Cloud Infrastructure & Security Engineer | SRE & DevSecOps
I am an infrastructure and security engineer based in Costa Rica, operating independently through Bashware Security and Networks.
Over the last 6 years, my career has naturally evolved from managing NOC operations and troubleshooting complex Azure networking environments, into dedicated security engineering and DevSecOps.
I specialize in the exact intersection where cloud infrastructure meets security. My engineering approach is rooted in a deep understanding of networking fundamentals—knowing exactly how and why systems break allows me to secure them effectively.
Today, I focus on building resilient containerized architectures, automating CI/CD pipelines, developing custom SIEM/XDR detection logic, and creating AI-assisted tooling for SREs.
bashops-agent
Local LLM agent built for Sysadmins and SREs. Ask your infrastructure questions in plain English. Features allowlisted kubectl/shell tooling and full audit logging. Runs 100% locally on GPU for absolute data privacy.
Python Kubernetes Ollama ROCm SysAdmin Tools
passforge
Python CLI built as a vehicle for supply-chain security in CI/CD pipelines. Features include Bandit scanning, pip-audit, SBOM generation, and Sigstore signing.
Python CI/CD Supply-Chain Security DevSecOps
azure-architecture-labs
Hands-on Azure infrastructure labs covering core architecture patterns, networking, and deployment — built alongside my AZ-104 preparation.
Azure IaC Cloud Architecture
SecureOps Pipeline
End-to-end DevSecOps architecture portfolio project. Containerized application moving through Docker → Terraform → Ansible → Kubernetes/Helm → GitHub Actions CI/CD with strict security gates → Prometheus/Grafana observability → STRIDE threat modeling.
Repo coming soon.
Docker Terraform Kubernetes GitHub Actions Prometheus
| Domain | Technologies |
|---|---|
| OS & Infra | Linux (Ubuntu · RHEL) · Windows Server · VMware |
| Containers & IaC | Docker · Kubernetes · kind · Terraform · Ansible |
| Cloud | Microsoft Azure (Networking, Entra ID, DevOps) · AWS |
| Security | Wazuh (SIEM/XDR) · Threat Modeling · Supply-Chain Security |
| Observability | Prometheus · Grafana |
| Languages | Python · Bash |
| AI/ML | Ollama · PyTorch · ROCm · Local LLM Agents |
| Networking | TCP/IP · DNS · VLANs · VPN · Firewalls · Packet Analysis |
ISC2 Certified in Cybersecurity (CC) | CCNA | AZ-104 Azure Administrator (Targeting) | RHCSA (Targeting)
Open to remote or hybrid roles globally in SRE, DevSecOps, Cloud Engineering, and Security Engineering.