Skip to content
Open to senior cloud and DevOps engagementsCaracas, VenezuelaTechnical Lead, Cloud & DevOps

I build AWS platforms teams can run without guessing.

IaC, delivery paths, and observability for production AWS. Hands-on lead work: migrations, root-cause fixes, and mentoring engineers.

See my workDownload resume

About

Cloud platforms, from foundations to production firefights.

I lead cloud engineers and fix production platform problems. Day to day that means Terraform and CloudFormation foundations, safer release paths, and monitoring that actually helps when something breaks.

I started in mechatronics, industrial automation, and IoT. The habit stuck: automate the boring parts, make system behavior visible, and write down how the platform works so it does not live only in one person’s head.

I verify against the live environment before I trust a design. If I ship it, I can rebuild it, troubleshoot it, and explain it.

Expertise

Where I spend most of my time.

01

Infrastructure as Code & Cloud Foundations

Terraform and CloudFormation for multi-account AWS foundations, landing zones, and org-wide guardrails, including MAP cost-allocation tagging.

02

Platform & Developer Experience

Commit-to-production paths with GitHub Actions, CodePipeline, and CodeBuild, plus docs so teams know who owns what.

03

Observability & Cloud Operations

Metrics, logs, traces, and alerts that help people find the real fault instead of drowning in noise.

04

Technical Leadership & Enablement

Mentoring, architecture reviews, workshops, and AWS cert coaching so the team levels up with the platform.

Selected Work

Production AWS work with measurable outcomes.

01Cloud Infrastructure Engineer

Zero-Downtime VPN Platform Migration

Blue/green replacement across three AWS environments

Challenge

Three OpenVPN Access Server hosts (dev, staging, and production) ran on an end-of-life OS that blocked the required server upgrade. Replacements had to keep public addresses, certificates, config, and client profiles for about 260 user accounts.

Outcome

One parameterized CloudFormation template and two idempotent Systems Manager documents reproduced, migrated, and reconciled all three environments. Each cutover was validated end to end, then hardened to Session Manager only with no public SSH.

3
AWS environments migrated
~260
User accounts preserved
Architecture
  1. Source
    Amazon Linux 2Access Server 2.13
  2. Migration
    SSM exportEncrypted S3 transfer
  3. Target
    Ubuntu 24.04Access Server 3.2
  4. Cutover
    Elastic IPRetained rollback host
Technology
  • CloudFormation
  • Systems Manager
  • Amazon EC2
  • Amazon S3
  • Secrets Manager
  • IAM
  • CloudWatch
  • OpenVPN Access Server
  • Ubuntu
  • POSIX shell
02Cloud Infrastructure Engineer

API Connectivity Root-Cause Diagnosis

An apparent permissions failure that was private DNS interception

Challenge

A containerized service got HTTP 403 calling a public regional API. It was escalated as permissions. An interface VPC endpoint with private DNS was overriding the regional hostname and sending traffic through a policy meant only for selected private APIs.

Outcome

In-place Terraform change, development first. Endpoint ID kept; no dependent replacements. Public API resolved publicly and succeeded; private APIs still went through the VPC endpoint. Then the same change rolled through the remaining environments.

3
Environments rolled out safely
0
Resources replaced
Architecture
  1. Workload
    Container servicePrivate VPC
  2. Resolution
    Regional hostnameVPC DNS
  3. Interception
    Interface endpointPrivate DNS
  4. Delivery
    Shared Terraform moduleStaged rollout
Technology
  • Terraform
  • Amazon VPC
  • AWS PrivateLink
  • API Gateway
  • Route 53
  • Amazon ECS
  • IAM
  • DNS
  • GitHub
03Technical Lead, Cloud & DevOps

AWS MAP Tagger

Resource discovery and tagging for AWS Migration Acceleration Program

Challenge

Python CLI to discover and tag resources for MAP across customer accounts and regions. Built to replace Tag Editor, which throttles silently after about 28 resources and cannot find resources with zero tags.

Outcome

Raised single-run tag success from 16% to 99% on 1,200+ CloudWatch Log Groups with exponential backoff. Reached zero-tagged RDS, EC2, EBS, and Lambda that Tagging API never saw, via deep discovery in multi-account estates.

99%
Successful MAP tag application
1,200+
Resources covered in one run
Architecture
  1. Scope
    AWS accountsRegions
  2. Discovery
    Tagging APIService APIs
  3. Control
    ValidationExponential backoff
  4. Apply
    MAP tagsRun report
Technology
  • Python
  • boto3
  • AWS Resource Groups Tagging API
  • IAM
  • AWS Migration Acceleration Program
04Cloud Infrastructure Engineer

CloudFront Maintenance Failover for an ALB Application

CloudFront failover for an existing ALB-backed application

CloudFront now sits in front of the existing Application Load Balancer. It sends normal traffic to the website, but when the load balancer returns a 502 or 503 because Nginx is stopped, it switches to a branded maintenance page stored in a private S3 bucket. The customer keeps the same public hostname, and visitors get a useful message while maintenance is underway.

During planned maintenance, the customer stops Nginx. The EC2 instance remains healthy from AWS's perspective, so the Auto Scaling Group does not replace it. But visitors see the Application Load Balancer's generic error page, with no indication that the outage is intentional or temporary.

Technology
  • Amazon CloudFront
  • Application Load Balancer
  • Amazon S3
  • AWS Certificate Manager
  • Origin Access Control
  • Amazon EC2
  • Auto Scaling Groups
  • Nginx
05Solutions Architect & DevOps Engineer

Internal Database Operations Platform

Production delivery for a multi-environment database service

Healthy API and worker services behind an internal load balancer, multi-source pipeline, scoped IAM, and dedicated logging. Live in development in about a week and unblocked the UI team.

An internal database ops service had working app code but no production-grade deploy path. It needed private AWS runtime, separate API and worker processes, a private shared dependency, and reach into connected dev, staging, and production networks.

1 week
To unblock the downstream team
~10
Reviewed pull requests delivered
Technology
  • Terraform
  • Amazon ECS
  • CodePipeline
  • CodeBuild
  • Docker
  • Python
  • CloudWatch
06Creator & Cloud Engineer

Currency Genie Alexa Skill

Voice exchange rates and conversion for 140+ currencies

Published Currency Genie to the Alexa Skills Store with lookups, spoken conversion, multi-turn sessions, and voice-friendly formatting. Separate Lambda lanes, tests, sanitized CloudWatch logs, OIDC deploys, and explicit cert/publish controls.

Reworked a Lambda-backed Alexa currency skill after a generic invocation name competed with other public skills. Needed clear voice routing, strict dev/prod isolation, resilient rate providers, and a controlled certification path.

140+
Currencies supported
Published
Alexa Skills Store
Technology
  • Python
  • AWS Lambda
  • Alexa Skills Kit
  • CloudWatch
  • GitHub Actions
  • AWS OIDC
Alexa Skill Store

Experience

A career spanning cloud engineering, technical leadership, and customer strategy.

My current responsibilities at DinoCloud span two concurrent tracks: customer-facing cloud strategy and hands-on engineering leadership.

  1. Nov 2025 - Present
    DinoCloud
    Technical Account Manager
    Concurrent customer advisory track

    Guide customers in the AWS Cloud, connecting technical priorities with security, cost, resilience, and long-term platform strategy.

    • Lead customer reviews covering governance, security, cost optimization, and resilience, translating findings into prioritized action plans.
    • Shape savings and rightsizing recommendations using AWS cost governance, Savings Plans, Reservations, and usage patterns.
    • Enable secure cross-account access with CloudFormation and provide hands-on guidance during production and security incidents.
    • Earn customer trust with direct technical guidance, continuous improvement plans, and measurable service priorities.
    Impact

    Customer AWS estates spanning 15+ accounts.

  2. Dec 2024 - Present
    DinoCloud
    Technical Lead, Cloud & DevOps
    Concurrent engineering leadership track

    Lead and mentor cloud engineers while shaping resilient AWS platforms, security controls, observability, and delivery standards.

    • Mentor engineers with architecture reviews, live troubleshooting, documentation, and targeted development plans.
    • Design resilient AWS architectures for EC2, load balancing, RDS, S3, and multi-account environments.
    • Establish governance and security controls with AWS Organizations, Control Tower, WAF, GuardDuty, KMS, Secrets Manager, and VPC endpoints.
    • Standardize CloudWatch, X-Ray, AWS Config, dashboards, and alerting so teams can detect and diagnose production issues faster.
    Impact

    Technical direction and mentoring for 3–4 cloud engineers.

  3. Jul 2021 - Dec 2024
    DinoCloud
    Cloud & DevOps Engineer

    Engineered and automated AWS infrastructure, delivery pipelines, monitoring, and serverless systems for production environments.

    • Established multi-account AWS foundations with Control Tower, AWS Organizations, and IAM Identity Center.
    • Provisioned infrastructure with Terraform and CloudFormation, including VPC endpoints and Systems Manager access patterns.
    • Automated monitoring and alerting with CloudWatch, Prometheus, Grafana, Slack, and Elastic Load Balancing integrations.
    • Developed serverless workflows using AWS Lambda and Step Functions.
  4. Mar 2016 - Jul 2019
    NextWells Corp
    Internet of Things Consultant
    Earlier industrial automation and IoT foundation

    Designed and deployed custom IoT systems for industrial automation, connecting wireless field devices and embedded controllers with Python services, AWS, and third-party platforms for real-time monitoring and control.

    • Led development of wireless monitoring systems using Python and Arduino-compatible boards, taking solutions from device behavior through communication and application integration.
    • Designed communication protocols for reliable data exchange between field hardware, software services, and external platforms.
    • Integrated AWS and third-party services into operational workflows, connecting physical equipment to cloud-based monitoring and control capabilities.

Stack

The stack behind the work above.

Cloud & AWS Services

  • Control Tower
  • AWS Organizations
  • IAM Identity Center
  • EC2
  • S3
  • Lambda
  • Step Functions
  • Route 53
  • RDS (Aurora MySQL & PostgreSQL)
  • DynamoDB
  • ACM
  • AWS Verified Access

Security & Cloud Governance

  • IAM
  • AWS WAF
  • GuardDuty
  • Security Hub
  • KMS
  • Secrets Manager
  • Service Control Policies
  • VPC Endpoints
  • Systems Manager (SSM)

Kubernetes & Containers

  • Amazon EKS
  • Docker
  • Fargate
  • ECR
  • Bare-metal Kubernetes
  • Ingress + TLS
  • NGROK
  • Cloudflare Zero Trust

Infrastructure as Code

  • Terraform
  • AWS CloudFormation

CI/CD & Automation

  • GitHub Actions
  • AWS CodePipeline
  • CodeBuild
  • CodeDeploy

Monitoring & Logging

  • CloudWatch
  • SNS
  • Athena
  • Prometheus
  • Grafana
  • AWS Config
  • AWS X-Ray

Programming & Scripting

  • Python
  • Bash
  • Embedded C

AWS credentials

Verified certifications on Credly

Amazon Web Services

Solutions Architect, Associate

Amazon Web Services

Developer, Associate

Amazon Web Services

SysOps Administrator, Associate

Amazon Web Services

Cloud Practitioner

04Contact

Want to talk about a cloud or platform role?

Open to senior cloud, platform engineering, and technical leadership. I read every message myself.