ECFX
Sole owner of DevOps and infrastructure on an engineering team that has never been larger than nine, and sole driver of the modernization program.
Platform architecture
- Architected a config-driven DAG platform for document processing: a Micronaut orchestrator and generic workers over RabbitMQ, a standalone JWT auth service, and a Vue operator dashboard.
- Its ten generic stages are built to replace 535 legacy processor files. The first source pattern runs end-to-end on the dev environment, ahead of any production traffic.
Modernization
- Drove a 13,047-commit monolith with no test suite from Micronaut 1 to 4 and Java 11 to 17, without a freeze.
- Took it on to Micronaut 5 and Java 25 in one coordinated jump that took days to walk back to green.
- Extracted a schema-first library of 75 JPA entities and a gRPC bridge: one data seam of a strangler decomposition that is not finished yet.
Security
- Designed an OAuth 2.1 authorization server core and its fail-closed SAML replay guard in Postgres, merged with the auth suite at 494 of 494.
- Built the gated AWS KMS key migration that closed with all 207 production keys verified on the new CMK.
- Built a tenant-scoped MCP server with twelve dashboard tools behind OAuth 2.1; it runs on staging, not yet in production.
AI engineering
- Own the team-adopted Claude Code platform: 47 skills and 19 agents around a closed-loop, budgeted TDD memory.
- Presented my AI-assisted workflow to engineering leadership.
AI engineering platform From copy-paste to context engineering
Infrastructure
- Upgraded three EKS clusters and Karpenter, solo, with roughly five minutes of total logged downtime.
- Cut median master CI time about 65%, from 38 minutes to 11, across two changes: self-hosted runners, then parallel per-app JIB builds with path-based change detection.
- Moved 21 click-ops Grafana dashboards into Terraform in 24 days.