Luis Angel

$ git log --oneline career

Experience

Cloud & DevSecOps Infrastructure Engineer

AlamOps · Spain

Oct 2024 – Present

Hybrid on-prem + AWS infrastructure bridged via site-to-site IPSec tunnels and MikroTik routers
Terraform + Ansible IaC with AWS FinOps practices — rightsizing, reserved instances/savings plans, cost-by-project tagging
Jenkins + GitHub Actions CI/CD with SonarQube SAST quality gates
Cilium (eBPF) CNI hardening Kubernetes L3–L7 network policy with self-healing, HA node redundancy
LLMOps: deployed OpenClaw + RouteLLM for LLM request routing, with Lakera guarding against prompt injection
Migrated gaming/web APIs to serverless Cloud Run behind Cloud Armor + Cloud CDN; GCP governance-as-code via shared Terraform modules
Real-time Big Data pipeline for Spanish low-emission-zone (ZBE) portals, processing ANPR events at scale

AWSGCPTerraform AnsibleKubernetesCilium LLMOpsJenkinsSonarQube IPSecFinOps

DevOps Engineer

QA-BIT · Spain

Jul 2024 – Jul 2026

Led GCP → AWS microservices & database migration with Terraform under tight deadlines
Hardened Azure network security — Azure SQL Server, App Service and Linux Web Apps behind Private Endpoints in VNets, with subnet/NIC-level restrictions
Azure DevOps YAML pipelines with automated quality gates and secure secrets management
Transitioned deployments to GitOps model: GitHub Actions + Helm + ArgoCD, with ACR container lifecycle management
Flutter mobile CI/CD via Codemagic; Odoo + WordPress production management and backups

GCPAWSAzure ArgoCDHelmCodemagic GitOpsTerraform

DevOps Team Leader

DATYS · Santa Clara, Cuba

Jul 2023 – Jul 2024

Led 3-engineer team — centralized and standardized deployments using Ansible AWX
Embedded DAST into CI/CD pipelines for automated runtime vulnerability detection
Manual web application pentests with Burp Suite; patched critical gaps before production

LeadershipAnsible AWX DASTBurp SuiteCI/CD

Kubernetes Specialist

QA-BIT · Spain

Nov 2022 – Feb 2024

Cloud-native CI/CD on Oracle Cloud (OKE) with Kubernetes, orchestrating delivery across multiple environments
Secure, privilege-less container builds with Jenkins + Kaniko to minimize attack surface
KrakenD API Gateway + Redis routing; Loki log centralization for observability
Standardized the deployment lifecycle using cloud-native tooling and Visual Builder

Oracle CloudOKEKaniko KrakenDLokiRedis

DevOps Specialist

DATYS · Santa Clara, Cuba

Jul 2022 – Aug 2023

DC/OS → Kubernetes migration across 4 production environments — zero downtime
Shift-left security: SAST integrated into CI/CD + ModSecurity WAF deployment
On-premise GitLab administration and full CI/CD pipeline architecture
ELK + Prometheus centralized observability stack
HA distributed data systems: Hadoop (HDFS/YARN) + Spark with ZooKeeper failover, Cassandra multi-node replication, PostgreSQL with HAProxy + PgBouncer

KubernetesDC/OSSAST ModSecurityELKGitLab HadoopSparkCassandra PostgreSQL

$ grep -r "impact" ./career/

Key Achievements

Zero-Downtime Migration

DC/OS → Kubernetes across 4 production environments — zero service interruption, full rollback strategy, zero developer impact.

Shift-Left Security

Embedded SAST + DAST gates into CI/CD pipelines and deployed ModSecurity WAF — vulnerabilities caught before they reach staging.

Multi-Cloud Migration

GCP → AWS microservices migration with GitOps (ArgoCD + Helm), enabling independent per-team deployments under tight deadlines.

Full Observability Stack

Deployed Prometheus + Grafana with RBAC, ELK Stack, and Loki across hybrid cloud and on-premise — one unified source of truth.

Mobile CI/CD Pipeline

End-to-end Flutter CI/CD with Codemagic — automated builds, code signing, and App Store / Play Store deployments.

IaC at Scale

Full Terraform + Ansible automation for hybrid infrastructure — reproducible environments, IPSec tunnel provisioning, zero config drift.

Tech Stack

Cloud Platforms

Containers & Orchestration

CI / CD

Infrastructure as Code

Monitoring & Observability

Security (DevSecOps)