Systems Engineering Student @ UTN FRC | SRE & DevSecOps Engineer
I design, automate, and secure hybrid cloud-native infrastructure. My engineering focus is centered around eliminating toil, enforcing zero-trust networking boundaries, and implementing fully autonomous GitOps pipelines.
-
mysstic-cloud-iac Tier-3 Enterprise AWS Architecture via Terraform & Ansible. Provisions a modular and isolated environment (Public DMZ + Isolated Private Subnets) using secure AWS OIDC federation. Integrates shift-left security (Trufflehog & Checkov) and state-locking via DynamoDB. Implements a serverless event-driven alerting architecture (CloudWatch Alarms ➡️ SNS ➡️ Python Lambda) pushing real-time infrastructure alerts directly to Telegram.
-
portfolio-sre High-Performance Cloud-Native Portfolio & Live Telemetry API. A production-ready monorepo combining a static frontend (Hugo running on version-pinned Alpine Nginx with strict security headers) and a backend application layer (Golang REST microservice exposing server metrics). Audited via DevSecOps pipelines with QEMU multi-architecture builds, Hadolint, and Trivy vulnerability scanning. Fully automated via GitOps pull-agents (Watchtower).
-
ez-lab Cloud-Native Edge Infrastructure & Home Lab. A bare-metal microservices environment running headless on a Raspberry Pi 5. Configured via modular Docker Compose (IaC basics) and protected under Zero-Trust principles bypassing ISP CGNAT via Cloudflare Tunnels and Tailscale Mesh VPN. Features deep observability and automated self-healing mechanisms driven by custom Python scripts, Prometheus, and Grafana.
-
logistics-microservices-platform Distributed Enterprise Architecture | Major Academic Project. An advanced distributed system built with Java Spring Boot, focused on scalability, enterprise pattern design, and containerization. Integrates Docker environments and secure identity/access management utilizing Keycloak.
-
knowledge-base-system Internal Documentation Platform using Docs-as-Code. An automated system powered by MkDocs Material to migrate legacy knowledge structures into a markdown-based, git-versioned pipeline, dramatically optimizing technical troubleshooting search paths.
| Category | Technologies & Tools |
|---|---|
| Cloud & OS |    |
| Infrastructure as Code |   |
| Containers & GitOps |   |
| Languages & Scripting |     |
| Databases & Security |     |
- 🛠️ Active Workflow: Building
mysstic-sentinel(automated edge vulnerability scanning layer) and migrating local Docker workloads towards lightweight Kubernetes clusters (K3s). - 🧠 Philosophy: "Lo que no estás cambiando, lo estás eligiendo."
- 💬 Fun fact: I treat my hardware nodes as immutable infrastructure; if a config drifts, I rewrite the playbook, I don't patch it via SSH.
Let's build scalable, resilient, and secure systems together. 🚀