available for contracts
Senior DevSecOps Engineer
& Cloud Architect.
❯ kubectl get nodes -o wide
NAME STATUS ROLES AGE VERSION
mad1-master-1 Ready etcd,master 42d v1.33.5+k3s1
mad1-master-2 Ready etcd,master 42d v1.33.5+k3s1
mad1-master-3 Ready etcd,master 42d v1.33.5+k3s1
❯ argocd app list
NAME CLUSTER NAMESPACE STATUS HEALTH
xavifortes-web in-cluster xavifortes Synced Healthy
arc-controller in-cluster arc-systems Synced Healthy
cert-manager in-cluster cert-manager Synced Healthy
traefik in-cluster kube-system Synced Healthy
❯ _40%
infra cost reduction
Azure → GCP migration
~0
downtime migrations
live traffic, zero outage
15+
services automated
deploy pipelines end-to-end
3 DC
datacenters managed
homelab + OVH MAD + OVH GRA
work
What I actually build
Cloud Migrations
Azure to GCP — Zero Downtime
Full migration strategy across IAM, networking, and perimeter security. No dropped packets. No missed deployments.
Kubernetes
k3s HA on OVH — GitOps End-to-End
3-node etcd cluster on OVH MAD1. Traefik, cert-manager, Longhorn, ArgoCD. Every change is a git commit.
Homelab
Dual Proxmox Nodes, DMZ, Bare Metal
96GB RAM across two nodes. TrueNAS, Home Assistant, VMs, LXCs. Unifi networking with a real DMZ and dedicated IP.
iOS Engineering
Strobel — Guitar Tuner App
Swift audio DSP, real-time pitch detection, App Store CI/CD pipeline. 5-star precision, production-quality code.
daily drivers
ready to hire
Your infra deserves an engineer
who built their own.
Available for senior contracts in cloud architecture, platform engineering, and DevSecOps. Remote-first. Results-first.