Description

AWS Cloud consultant specialized in evaluating cloud migration readiness, designing and implementing enterprise landing zones, multi-account governance, and secure foundations on AWS.

I’ve led the creation of a production-grade AWS Organizations and landing zone, automated account provisioning and infrastructure deployments, integrated Azure SSO and security tooling, and built centralized logging and observability platforms (ELK, OpenTelemetry, S3/Athena) for multi-account, multi-region environments.

My core skills cover AWS architecture and operations, Infrastructure as Code, monitoring and logging, security & compliance, and FinOps.

My consulting approach is practical and direct: understand the business context, identify the architectural decisions that matter most, and turn them into a clear plan that teams can execute without unnecessary complexity. I do not pretend to know what I don’t; instead, I research, test, and verify before providing recommendations.

Industry field of expertise

Languages

Italian
Native or bilingual
English
Fluent

Workplace preferences

Remote only

Primarily works remotely

Circle Group
Cloud Architect
LOGISTICS AND SUPPLY CHAIN
January 2026 - March 2026 (2 months)
Genoa, GE, Italy
I was the IT coordinator for the company and I started the business case for the migration to AWS. I improved the security posture of the company and I was involved with the NIS2 compliance evaluation process.
IT Strategy Amazon Web Services IT-Security
Awin Global
Cloud Platform Engineer - DevOps
E-COMMERCE
January 2014 - June 2025 (11 years and 5 months)
Genoa, GE, Italy
Enterprise AWS Landing Zone Design & Implementation

Designed and deployed a production-grade AWS Landing Zone using Terraform and Terragrunt for a multi-account organization supporting a global affiliate marketing platform.
Implemented AWS Well-Architected Framework principles across all five pillars: operational excellence, security, reliability, performance efficiency, and cost optimization.
Automated account provisioning and infrastructure deployment with Terraform modules, Atlantis CI/CD pipelines and custom scripts.
Integrated security tooling (Orca, Sentinel) directly into Landing Zone and deployment workflows.
Enabled Azure SSO integration for centralized identity management across AWS accounts.
Conducted regular FinOps reviews, identifying cost savings and improving resource efficiency across the organization.

Centralized Observability & Logging Platform

Built enterprise-grade centralized logging using Logstash, AWS S3 and Athena for low-cost, scalable log storage.
Designed and deployed OpenTelemetry Collector clusters for multi-account, multi-Region observability.
Implemented ELK stack (Elasticsearch, Logstash, Kibana) and Graphite/Grafana monitoring for on-prem and AWS hybrid environments.

AWS Multi-account Governance & Security

Led AWS Organizations design and governance, ensuring compliance with security standards across 50+ accounts.
Established guardrails, SCPs, and tagging strategies for centralized governance.
Provided training and mentorship to engineering teams on AWS and Terraform best practices.
Created comprehensive technical documentation for platform infrastructure and operational procedures.
Terraform Amazon Web Services Landing Zone CloudOps Infra as Code
Zone Content
Backend Developer / Systems Engineer
E-COMMERCE
January 2012 - January 2014 (2 years)
London, UK
● Designed and deployed highly scalable, highly available AWS architectures for web applications
● Performed performance tuning, profiling, and optimization for LAMP stacks and Drupal/Wordpress platforms on AWS.