Junior DevOps Engineer Soliton Remote
April 2025 — October 2026
Built the security governance baseline for a ~25-account AWS Organization using Terragrunt/OpenTofu: GuardDuty and Security Hub with delegated admin, multi-region CloudTrail, AWS Config, and Control Tower.
Provisioned an operations EKS cluster (terraform-aws-eks) with Gateway API, Traefik, cert-manager (DNS01), and a self-hosted VPN mesh (NetBird) integrated with Authentik SSO backed by RDS PostgreSQL.
Implemented SSO with IAM Identity Center using Google Workspace as the IdP (SAML + SCIM), with role-based access groups and break-glass accounts.
Reduced OpenEDX platform deploy time by 5× by replacing the Tutor abstraction layer with a custom pipeline using GitHub Actions, ArgoCD, and ArgoCD Image Updater.
Designed and managed multi-purpose Kubernetes clusters (security, monitoring, operations, and production) with per-environment isolation.
Configured HPA and PDB for production workloads on EKS with Karpenter, preventing downtime during node consolidation, and balanced replicas across spot and on-demand capacity using topologySpreadConstraints.
Implemented an observability stack with Grafana, Prometheus, Loki, Mimir, and Alloy, including cross-account log storage in S3 in a log-archive account via IRSA.
Instrumented ECS Fargate applications with Grafana Alloy as a sidecar, at no additional infrastructure cost to the client.
Developed reusable Terraform/OpenTofu modules and Helm Charts to standardize infrastructure and enforce GitOps practices across environments.
Automated secrets management with Vault and External Secrets Operator, eliminating hardcoded credentials from repositories.