A capability map for the systems I build, operate, debug, automate, secure,
and teach.
Cloud Platform
AWS at production scale
EC2 VPC Route53 S3 Lambda ECS EKS RDS CloudFront SQS SNS DynamoDB API Gateway
Kubernetes
clusters, workloads, upgrades
EKS kubeadm k0s Talos Helm Argo CD Karpenter operators network policies Docker ECR
Infrastructure as Code
repeatable, reviewed, automated
Terraform CloudFormation AWS CDK Serverless Framework Ansible custom AWS SDK tooling
Delivery Systems
CI/CD and GitOps
GitHub Actions GitLab Pipelines CodePipeline CodeBuild CodeDeploy Jenkins CircleCI canary blue-green
Observability
logs, metrics, traces, incidents
OpenTelemetry Prometheus PromQL Thanos Grafana Grafana Alloy Loki CloudWatch Datadog New Relic PagerDuty Opsgenie
Security
shift-left and cloud controls
IAM SSO Secrets Manager 1Password WAF Shield TLS image scanning SonarCloud IaC policy checks
Data Stores
operate, scale, maintain
PostgreSQL MySQL Percona Operator DynamoDB DocumentDB MongoDB OpenSearch Redis Memcached RDS
Automation
scripts to platform tools
Golang Bash Node.js TypeScript Python AWS SDK Lambda automation Slack apps
Linux and Networking
debugging, hardening, internals
Ubuntu Amazon Linux CentOS Nginx VPC subnets load balancers container internals AMIs
Blockchain Infrastructure
EVM compatible rollup operations
sequencers replicas Sepolia nodes Ethereum nodes RPC load balancers block explorers
Data Pipelines
analytics and movement
Prefect dbt AWS Glue Kinesis Athena Firehose
Team Enablement
platform work that helps people ship
runbooks documentation PR reviews release coordination SOC2 support developer tooling