and on-premise ecosystems. Leveraging a strong software engineering background to deliver scalable Infrastructure solutions and third party integrations.
Cloud & Hybrid Infrastructure (AWS, GCP)
Expertise in designing and operating multi-cloud and hybrid environments spanning AWS (EKS, ECS, EC2, Lambda, VPC, S3) and GCP (Compute Engine, GKE, Dataflow), as well as bare-metal Linux systems. Proven delivery of fault-tolerant, highly available architectures across greenfield and legacy platforms.
Infrastructure as Code (IaC) & GitOps
Deep proficiency in Terraform and Terragrunt for scalable, modular IaC delivery, combined with GitOps-based deployment workflows using ArgoCD, GitHub Actions, GitLab CI, Jenkins, and Helm. Authoring reusable modules and enforcing IaC governance across multi-team environments.
Observability & Site Reliability Engineering
Comprehensive observability stack implementation using Prometheus, Grafana, ELK Stack, Loki, Tempo, and Datadog. Definition and enforcement of SLOs, SLIs, and Error Budgets, combined with incident management and FinOps practices to ensure platform reliability and cost efficiency.
Automation, Scripting & Backend Development
Strong scripting and backend engineering capabilities using Python, Bash, and SQL. Experience with Django, Flask, and Apache Airflow for workflow automation, as well as UiPath for RPA and automated testing frameworks including pytest and Selenium.
Networking & Edge Security
Configuration and management of edge delivery and security solutions including AWS CloudFront, Akamai CDN, AWS WAF, GCP Cloud Armor, and AWS IAM. Implementation of NAT gateways, geo-blocking policies, and Bitnami Sealed Secrets for secure Kubernetes secret management.
Databases & Storage
Administration and optimization of relational and NoSQL databases including PostgreSQL, MySQL, Redis, and Elasticsearch. Experience with connection pooling via Pgcat, block storage using Longhorn, and NFS server configuration for highly available on-premise storage.
Kubernetes & Container Orchestration
Architecture and operation of Kubernetes clusters across cloud (AWS EKS, GKE) and on-premise (K3s) environments. Authoring Ansible playbooks for automated multi-node cluster provisioning and managing Helm charts for application delivery.
Cybersecurity & SIEM
Foundation in enterprise cybersecurity including SIEM management with AlienVault OSSIM, integration of Snort, Palo Alto networks, and F5 Firewalls into centralized monitoring ecosystems, and enforcement of security governance frameworks for corporate clients.
FinOps & Cost Optimization
Execution of AWS FinOps initiatives reducing monthly compute expenditure by approximately 30% through EC2 Spot Instances, Auto Scaling Groups, and deep-dive cost anomaly analysis. Large-scale infrastructure migration from AWS to GCP with significant cloud billing reduction.
Expertise in designing and operating multi-cloud and hybrid environments spanning AWS (EKS, ECS, EC2, Lambda, VPC, S3) and GCP (Compute Engine, GKE, Dataflow), as well as bare-metal Linux systems. Proven delivery of fault-tolerant, highly available architectures across greenfield and legacy platforms.
Infrastructure as Code (IaC) & GitOps
Deep proficiency in Terraform and Terragrunt for scalable, modular IaC delivery, combined with GitOps-based deployment workflows using ArgoCD, GitHub Actions, GitLab CI, Jenkins, and Helm. Authoring reusable modules and enforcing IaC governance across multi-team environments.
Observability & Site Reliability Engineering
Comprehensive observability stack implementation using Prometheus, Grafana, ELK Stack, Loki, Tempo, and Datadog. Definition and enforcement of SLOs, SLIs, and Error Budgets, combined with incident management and FinOps practices to ensure platform reliability and cost efficiency.
Automation, Scripting & Backend Development
Strong scripting and backend engineering capabilities using Python, Bash, and SQL. Experience with Django, Flask, and Apache Airflow for workflow automation, as well as UiPath for RPA and automated testing frameworks including pytest and Selenium.
Networking & Edge Security
Configuration and management of edge delivery and security solutions including AWS CloudFront, Akamai CDN, AWS WAF, GCP Cloud Armor, and AWS IAM. Implementation of NAT gateways, geo-blocking policies, and Bitnami Sealed Secrets for secure Kubernetes secret management.
Databases & Storage
Administration and optimization of relational and NoSQL databases including PostgreSQL, MySQL, Redis, and Elasticsearch. Experience with connection pooling via Pgcat, block storage using Longhorn, and NFS server configuration for highly available on-premise storage.
Kubernetes & Container Orchestration
Architecture and operation of Kubernetes clusters across cloud (AWS EKS, GKE) and on-premise (K3s) environments. Authoring Ansible playbooks for automated multi-node cluster provisioning and managing Helm charts for application delivery.
Cybersecurity & SIEM
Foundation in enterprise cybersecurity including SIEM management with AlienVault OSSIM, integration of Snort, Palo Alto networks, and F5 Firewalls into centralized monitoring ecosystems, and enforcement of security governance frameworks for corporate clients.
FinOps & Cost Optimization
Execution of AWS FinOps initiatives reducing monthly compute expenditure by approximately 30% through EC2 Spot Instances, Auto Scaling Groups, and deep-dive cost anomaly analysis. Large-scale infrastructure migration from AWS to GCP with significant cloud billing reduction.
Experience
Professional experience10+ years
Freelancer since2026
Languages
EnglishFluent
Project history
Architected critical Kubernetes-based infrastructure for a B2B AI video analytics startup. Engineered scalable deployment strategies across AWS EKS and on-premise K3s environments. Authored Ansible playbooks for multi-node K3s cluster provisioning, modernized legacy AWS infrastructure via Terraform and GitHub Actions, implemented ArgoCD for GitOps delivery, Bitnami Sealed Secrets for secret management, Longhorn for on-premise storage, Pgcat for PostgreSQL connection pooling, and a full observability stack with Prometheus, Grafana, Loki, and Tempo.
Responsible for stability and efficiency of core infrastructure spanning over 100 multi-tenant AWS accounts for Southeast Asia's leading lifestyle superapp. Drove FinOps initiatives reducing compute costs by ~30%, led migration of Terraform configurations to Terragrunt with dedicated CI/CD pipelines, authored Terraform modules for UiPath RPA infrastructure, engineered advanced AWS IAM architectures, deployed AWS WAF across public endpoints, and implemented Datadog for real-time monitoring and Disaster Recovery planning.
Ensured high-availability video delivery and executed a major cloud migration from AWS to GCP for a premier OTT video streaming platform. Reduced cloud billing by ~30% via rightsizing and fault-tolerant GCP architectures, managed Akamai CDN and Varnish Cache for 200,000+ RPS, orchestrated large-scale automated load testing, automated infrastructure provisioning with Jenkins and Ansible, integrated Datadog with ELK stack for observability, and implemented GCP Cloud Armor for security.