DevOps · Cloud Native Engineer

I narrow the gap between development and operations so teams can focus on business logic, not infrastructure. I started as a backend engineer (Kotlin · Spring Boot) and now build the platform those services run on.

• ☸️ Kubernetes platform — EKS with Karpenter, Istio ambient mesh, Cilium (eBPF), and Operators for stateful components
• 🏗️ Infrastructure as Code — AWS and Cloudflare managed with Terraform modules, deployed through GitOps (Argo CD)
• 🔄 CI/CD · Workflow — GitHub Actions (ARC), Argo Workflows, and self-hosted Temporal
• 🔐 Identity · Zero Trust — Keycloak, Okta SSO, OAuth2 Proxy, and Istio authorization policies
• 📨 Event streaming — Kafka, Kafka Connect, Debezium CDC, and Schema Registry on Kubernetes
• 📝 Writing — I only write about what I've actually run: comstering.github.io

Contributions

• bitnami/charts#35772 — Schema Registry: make the JKS secret optional so SCRAM-SHA-512 works with external MSK (merged)
• kafbat/kafka-ui#1205 — Messages: fix typos (merged)

Side project

• lomeone — side-project org on AWS, with all infrastructure managed in Terraform

Platform

Cloud · IaC

CI/CD · Workflow

Data · Messaging

Auth · Security

Backend

Observability