I'm a Principal Software Engineer with 12+ years of experience building and operating production infrastructure at scale — from Fortune 500 fintech platforms to embedded IoT systems. My core focus is Golang backend engineering and cloud platform engineering, with deep, hands-on expertise in Kubernetes (EKS/GKE), Infrastructure as Code, zero-trust security, and observability-driven operations.

Currently at Capital One, I'm building multi-tenant SaaS onboarding platforms and sub-millisecond decision engines that process 50M+ transactions daily. I care most about systems that stay fast, secure, and boring in production — the kind of infrastructure people trust without thinking about it.

• ☁️ Cloud Infrastructure — Multi-account, multi-cloud (AWS/GCP) environments codified with Terraform, AWS CDK, CloudFormation & GCP Deployment Manager
• ⚓ Kubernetes at Scale — EKS/GKE cluster administration, Helm-driven multi-environment deployments, mTLS service mesh security
• 🔁 CI/CD & GitOps — Automated pipelines (Jenkins, GitHub Actions) with deployment gates, health checks & rollback logic
• 📊 Observability — Full-stack instrumentation with OpenTelemetry, Prometheus, Grafana, Datadog & Splunk
• 🔐 Security & IAM — Zero-trust architectures: mTLS, OAuth2/OIDC, SSO, workload identity, KMS/HSM encryption, PCI-DSS & NIST compliance
• 🏗️ Distributed Systems — Event-driven microservices, BFF patterns, gRPC/REST/GraphQL/MQTT APIs at massive scale

Languages

Cloud & Infrastructure

CI/CD & Automation

Data & Messaging

Observability

APIs

• ☁️ Google Cloud Professional Cloud Architect
• ☁️ AWS Certified Solutions Architect – Associate
• 🧑‍💻 Programming in Golang Specialization (Coursera)
• 🤖 Generative AI Fundamentals (Databricks)

Self-service tenant onboarding platform built in Golang on AWS CDK, with SQS/Lambda event-driven pipelines and a fully VPC-isolated environment per tenant. Locked down with AWS KMS, IAM permission boundaries, and Secrets Manager, with CloudWatch and OpenTelemetry for full observability. Scales horizontally with a complete audit trail.

gRPC-based decisioning services in Golang, fronted by a BFF layer exposing REST to consumer apps and secured with mTLS and OPA-based authorization. Processes 50M+ decisions/day at sub-millisecond latency, with OpenTelemetry tracing and automated SLO-based alerting.

Led an 8-engineer team migrating a legacy C++ self-checkout SDK to Golang microservices on GKE, adding MQTT/Redis for device state and full OpenTelemetry observability. Cut latency 30%, grew adoption from 35% to 65%, and reached 95% automated test coverage.

Two-phase, HSM-encrypted migration pipeline: a bulk historical load via Lambda and S3, followed by CDC via Qlik Replicate, Kafka, and AWS MSK for exactly-once delivery. Fully auditable and secured end to end with IAM and KMS.

Orchestration platform in Java/Spring Boot on AWS CDK, combining Fargate-based graph execution with Step Functions state machines for durable workflows, all behind a single Lambda API. Scales elastically with no EC2 to manage and a full replay/audit history.

MarketMate — Paste a YouTube cooking video link and get an ingredient list via GPT-4 extraction, plus nearby stores to buy them via the Google Maps API. Go backend, React frontend.

Zero Trust API Gateway — Go reverse proxy enforcing zero-trust auth on every request: JWT/JWKS verification, a lock-free RBAC policy engine, Redis-backed rate limiting, and async audit logging. Sub-2ms p50 overhead.

Double-Entry Ledger — Go/Gin REST API implementing double-entry bookkeeping: accounts, journal entries, trial balance and balance sheet reports, kept balanced by a Postgres trigger.

Guest Score — React/TypeScript app that scores hotel guests on stay history, policy adherence, and reported incidents to help hotels assess risk.

Go Test Generator — React/TypeScript tool that scaffolds Go test templates (unit, integration, REST, gRPC, GraphQL) from pasted source code.

Open to collaborations on cloud-native architecture, platform engineering, and distributed systems.