Senior Software EngineerJan. 2024 – Present
First AmericanRemote
- Removed Aurora provisioning from the PR critical path with a Go Kubernetes operator that makes each preview an isolated database tenant of the shared dev cluster, from creation through teardown.
- Built a Go operator that reconciles RDS-managed Aurora credentials from AWS Secrets Manager into Crossplane-managed Kubernetes resources, preventing drift through rotation and disaster recovery.
- Built a policy-driven operator that provisions and reconciles the Kubernetes compliance resources each application needs in labeled customer namespaces, correcting drift for the life of the tenant.
- Adopted Crossplane as the infrastructure API: custom resources and Helm packages for Aurora RDS/DocDB, S3, Redis, and IAM (Pod Identity), consumed by ~400 application tenants.
- Drove the transformation of AWS and GCP infrastructure into a shared Terraform platform, giving teams a consistent, scalable deployment model.
- Rolled out ArgoCD and Kargo as the Golden Path, moving releases from multi-month cycles to per-commit delivery. Every tenant depends on a Helm chart we maintain that abstracts platform features onto Kubernetes, including the Istio mesh, External Secrets, ingress via Tyk, and autoscaling.
- Technical Pod Lead across multiple platform initiatives, accountable for teams of 3–8 while remaining hands-on in architecture and implementation; platform on-call.