Implementing Terraform Modules
Writes and reviews reusable Terraform modules for AWS, Azure and GCP - file layout, variable validation, outputs, provider pinning, remote state with locking, Terraform versus Terragrunt, and Terratest.
Implementing CI/CD Pipelines
Designs and implements CI/CD pipelines on GitHub Actions, GitLab CI, Bitbucket Pipelines, Azure Pipelines or Jenkins - stage structure, deployment strategy, OIDC credentials, monorepo builds, and IaC plan-and-apply gates.
Deploying to Kubernetes
Configures Kubernetes workloads to a production standard - workload type, requests and limits, probes, PodDisruptionBudgets, scaling, Helm and Kustomize, ingress, and non-root security contexts.
Implementing Observability
Implements metrics, logs, traces and alerting to a standard that supports an on-call rotation - stack choice, RED and USE metrics, SLOs with error budgets, symptom-based alerts with runbooks, and structured logging.
Managing Secrets
Chooses and implements a secrets management approach for cloud and Kubernetes workloads - secret store selection, OIDC federation for CI/CD instead of long-lived keys, rotation policy, and audit logging.
Optimizing Cloud Cost
The cloud-agnostic cost framework TSH provisions against - pricing models, storage tiering, right-sizing, cost-allocation tags, and the cost-impact estimate every infrastructure proposal carries.
Designing Multi-Cloud Architecture
Selects cloud services and a multi-cloud topology with an explicit decision framework - the six multi-cloud patterns, AWS, Azure and GCP service mapping, where abstraction pays for itself, and migration phasing.