Ruben Fernández
@rubenfernndez
Engineering Manager building secure, automated platforms and agentic AI systems for production teams.
What I'm looking for
I’ve spent 20+ years in technology across founder, startup, and enterprise environments, with a constant focus on baking security and automation into how teams build, ship, and run. Most recently at CARTO, I manage Infrastructure and IT engineering—owning production security end-to-end (SOC 2 Type 2, penetration testing, incident response, and Disaster Recovery/Business Continuity) while leading capacity planning, hiring, and technical direction.
I bring agentic AI into everyday engineering: I built and helped roll out an organization-wide AI Skills system and introduced agentic workflows for FinOps investigations and security operations (vulnerability triage, SOC 2 control review, and security committee prep). I also designed and shipped an internal AI agent to draft vendor security questionnaire responses, removed a recurring bottleneck, and coordinate cross-functional response to supply-chain and account-compromise events.
Experience
Work history, roles, and key accomplishments
Manage the Infrastructure and IT engineering teams across hiring, team development, technical direction and quarterly capacity planning.
Own the security work end-to-end for the production platform and the wider company — SOC 2 Type 2, annual external penetration testing, incident response, and Disaster Recovery / Business Continuity exercises.
Build and ship CARTO's organization-wide AI Skills
Lead the technology strategy and product roadmap end-to-end.
Built a SaaS cloud platform serverless infrastructure that is cost-efficient, highly scalable and meets enterprise-grade security requirements — applying the same SOC 2-style controls and IaC practices I run at scale in my day-to-day.
Operated and evolved CARTO’s global SaaS platform on GCP, serving customers worldwide across infrastructure in Australia, Asia, EU and US.
Owned the security workstream end-to-end for the platform — vulnerability management, SOC 2 (Type 2 certified) compliance, GDPR, annual external penetration testing program (scoping, vendor management, remediation tracking), internal audits and incident respon
Short engagement focused on hardening AWS / Kubernetes infrastructure and improving the team’s CI/CD posture
Stabilized and made recoverable a legacy infrastructure, then designed and implemented a new automated platform from scratch — Terraform-managed, EKS-based, with zero-downtime deployments.
Built scalable, cost-effective CI/CD using spot instances and Kubernetes runners; automated observability, monitoring and alerting on Datadog.
Adapted infrastructure and processes to achieve ISO 27001, hardeni
For some customers, Barrabés operated as their outsourced innovation lab. I built the greenfield cloud-native infrastructure on AWS — Kubernetes, observability and internal tooling — that hosted all the MVPs and innovation projects our developers shipped, and set up the DevOps and CI/CD practices the teams worked with.
Designed architectures with high availability, cost-efficiency and security as
Co-founded and ran the tech side of an immersive escape-room business — end-to-end from design to implementation of games. Physical automations, IVR, SMS, chatbots and Office 365 integrations.
My first founder experience.
As Cloud Evangelist for Santander Group, my job was to make cloud a real default inside a deeply traditional engineering organisation — promoting the cloud strategy and expanding adoption across teams.
Led innovation projects end-to-end on OpenStack — virtual datacenters, DevOps methodology and Ansible automation — from design thinking through to production.
Team Leader for HP’s second/third-line Unix supporting, large-scale IBEX 35 customers under ITIL. My first leadership role. Also worked on the early HP Public Cloud (OpenStack) move and ops automation.
Iberia OMC Unix/Linux System and storage administrator
Feb 2007 - Dec 2010 (3 years 10 months)
Second/third-line system administration of critical Unix/Linux clusters for IBEX 35 customers, in a shared delivery model under ITIL. 24x7 on-call across multi-customer, multi-region operations with strict incident, change and problem management.
Unix/Linux System & Storage Admin
Hewlett-Packard
Feb 2007 - Dec 2010 (3 years 10 months)
Provided second/third-line administration for critical Unix/Linux clusters supporting IBEX 35 customers under ITIL. Managed 24x7 on-call operations including incident, change, and problem management across multi-customer, multi-region environments.
Backup, Unix and Storage administrator
Dec 2005 - Feb 2007 (1 year 2 months)
Worked as Backup, Unix and Storage administrator at Telyco (Telefonica group).
Backup Unix & Storage Admin
Telyco (Telefonica Group)
Dec 2005 - Feb 2007 (1 year 2 months)
Handled backup, Unix, and storage administration within the Telefonica group. Supported shared-delivery, operational responsibilities as part of multi-customer infrastructure operations.
Worked as a system operator for Telyco within the Telefonica group. Supported operational duties for critical systems in a shared delivery environment.
Worked as a network technician at Telefonica Data. Supported network operations during the year 2005.
Worked as a technician for Pc City Spain S.A.U. between 2003 and 2005.
Education
Degrees, certifications, and relevant coursework
Benjamin Rua
Técnico superior, Sistemas de telecomunicaciones e informáticos
2001 - 2003
Availability
Location
Authorized to work in
Job categories
Skills
Interested in hiring Ruben?
You can contact Ruben and 90k+ other talented remote workers on Himalayas.
Message RubenGet matched with your dream remote job
Sign up now and join over 250,000+ remote workers who receive personalized job alerts, curated job matches, and more for free!
