Golden-path tooling that lets product teams provision infrastructure and ship services without touching raw infra — across 50+ applications and 12 EKS clusters.
When every team needs the platform team to hand-provision infrastructure and wire up deploys, the platform team becomes the bottleneck and every team reinvents the same wheel slightly differently. The fix isn't more tickets — it's paved roads: standardized, reusable building blocks teams can self-serve.
I built the reusable layer that sits between raw AWS/Kubernetes and the product teams:
Reliability doesn't come from hope — it comes from seeing problems before users do. I built the Prometheus and Grafana layer as dashboards and alerts as code, so every new service inherits a real observability baseline instead of depending on whoever remembers to build one.
Ingress ran out of room. Every real feature — rewrites, timeouts, canaries — lived in vendor annotations, and routing config shared one object across platform and application concerns. Migrating to Kubernetes Gateway API backed by AWS Load Balancer Controller fixed the ownership split.
Gateway resources — listeners, certificates, and who may bind to them.HTTPRoute resources, without touching shared traffic config.I work AI-first, on a strict plan then generate then review-every-diff discipline. Reusable agent workflows built with Claude Code, Codex, and MCP integrations take the toil; the judgment stays human.
Incident investigation time down ~30% — without letting an agent make an unreviewed change to IAM, state, or anything on a destructive path.