Architected reusable Terraform modules for Datadog observability across 4 AWS environments, cutting deployment time from days to hours. Designed YAML-native CI/CD pipelines (GitHub Actions, Ansible, Bash) for agent rollout, reducing environment drift to near zero. Built Datadog dashboards and synthetic monitors, cutting MTTD by 50%. Introduced FinOps tagging standards for per-team cost attribution and proposed Policy-as-Code guardrails, blocking ~30% of misconfigurations pre-deployment.

Migrated 50+ microservices from Jenkins → CircleCI → GitHub Actions with YAML-native templates, cutting deployment cycle time by 65%. Built Terraform modules enforcing tagging, IAM boundaries, and security validation for 100% governance compliance. Automated user lifecycle management (GitHub, AWS IAM, internal tools), eliminating manual provisioning and reducing time from 2 days to 15 minutes. Created self-service repo provisioning with branch protection, secrets injection, SonarQube, and policy templates, accelerating developer onboarding by 70%. Enforced zero-hardcoded-secrets policy via GitLeaks/TruffleHog CI gates with HashiCorp Vault and AWS Secrets Manager. Integrated SonarQube and AWS Inspector vulnerability scanning with automated blocking, reducing security debt by 40%. Deployed Wazuh EDR and OpenVAS for threat detection and compliance. Built event-driven observability (CloudWatch, Lambda, SNS) and led Datadog APM/dashboards/synthetic tests, cutting MTTR by 45%.

Directed SRE for Knox, Samsung Pay, and SmartThings IoT serving millions of global users across AWS, Azure, and GCP. Managed Terraform Enterprise at scale with workspace-per-environment architecture, module registry, and RBAC for 30+ engineers (7 teams) with zero state corruption. Architected multi-tenant RBAC framework isolating environments via AWS Organizations SCPs, Kubernetes network policies, and Terraform workspace separation. Established YAML-native CI/CD standards (GitHub Actions, Jenkins Pipeline-as-Code), cutting deployment failures by 55%. Led DISA STIG compliance for Samsung Knox government deployments, passing external audit with zero critical findings. Mentored 6 SREs, built on-call rotations, incident playbooks, and blameless post-mortems, reducing repeat incidents by 35%.

Managed AWS multi-account environment (VPC, IAM, RDS PostgreSQL, ElastiCache Redis, S3, Dynamodb, Lambda) serving 1M+ browser-extension users at 99.95% uptime. Built serverless automation with AWS Lambda for DB maintenance and log aggregation, cutting operational toil by 25 hours/week. Designed GitHub Actions CI/CD for Python/Django with automated testing and security scanning, shrinking release cycles from weekly to daily.

Built two enterprise data centers from ground up — blade servers, rack-and-stack, power/cooling, network cabling, fire suppression, gensets, PDU, AC, wireless — delivering both on schedule and 12% under budget. Managed hybrid cloud (AWS EC2/RDS/S3/Route 53, DigitalOcean, Rackspace). Deployed VMware vSphere clusters with vMotion, HA, DRS, and NetApp FAS storage with SnapMirror DR replication. Established GitHub Actions CI/CD for WordPress/PHP and automated server provisioning with Ansible, cutting deployment time by 80%. Managed reporting stack: SharePoint, Power BI, Tableau, Jasper, OpenData for educational analytics.

Revamped office network for security compliance; optimized VPN architecture using Juniper VPN Firewall appliances, Cisco backbone, and blade server infrastructure. Designed and deployed thin-client computing environments for public schools under a DepEd initiative using QEMU-based open-source virtualized classroom desktop servers. Created and maintained Microsoft Visio architecture diagrams for current and proposed infrastructure.

Supported sub-millisecond latency HFT infrastructure using NYSE MAMA/OPENMAMA messaging middleware, in-memory clustered servers, and ultra-low-latency FIX protocol. Hardened Linux systems for PCI-DSS and SOX compliance across market data platforms. Managed production outages and root cause analysis with server dev, NetOps, vendors, and customers. Reduced false alerts in Geneos (ITRS) and Nagios through pattern investigation, binary code analysis, and monitoring algorithm tuning. Contributed to daily health check automation for SuperFeed, MamaCache, and multicast network connections.

Developed and presented a unified ticketing tool improving tracking of production issues, deployment schedules, and cross-team communication (account managers, dev, deployment, network, QA). Created a Linux-based search engine script connected to production SQL server to identify customer hosts, network/router/IP assignments, active processes, and key details for efficient troubleshooting. Reduced false Nagios alerts through pattern investigation, binary code analysis, and monitoring algorithm tuning. Managed production and UAT software rollouts ensuring zero downtime.

Managed enterprise data center with blade servers for the Philippines' largest telecommunications provider, supporting millions of subscribers with F5 BIG-IP load balancer redundancy, DNS services (WiMAX, GPRS, WAP), Linux servers, and DNS Bind. Led data center migration and consolidation projects with zero unplanned downtime as system administrator within Network Operations. Implemented F5 BIG-IP redundancy across Cebu and Makati data centers. Managed VMware, Hyper-V, KVM, Proxmox, OpenStack, LXC/Libvirt, and Vagrant virtualization environments. Maintained and set up Google Cache infrastructure for the Philippines market.

Progressed from trainee to senior administrator managing Solaris and Linux server farms, EMC and NetApp storage, Veritas NetBackup, and Nagios monitoring for national telecommunications infrastructure.

Developed and maintained banking applications and internal software systems supporting core financial operations.