Senior DevSecOps Engineer
& Cloud Architect.

Specializing in secure, scalable infrastructure, cloud migrations, and full-stack automation. I build the platform so your product doesn't fall over.

See the architecture →Let's talk

xavifortes@ovh-mad1

❯ kubectl get nodes -o wide
NAME            STATUS   ROLES         AGE   VERSION
mad1-master-1   Ready    etcd,master   42d   v1.33.5+k3s1
mad1-master-2   Ready    etcd,master   42d   v1.33.5+k3s1
mad1-master-3   Ready    etcd,master   42d   v1.33.5+k3s1

❯ argocd app list
NAME              CLUSTER    NAMESPACE      STATUS   HEALTH
xavifortes-web    in-cluster xavifortes     Synced   Healthy
arc-controller    in-cluster arc-systems    Synced   Healthy
cert-manager      in-cluster cert-manager   Synced   Healthy
traefik           in-cluster kube-system    Synced   Healthy

❯ _

40%

infra cost reduction

Azure → GCP migration

downtime migrations

live traffic, zero outage

15+

services automated

deploy pipelines end-to-end

3 DC

datacenters managed

homelab + OVH MAD + OVH GRA

work

What I actually build

☁

Cloud Migrations

Azure to GCP — Zero Downtime

Full migration strategy across IAM, networking, and perimeter security. No dropped packets. No missed deployments.

⎈

Kubernetes

k3s HA on OVH — GitOps End-to-End

3-node etcd cluster on OVH MAD1. Traefik, cert-manager, Longhorn, ArgoCD. Every change is a git commit.

▣

Homelab

Dual Proxmox Nodes, DMZ, Bare Metal

96GB RAM across two nodes. TrueNAS, Home Assistant, VMs, LXCs. Unifi networking with a real DMZ and dedicated IP.

◆

iOS Engineering

Strobel — Guitar Tuner App

Swift audio DSP, real-time pitch detection, App Store CI/CD pipeline. 5-star precision, production-quality code.

daily drivers

⎈Kubernetes / k3s

◈Terraform / OpenTofu

⟳ArgoCD

⚡GitHub Actions

☁Cloudflare

⚙Ansible

▣Proxmox

🔐SOPS + Age

⬡Rust / Python

◆Swift / iOS

⛨Trivy / Checkov