Senior Cloud Infrastructure Engineer at PT. Indomarco Prismatama (Indomaret Group) — 6+ years operating production cloud platforms across GCP, Kubernetes, Terraform, and HashiCorp Vault.
I run cost-aware infrastructure: Committed Use Discounts (CUD) for steady-state workloads, Spot/Preemptible GCE for fault-tolerant jobs, and self-hosted observability stacks to avoid Cloud Logging ingestion charges. Sustained zero board-level cost complaints over 2 years while infrastructure kept expanding.
Currently focused on Kubernetes platform engineering (K3s/GKE), ArgoCD GitOps, Vault dynamic secrets, IAP-secured workloads, and Terraform-driven provisioning across hybrid cloud/on-premise environments. Former Technical Lead (2021–2026) across four engineering squads — that role closed July 2026 to focus full-time on cloud.
| Project | Contribution | Status |
|---|---|---|
| go-gitea/gitea | Fix CODEOWNERS review-request attribution; HTML heading ID generation (#36233, #36348) | Merged (Jan 2026) |
| tscircuit/core | Map knockout props in SilkscreenText component (#1886) |
Merged (Feb 2026) |
| NethermindEth/starknet.go | EstimateFee types; BlockWithTx* return types; event filtering utilities; contributing guide (#838–#843) |
Open (awaiting review) |
See GitHub contribution graph for the full picture across public and private work.
- GCP production platform — 37+ Compute Engine instances across staging and production, IAP-secured (zero public exposure), CUD + Spot for cost discipline
- Kubernetes (K3s / GKE) — ArgoCD GitOps, Vault dynamic secrets, multi-cluster networking
- Terraform — day-to-day provisioning, capacity planning, hybrid cloud/on-premise parity
- Observability — self-hosted Grafana + Prometheus + Loki stack (no Cloud Logging ingestion cost)
- CI/CD — Jenkins (legacy, hardened) and GitHub Actions; deployment time cut by 40% via pipeline redesign
- Postgres & Vault — operational DBA work (pgBackRest, PITR, SCRAM-SHA-256 migrations), dynamic secret issuance
For deeper case studies (architecture diagrams, cost numbers, postmortems), see my portfolio.
Cloud & Infra: GCP · AWS (EC2 GPU) · Kubernetes (K3s/GKE) · ArgoCD · Terraform · Ansible · Helm CI/CD: Jenkins · GitHub Actions · Drone CI Security & Secrets: HashiCorp Vault · IAP tunnels · Cloudflare Tunnel · Let’s Encrypt Data: PostgreSQL · SQL Server · Redis · MongoDB · Elasticsearch Observability: Prometheus · Grafana · Loki · OpenSearch Languages: Go · TypeScript · Python · Bash · C# (legacy)
Practices: FinOps · GitOps · SRE · IaC · DDD · TDD · Microservices