Experience

Work experience

1. DevOps Engineer / Platform Engineer · Essilor Shared Services Philippines

   May 2025 — present

   Hybrid

   • Led the technical design and build of a greenfield cloud platform on Azure, from concept to go-live, balancing business needs with the developers' technical decisions.
   • Built CI/CD pipelines in GitHub Actions for web apps (ASP.NET Core), APIs and desktop apps, automating manual build and deployment steps and cutting release time by around 70%.
   • Integrated applications with Microsoft Entra ID (Azure AD) and OIDC for single sign-on, and managed the service principals and app registrations that give them access to SSO, Key Vault, databases and APIs.
   • Built a Jenkins pipeline that warns the team in Microsoft Teams before the service principal secrets stored in Azure Key Vault expire.
   • Moved hard-coded secret keys out of application code into Azure Key Vault, where the Jenkins pipelines fetch them, so each project's and environment's secrets are organized in one place.
   • Hardened API and network security across web apps and Azure API Management (APIM), restructuring the architecture to close the gaps found.
   • Built a Java application for automated website health checks, run from GitHub Actions, Bitbucket Pipelines and Jenkins.
   • Upgraded AKS (Kubernetes) nodes, troubleshooting and resolving node-draining issues along the way.
   • Wrote architecture decision records (ADRs) and operational runbooks for onboarding future team members.

   AzureGitHub ActionsKubernetesEntra IDKey VaultAPI ManagementASP.NET CoreJavaJenkins

2. DevOps Engineer · Inchcape Digital Delivery Center Philippines

   Apr 2022 — May 2025

   Remote

   • Built GitHub Actions automation that shuts down idle Azure resources (AKS clusters, PostgreSQL servers and VMs) on weekends, cutting non-production spend by around 25% a year.
   • Managed and maintained Azure resources as code with Terraform across lower and production environments.
   • Ran deployments from development to production with GitLab Pipelines, Kubernetes and Argo CD (GitOps).
   • Reviewed merge and pull requests to the Helm chart and GitOps repositories, so every change was reviewed before release.
   • Handled production incidents from P4 to P0, including on-call escalations, diagnosing them through pod logs, pod shells (Linux) and Argo CD sync errors, and escalating promptly.
   • Set up monitoring and alerting for self-hosted CI runners with Prometheus and Grafana.
   • Added and rotated secrets across environments, from development to production.
   • Handled PostgreSQL data-dump requests and ran application jobs (imports, cache clearing) through GitLab Pipelines and pod shells.
   • Resolved Docker image tag conflicts in pipelines pushing to Azure Container Registry.
   • Documented 35+ tasks and issue resolutions a week, improving the team's knowledge sharing and cutting troubleshooting time.

   AzureTerraformGitLab CIKubernetesHelmArgo CDPrometheusGrafanaPostgreSQLDocker

Personal projects

Platform · 2026

Homelab33

Old computers turned into Linux servers and then into a Kubernetes homelab. It hosts my own applications and the portfolio site you're looking at.

k3sKubernetesDockerArgo CD

Read the project

Monitoring · 2026

Keeping an eye on Homelab33

I built two dashboards to check my home servers from anywhere. They show whether the machines are healthy and which applications are using their resources, giving me a clear place to start when something goes wrong.

PrometheusGrafanaKubernetesk3s

Read the project

Certifications

Education