Summary

DevOps and platform engineer (5+ years) running mission-critical infrastructure on bare metal, VMs, containers and cloud, from racking servers in an empty datacenter to multi-cluster production estates. Telecommunications engineer by training, so networking is a strength rather than a dependency. Has led platform and IT functions end to end, and since 2025 runs infrastructure with AI agents under strict review and cost controls.

Experience

1. 

   Founder & Senior Platform Engineer

   Keni Engineering March 2026 to present, remote Independent consultancy; available for a full-time role.

   • Platform engineering practice for SMB software teams: infrastructure audits, CI/CD and platform builds, from scoping and pricing through delivery.
   • Designed the reference architecture used across client work and three in-house products: GitOps deployments, a WireGuard control plane with a signed self-updating agent per server, automatic TLS (Traefik), observability (Prometheus, Loki, Grafana) and encrypted backups (Restic, S3), standardised on Terraform, Ansible and Docker.
   • Led delivery across contractors and fleets of AI agents: set engineering standards, review process, environments and token and cost budgets; ran Claude Code agents with MCP integrations as part of the delivery pipeline.

   WireGuard Traefik Prometheus Loki Grafana Restic S3 Terraform Ansible Docker Claude Code
2. 

   Head of DevOps & IT

   Kuik Digital Solutions October 2025 to March 2026, Bilbao; DevOps Engineer from August to October 2025 Took over DevOps and IT after a company restructuring.

   • Ran DevOps and IT together for a 60-employee software company, and hired a DevOps engineer.
   • Migrated the deployment architecture from virtual machines to cloud-native modular designs using Terraform, Ansible and Docker.
   • Built the developer self-service platform: CI/CD pipelines (Jenkins, Komodo), secrets management (1Password), reverse proxy with automatic TLS (Traefik) and observability (Prometheus, Loki, Grafana).

   Terraform Ansible Docker Jenkins Komodo 1Password Traefik Prometheus Loki Grafana
3. 

   Co-founder & Lead Engineer

   Naikkan November 2024 to June 2025, Bilbao Hardware startup; wound down when my co-founder left.

   • Co-founded a consumer hardware venture building a smart dog collar for canine well-being tracking: BLE, GPS and accelerometer sensing, RF and antenna placement, sensor firmware and an activity detection pipeline.
   • Owned the technical design end to end and managed hardware and firmware providers, from component selection to manufacturing partners.

   BLE GPS RF and antennas Firmware
4. 

   DevOps Engineer III

   Swisscom September 2023 to September 2024, Zurich

   • Led the migration to GitLab CI/CD, adding automated pipelines with syntax validation and security scanning, improving code quality and reducing review time.
   • Built monitoring tooling for 25 KPIs in Prometheus/Grafana that eliminated 4 critical recurrent issues.
   • Designed a proof-of-concept AWS architecture with GitLab and Terraform to replicate on-premise systems in the cloud on demand, deploying and testing full infrastructure from a single commit.
   • Replaced the legacy NetBackup system with a compressed, encrypted, incremental backup solution (Bash, Cron, S3) and automated release deployments with Ansible.

   GitLab CI Terraform Ansible Bash Prometheus Grafana AWS S3
5. 

   DevOps Engineer

   Motorola Solutions September 2021 to September 2023, Dallas

   • Provisioned mission-critical customer infrastructure remotely over customer VPN: bare-metal servers, NICs, VMs and F5 load balancers, then deployed 100+ Docker containers on 4-8 node HA clusters with Ansible, cutting deployment lead time by 90%.
   • Built a modular Python CLI suite for operations and incident response: peer-reviewed, reproducible health checks, diagnostics and validations, deployed with Ansible to remove ad-hoc shell access on mission-critical infrastructure.
   • Led a 6-month on-site pre-sales deployment for a European government tender: full build from bare-metal racks in an empty datacenter to high-availability Docker clusters, on-site installation, networking, VM and container orchestration and live technical demos, as the sole technical point of contact.

   Ansible Docker Python F5 VPN Bare metal
6. 

   Network Engineer Intern

   SATEC January to July 2019, Bilbao

   • Audited and remodeled a 50-employee branch network, improving contracted network efficiency 200%.