Alejandro Rodriguez

Comprehensive management of cloud infrastructure and DevOps for enterprise clients, ensuring the operability of the development platform used by over 200 engineers. My focus is on guaranteeing fast, secure, and auditable deployments, optimizing operational efficiency, and ensuring that every cloud investment generates tangible value through FinOps practices and resilient architectures. • Infrastructure as Code (IaC): Design and implementation of multi-account AWS architectures using Terraform and Terragrunt, standardizing enterprise environments and reducing provisioning time from weeks to hours. • Development Platform: Administration of the ecosystem for +200 developers using GitLab CI/CD and governance policies. Implementation of ephemeral environments that accelerated release cadence by 60% without compromising quality. • Efficient Computing (EKS/ECS): Orchestration and optimization of production clusters. Implementation of auto-scaling with Karpenter, node right-sizing, and Spot Instances strategies, achieving a 35% reduction in compute costs. • Network and Perimeter Security: Deployment of robust security architectures using Next-Generation Firewalls (NGFW) and AWS Network Firewall. Perimeter hardening with AWS WAF and continuous monitoring with Security Hub to close critical audit findings. • Hybrid and Multi-Cloud Networking: Design of complex network architectures for multi-site environments. Interconnection of multiple clouds and On-Premise Data Centers using Transit Gateway, Direct Connect, and VPN tunnels, ensuring low latency and high availability. Skills: AWS · Terraform · Terragrunt · Kubernetes (EKS) · Amazon ECS · Karpenter · GitLab CI/CD · Network Firewalls (NGFW) · AWS WAF · FinOps · Multi-Cloud Networking · Hybrid Connectivity · Observability · Grafana · Prometheus

I designed scalable, resilient, and cost-optimized cloud architectures in multi-cloud environments (AWS, Azure, OCI). From multi-site network topologies to automated deployment pipelines — every solution was designed so the client paid only for what they truly needed, without compromising availability or security. • Design of multi-cloud architectures (AWS, Azure, OCI) that allowed clients to choose the right provider for each workload, avoiding vendor lock-in and optimizing costs by up to 30%. • Architecture of multi-site network topologies between cloud and on-premise environments, ensuring secure, low-latency connectivity for applications distributed across multiple locations. • Leadership of critical cloud migrations with a zero-downtime strategy — moving production applications without business impact or data loss, meeting tight migration windows. • Design, implementation, and operation of containerized solutions on ECS and Kubernetes, including microservices orchestration, auto-scaling, and blue/green deployment strategies. • Implementation of CI/CD deployment pipelines with GitHub Workflows and ArgoCD, reducing the code delivery cycle from days to minutes with automated rollback. • Construction of Infrastructure as Code (IaC) foundations with Terraform and CloudFormation, enabling repeatable, auditable, and consistent deployments across environments (dev, staging, production). • Post-migration review and optimization of cloud environments: instance right-sizing, orphaned resource cleanup, and Reserved Instances/Savings Plans recommendations that reduced TCO by 25%. Amazon Web Services (AWS) · Microsoft Azure · Oracle Cloud Infrastructure (OCI) · Terraform · CloudFormation · Kubernetes · ECS · Docker · GitHub Actions · ArgoCD · Cloud Networking · Hybrid Connectivity · Architecture Design · Cloud Migrations · Python · CI/CD · Zabbix · GNU/Linux

Responsible for the reliability and evolution of a complex hybrid infrastructure: multiple data centers, public clouds (AWS, Azure), and thousands of virtual machines serving critical communication platforms. I went from firefighting to building self-healing systems — and convinced the organization that investing in resilience is cheaper than the cost of downtime. • Design and implementation of hybrid cloud architectures in AWS and Azure that increased application resilience from 97% to 99.9% availability, eliminating the ~3 monthly incidents that cost thousands of euros in lost revenue. • Comprehensive management of the perimeter security for all internet-facing services: traffic analysis, firewall configuration (Fortinet), network segmentation, and inter-site communication protection — reducing security incidents by 70%. • Configuration and operation of BGP routing between on-premise infrastructure and public clouds, ensuring automatic failover and transparent connectivity between data centers and clouds. • Administration of VMware hypervisor clusters and SAN networks across multiple sites, ensuring the proper functioning of the virtualization layer supporting +3000 production VMs. • Progressive migration of critical applications to the cloud, increasing resilience and reducing dependency on on-premise hardware — without maintenance windows affecting the business. • Design and deployment of end-to-end infrastructure monitoring: networks, hosts, firewalls, VMs, storage arrays, VPNs, and backups — with proactive alerts that reduced incident detection time from hours to seconds.Skills:AWS · Azure · VMware · Fortinet · BGP · SAN Storage · Veeam · GNU/Linux · Windows Server · PRTG · Zabbix · Python · Hybrid Cloud · Network Security · Site Reliability Engineering · Backup & DR · Troubleshooting · MPLS · VPN