Cloud Engineer ・ DevOps Architect ・ Security-First Builder
I design, build, and operate production-grade cloud infrastructure - from zero to scale.
I architect cloud platforms that teams can trust in production. My work sits at the intersection of infrastructure, automation, and security - building systems that are observable, self-healing, and engineered to last.
Right now, I'm focused on:
Production Kubernetes clusters, service meshes, and internal developer platforms
Secret scanning pipelines, compliance-as-code, and SOC monitoring stacks
Full-stack monitoring with Grafana, Prometheus, Loki, and custom synthetic checks
GitHub Actions workflows, self-hosted runners, and deployment automation
LLM-driven code review, security analysis, and developer workflow automation
Cloud Platforms
Infrastructure & Orchestration
CI/CD & Automation
Monitoring & Observability
Languages & Scripting
| Project | What It Does |
|---|---|
| codeguard | AI-powered code review CLI + GitHub Action - security, bugs, and performance analysis using LLMs (OpenAI, Anthropic, Ollama) with CWE/OWASP knowledge base and SARIF output |
| infraguard | Infrastructure security CLI - Terraform plan risk scoring, AWS tag auditing, and IAM policy analysis in one tool |
| github-actions | Composite GitHub Actions library - SSH deploy, Python CI, multi-channel notify, SARIF reporting |
| renovatebot | Production-ready centralized Renovate template for org-wide dependency management |
Some of my production work lives under the CaeliCode organization.
| Project | What It Does |
|---|---|
| secret-scanner | Enterprise secret scanning pipeline with Gitleaks & TruffleHog |
| soc-monitoring-stack | Containerized SOC monitoring - Grafana, Prometheus, Loki, Alertmanager |
| status-page | Config-driven uptime monitoring with Grafana SM + Atlassian Statuspage |
| github-user-management | Centralized GitHub org user & repo governance automation |
| runner-infrastructure | Self-hosted GitHub Actions runner fleet management |
Building infrastructure that engineers trust and operators sleep through.



