Matias Martinez

Operate AWS and Kubernetes environments for client projects, delivering changes through GitOps with Argo CD. Support CI/CD pipelines in a trunk-based development workflow focused on small, frequent and safe releases.

Audited infrastructure and ran a K3s cluster on Hetzner (MongoDB, Redis, NATS, Argo CD) for client Dropea. Replaced the managed load balancer with Cloudflare Tunnel, moved Terraform state to Cloudflare R2, added SSH MFA and GitHub Actions snapshot automation, and separated staging from production.

Reduced AWS spend by approximately USD 10K per month on a ~USD 250K/month AWS Organization by analyzing CloudWatch Logs, Aurora readers, ElastiCache, Datadog custom metrics and load balancer costs. Operated StrongSwan IPsec tunnels and HAProxy TCP proxies to SITA, Amadeus, Sabre and other carriers, and administered IBM MQ queue managers for partner integrations.

Designed cloud architecture and led the migration of company workloads to AWS. Administered Kubernetes clusters and container platforms, applying DevSecOps practices to CI/CD pipelines, and standardized infrastructure provisioning with Infrastructure as Code.

Managed AWS Organizations and IAM Identity Center (SSO) across 84 AWS accounts. Built 30 ECS clusters with CPU/memory-based autoscaling using CloudFormation, and delivered infrastructure and CodePipeline pipelines with Terraform.

Designed Dev/QA/Prod environments on isolated VPCs with peering and ran services on ECS Fargate with CI/CD to ECS and S3. Implemented API Gateway with VPC Link to NLB, Lambda authorizers and custom domains, and managed RDS PostgreSQL, DMS migrations and Redshift.

Administered 500+ servers (Linux, FreeBSD, VMware ESXi/vCenter, Proxmox) and provisioned VMs with Ansible and Packer. Ran Jenkins, GitLab and a private Docker registry, managed BGP routing on VyOS and IPsec VPNs on pfSense, and monitored with Nagios and Zabbix.