julayo@dev:~$ whoami

Senior DevOps / Platform Engineer with 10+ years building and running enterprise CI/CD and cloud infrastructure — in banking and high-volume e-commerce, where deploys have to be boring and failures are expensive.

AWS Certified Solutions Architect. Deep with OpenShift/Kubernetes and a broad delivery toolchain (Harness, Jenkins, UrbanCode, TeamCity, CodePipeline). I also run production-grade AI infrastructure at home — GPU model serving, GitOps, mesh networking.

I'm also a dad, which taught me ruthless prioritization: no ceremony, no complexity that doesn't earn its place. I got into DevOps because I hate doing the same thing twice — if it's tedious and repetitive, automate it.

Based in Santiago, Chile 🇨🇱 — open to senior IC roles, remote-friendly for teams in the USA or LATAM.

Infrastructure & CI/CD

Three real systems I designed and run. Every diagram below reflects something live in production — not a whiteboard sketch.

1 · julayo-dev.com — AWS static site (all IaC)

This CV, defined entirely in Terraform: a private S3 bucket served through CloudFront (Origin Access Control), auto-renewing ACM cert, Route53 DNS. Deployed by CodePipeline → CodeBuild.

Show diagram
graph LR Dev[git push] --> GH[GitHub main] GH -->|webhook| CP[CodePipeline] subgraph AWS["AWS · us-west-2"] CP --> CB[CodeBuild
buildspec.yml] CB -->|s3 sync| S3[(Private S3
+ OAC)] CB -->|invalidate| CF[CloudFront
+ ACM TLS] S3 --- CF end R53[Route 53] --> CF CF -->|HTTPS| U[Visitors]

2 · delete-from.com — keyless CI/CD (OIDC)

Zero long-lived credentials: GitHub Actions federates into AWS via OIDC and assumes a scoped role at deploy time. Static hosting on S3 + CloudFront.

Show diagram
graph LR Dev[git push] --> GHA[GitHub Actions] GHA -->|OIDC token| STS[AWS STS
AssumeRole] STS --> Role[Scoped IAM role
no static keys] Role -->|s3 sync| S3[(S3)] Role -->|invalidate| CF[CloudFront] CF -->|HTTPS| U[Visitors]

3 · Homelab — 3-node GitOps platform (on-prem)

One repo as source of truth across a workstation/AI server, a NAS and a public VPS. Nodes deploy by pulling from Git — no manual changes. 5-copy redundancy, Caddy + TLS, Tailscale mesh over CGNAT.

Show diagram
graph LR Edit[edit config] --> Push[git push
3 remotes] Push --> Git[(Gitea + mirror
+ GitHub)] Git -->|git pull| N1[Desktop / AI] Git -->|git pull| N2[NAS] Git -->|git pull| N3[Public VPS] N1 --> D[make deploy
docker compose up] N2 --> D N3 --> D

Key skills

Projects

projects/
homelab/ 3-node GitOps platform — Docker, GPU model serving, Caddy + TLS, Tailscale mesh, 5-copy Git redundancy with tested DR.
[Docker] [GitOps] [Caddy] [Tailscale] Guides →
portfolio-devops/ This site — AWS static-site reference architecture in Terraform (private S3 + CloudFront/OAC, ACM, Route53), CI/CD via CodePipeline → CodeBuild.
[AWS] [Terraform] [CodePipeline] [CloudFront] Source
delete-from-site/ Static site with keyless CI/CD — GitHub Actions federating into AWS via OIDC (no long-lived keys) → S3 sync → CloudFront invalidation.
[GitHub Actions] [OIDC] [S3] [CloudFront] Source Live

Tutorials

tutorials/

Copy-paste guides for standing up real services with Docker Compose — every code block has a one-click copy button.

Contact