Independent consultant · Málaga · EU
Open to new engagementsSenior DevOps Engineer & Cloud Architect
Azure, observability and digital product. I leave it in production, with handover. The team runs it without me.
VolkswagenProsegurCajamarMapfreAllFundsPwCAccentureTetra Pak
SectorsAutomotive · Finance · Pharma · Cybersecurity · Mobility · Industry · Public sector
Azure and AWS. Observability, GitOps and digital product. Same bar: production, evidence, handover.
Landing zones, Kubernetes and governance. Azure as home; AWS at the same level when the workload already lives there.
Actionable signal and measurable MTTR. Not a vanity dashboard.
Repeatable, auditable releases — no heroes at the keyboard.
SaaS, e-commerce and compliance at the same delivery standard.
Partner format: what was broken, what I did, what you can verify. Client detail is sanitised.
97.6%compliance
Stand up Azure from scratch for a group distributor: no landing zone, no cost governance, no cluster DR.
Multi-subscription CAF, 25+ Terraform modules, AKS + Velero, Traefik blue-green, Azure Policy and 10+ Azure DevOps pipelines. Identity, secrets and perimeter with Entra ID, Key Vault and Private Link; Azure Monitor for visibility.
Audit of 62 assets at 97.6% compliance. 15+ production apps with zero downtime on the ingress cutover.
37microservices
Legacy Jenkins on an XDR platform: fragile releases and GitOps that was hard to audit in production.
Migration to Azure DevOps, 222 Argo CD manifests, Helm and pipeline scanning (Trivy / Checkov). Staged rollout, no big-bang.
37 microservices on the new CI/CD with zero downtime and handover to operations.
25+apps observed
Mobility platform on AWS (eu-south-2) with incomplete observability and infrastructure still outside IaC.
Grafana, Loki and Prometheus across 25+ apps; modular Terraform; GitLab CI. EKS/IAM/VPC and CloudWatch aligned to the account. Loki cardinality and queries under control.
Observability stack live for 25+ applications and shorter build pipelines.
CAFlanding zones
A bank without reusable landing-zone patterns: every subscription was a snowflake.
Terraform modules for networking, security and compute on CAF. Policy, tagging and a documented input/output contract for reuse.
Repeatable landing zones validated for the financial sector.
GDPRcompliance
iStrays data sampling without a GDPR flow an auditor could follow.
iStrays integration, n8n, Cloud Run, Cloud Scheduler and Secret Manager. Anonymisation, retention and access audit on GCP.
Sampling pipeline with GDPR compliance evidence.
B2Bdealerships
Dealership inventory SaaS with technical debt and a dashboard that did not serve the business.
Next.js 15, TypeScript strict, MongoDB, Vercel, Supabase and Stripe. Real-time analytics and refactors of critical components.
Operable B2B product: business panel, payments and groundwork for a marketplace.
Eleven years: first operating servers, network and identity; then leading DevOps and cloud in consulting and product.
Senior DevOps Engineer & Automation Lead
Ansible automation on HPE infrastructure for AllFunds Bank. Centralised observability for public administrations (Andalusia, Canary Islands). CI/CD and Kubernetes troubleshooting on enterprise accounts.
Senior DevOps · Area Lead
Kubernetes for pharma and lab clients. ArgoCD governance, DR with restore <15 min. MTTR from 4 h to 45 min. 99.95% SLA on a 50+ node cluster.
DevOps Engineer · Málaga Hub Lead
Hub leadership: Azure/AWS, CI/CD for 30+ teams, ISO 27001. Mapfre Latam migration: 200+ servers, zero downtime.
SysAdmin / Cloud Engineer
Windows Server and Linux administration, Active Directory, Exchange, site-to-site VPN and L3 support. CIS hardening. Controlled mail and identity migration to Azure AD / Microsoft 365 (80+ users), plus PowerShell and Runbooks automation.
Systems technician (LAN / WAN / VPN)
LAN/WAN administration on a manufacturing plant. Inter-site VPN, Linux and Windows servers in an industrial environment, L2–L3 troubleshooting and maintenance windows coordinated with production.
CAF · AKS · Entra ID · Key Vault · Policy · Defender · Monitor · ACR · Front Door · Private Link · Velero
EKS · ECS · IAM · VPC · CloudWatch · Secrets Manager · ALB · eu-south-2
Terraform · Terragrunt · Argo CD · Helm · Kustomize · Flux · Azure DevOps · GitLab · Actions · Backstage · Crossplane
Prometheus · Grafana · Loki · Tempo · OpenTelemetry · Thanos · ELK · Datadog · App Insights
Next.js · TypeScript · Node · PostgreSQL · Prisma · MongoDB · Redis · Stripe · Vercel
ISO 27001 · GDPR · CIS · OPA · Kyverno · Trivy · Snyk · Falco · PKI
Certifications
30–45 min. Risk, debt and quick wins. If we are not a fit, I say so on that call.
Scope, deliverables, out-of-scope and metrics (deploy, MTTR, compliance). Fixed-scope or part-time retainer.
IaC, pipelines, evidence and runbooks. Success is operations not needing me for the day-to-day.
One call. If there is no fit, I say so there. Independent in Málaga, clients in Spain and the EU.
Open Calendly