- Migrated the platform from DigitalOcean to AWS, introducing Kubernetes and Helm with HPA and Karpenter-based node autoscaling to standardize deployments and improve reliability.
- Configured VPC networking, peering, and routing with nginx-based ingress, TLS termination, and Route53 DNS — closing latency and security gaps across the network layer.
- Replaced DroneCI with GitHub Actions and adopted ArgoCD for GitOps-based deployment, increasing release frequency from ~10 to 200+ per month.
- Implemented Datadog monitoring across Kubernetes and RabbitMQ, plus a Zero Trust network model via Cloudflare with secrets centralized in HashiCorp Vault — reducing incident response time and strengthening security posture.
Iago Misko
Senior DevOps / Site Reliability Engineer
About
Senior DevOps/SRE Engineer with 15+ years operating infrastructure spanning legacy systems to Kubernetes, GitOps-driven CI/CD, and full observability stacks. I build resilient, self-service platforms on AWS and GCP, provisioned and managed through Terraform, that help engineering teams ship faster while meeting SLOs and reducing MTTR.
Trilingual (Portuguese, English, Spanish), with experience ranging from vendor engagements supporting global telecom operators (Vodafone, América Móvil, Telefónica), to a direct engagement embedded at Pinterest, to high-growth startups across Cybersecurity, HR Tech, and AI.
Career log
- Migrated infrastructure to Terraform, eliminating configuration drift and establishing a fully version-controlled, auditable baseline for PostgreSQL- and Kafka-backed services.
- Built VPC networking, peering, and routing with AWS ALB-based DNS and TLS termination, hardening the platform's network security and connectivity.
- Migrated CI to GitHub Actions and adopted Kustomize for Kubernetes config management and EKS Auto Mode for node autoscaling — enabling self-service deploys and parallel builds that cut release friction across teams.
- Replaced Datadog with an open-source observability stack (Grafana, Prometheus, OpenSearch, Tempo, OpenTelemetry) and centralized secrets in AWS Secrets Manager — cutting monitoring costs by 60% while improving audit compliance.
- Mentored 9 team members on DevOps tooling and workflows, strengthening the team's DevOps culture.
- Optimized infrastructure and PostgreSQL configuration, decreasing application deployment and start-up time by 40%.
- Established VPC networking, peering, and routing with nginx-based ingress, TLS termination, and Route53 DNS for a consistent, auditable network architecture.
- Implemented automated certificate self-renewal via HashiCorp Vault, eliminating manual cert management and expiry-related outages.
- Standardized CI pipelines on GitLab CI and Helm for Kubernetes deployments, with HPA to handle variable workloads.
- Automated backup/restore routines and built custom monitoring with the ELK stack, Grafana, and Prometheus.
- Led automated deployment of weekly production releases, implementing a git branch-cut and code-freeze process that reduced deployment time and increased release accuracy.
- Implemented custom alerting on CI job status (Buildkite) and applied performance tuning across dev, test, and production environments.
- Mentored 5 team members on DevOps techniques, supporting adoption across deployment and testing workflows.
- Managed and mentored a 5-person operations team; led a full platform migration from on-premises to cloud infrastructure, transitioning operations to the client's team after contract completion.
- Automated production start/stop and secrets backup/restore routines; deployed Zabbix, Graylog, and ElasticSearch to monitor PostgreSQL, Kafka, and RabbitMQ services.
- Automated Docker Swarm cluster management (Traefik ingress, TLS, secrets backup/restore); led ~2 major software releases per week over 6 months while mentoring teams.
- Led automated tooling for non-functional test execution, increasing test accuracy by 30%.
- Designed and maintained GCP/AWS environments for Vodafone, AT&T, Telefónica, and América Móvil; led a full platform migration from Unix to Linux.
- Provisioned GCP/AWS environments for América Móvil and Telefónica; built Python tooling to bridge WebLogic Scripting Tool (WLST) with KSH, automating CRM–Ordering integration.
Skills
Education
Get in Touch
I'm always open to discussing new projects, creative ideas, or opportunities.