KEY SKILLS
// technologies applied in production
Cloud & AWS Core
- Compute/Storage: EC2, S3, EBS, EFS
- Databases: RDS, Aurora (MySQL/Postgres), migration & rightsizing
- Networking & Edge: VPC, CloudFront, Route53, WAF, Shield
- IAM: cross-account roles, Pod Identity, least-privilege policy design
- Caching: ElastiCache (Redis)
Containers & Orchestration
- Kubernetes: Amazon EKS, workload scheduling, Pod Identity access patterns
- ECS/Fargate: service & task definition sizing, capacity providers
- GitOps: ArgoCD, GitLab CI/CD pipelines
- Docker: image build/optimization for CI pipelines
Infrastructure as Code
- Terraform: multi-account, multi-environment module design
- Remote state, cross-module data contracts via SSM Parameter Store
- Safe state migrations (state mv), blast-radius aware refactors
- Reusable modules for repeatable environment rollout (dev/test/staging/prod)
Observability
- Metrics: Amazon Managed Prometheus (AMP), CloudWatch
- Dashboards/Alerting: Amazon Managed Grafana (AMG), Grafana Alerting
- Logs: Loki, Grafana Alloy (OpenTelemetry-compatible collector)
- Uptime/health checks: Route53 Health Checks, CloudWatch Synthetics
FinOps & Cost Optimization
- Cost Explorer-driven audits: top cost driver analysis, trend tracking
- EC2/RDS rightsizing based on CPU/memory/IOPS utilization data
- Idle resource identification (unattached volumes, idle file systems)
- Structured savings roadmaps with business sign-off workflow
Practices & Tools
- Cloud migration planning (lift-and-shift & re-architecture)
- Incident troubleshooting across distributed, multi-account systems
- Jira / Confluence for delivery tracking and documentation
- Security-conscious design: least privilege, defense in depth