Senior DevOps Engineer · RHCSA · Red Hat Certified Specialist in Ansible Automation
📍 Jakarta, Indonesia

Financial Sector — Indonesia
Sep 2025 – Present | Jakarta, Indonesia

Embedded at a financial-sector client defining how software ships — CI/CD and deployment architecture for mobile, backend, and cloud workloads, with the quality and security gates that go with it.

• 📱 Mobile CI/CD Pipeline: Architected a Flutter mobile CI/CD pipeline from scratch on GitLab CI — MR validation (lint, schema, version, dependency audit, SonarQube gate), artifact build, push to Nexus, multi-environment distribution, and automated release to Firebase and Google Play Store.
• 🧪 Automated Testing: Integrated Katalon Runtime Engine for Android automated testing, triggering test suites at the QA review stage.
• ☁️ Cloud Native Backend CI/CD: Built a new CI/CD pipeline for Python services deploying to Azure Kubernetes Service (AKS) — build, containerization, and multi-environment rollout, with Trivy filesystem vulnerability scanning gating releases on security findings.
• 🔍 Quality Governance: Led SonarQube upgrade readiness — assessed scanner compatibility per stack (Java, React/npm), identified pipeline stages that bottleneck developer workflow, and migrated projects onto SonarScanner CLI with tuned quality gates.

Tech stack: GitLab CI, Kubernetes, Azure Kubernetes Service (AKS), Flutter, Python, Docker, Trivy, SonarQube, Katalon Runtime Engine, Nexus, Firebase Distribution, Google Play Deploy, Linux (RHEL)

PT. Sea Labs Indonesia (Shopee)
Aug 2022 – May 2025 · 2 yrs 9 mos | Jakarta, Indonesia

SRE for the Games & Marketing division at Shopee — one of Southeast Asia's largest e-commerce platforms. Owned service reliability, CI/CD, observability, and infrastructure readiness for peak mega-campaigns (10.10, 11.11, 12.12). Scope expanded to 50% dev / 50% ops in Q1 2025.

• 🔥 Fire Drill Program: Initiated and ran the firedrill reliability program — pre-production simulation of infrastructure and network failures (Redis failure, RDS failure, high CPU utilization, pod imbalance, and non-200 HTTP response codes) every campaign cycle, coordinated with engineering leads across teams.
• ⚡ Automated Troubleshooting: Calibrated and engineered Prometheus/PromQL alert baselines wired into the internal auto-troubleshooting platform.
• 📊 Troubleshooting Dashboards: Designed Grafana troubleshooting dashboards for NOC and engineering, cutting mean-time-to-diagnosis (MTTD) on high-traffic campaign dates.
• 🏢 Shopee Blog Migration (Sole Executor): Sole executor for the end-to-end migration of Shopee Blog (WordPress) from Google Cloud Platform (GCP) to Shopee's internal data center — covering CI/CD pipelines, persistent storage (PV/PVC), MySQL, Nginx load balancing, DNS, Grafana, and Elasticsearch logging.
• 🗄️ Database Ops: Supported physical MySQL → AWS RDS migration; created NOC service alert baselines integrated with auto-troubleshooting tooling.
• 🤖 AI & Automation: Onboarded teams to the SMART Platform (LLM internal tooling) as Forward Deployed Engineer — built GPT agents, bots, and tool integrations; built CI/CD automation to deploy Cocos Engine on macOS build machines for QA pipelines.

Tech stack: Kubernetes, Docker, Prometheus, Grafana, PromQL, Node Exporter, GitLab CI, Ansible, Redis, MySQL, AWS RDS, GCP, WordPress, Nginx, Elasticsearch, Cocos Engine, Linux

PT. IT Group Indonesia
Nov 2019 – Jun 2022 · 3 yrs 7 mos | Jakarta, Indonesia

Led DevOps engineering projects and consulting engagements for enterprise clients across Indonesian banking, financial services, and telecommunications. Mentored junior engineers and built end-to-end DevOps environments from scratch.

• 🏦 Large Indonesian Private Bank: Designed and built a complete DevOps platform from scratch: GitLab CE with PostgreSQL cluster, Jenkins, Nexus Repository, and HA Ansible Tower cluster. Developed Groovy CI/CD pipelines for Java Spring Boot and .NET Core apps, deploying to OpenShift 4 via custom Ansible automation.
• 🏛️ Indonesian Regional Government Bank: Implemented Red Hat Satellite with a custom patching and hardening pipeline (scan, apply, rollback); piloted then rolled out across the full production Linux estate.
• 🏢 State-owned Financial Institution: Led the full Ansible Tower lifecycle: design proposal, requirements gathering, installation, and patching automation rollout across a mixed Linux and Windows server fleet.
• 📡 Major Indonesian Telco: Implemented runtime container security (Sysdig Secure + Monitor, Falco, Anchore) — threat detection, compliance posture, and workload monitoring; integrated image scanning into CI/CD. Produced HLD/LLD documentation and delivered technical handover workshops to client operations.
• 🛡️ Large Indonesian State Bank & Telco: RHEL installation and baseline configuration at a major state bank environment. Shift-based incident handling for a major telco: RCA via the Red Hat Knowledge Base, escalation to Red Hat support, OS diagnostics, and security patching.
• ⚙️ Toolchain & QA Pipelines: Deployed 3-node HA Ansible Tower, HA Nexus Sonatype EE Repository Manager, RBAC across toolchain (GitLab, Jenkins, Ansible Tower, Nexus, OpenShift 4.2). Implemented Selenium Grid automation testing (Python) and built end-to-end DevSecOps CI/CD pipeline PoC on OpenShift 4.

Tech stack: Red Hat OpenShift 4, Kubernetes, Ansible Tower (AWX), Red Hat Satellite, GitLab CE, Jenkins, Groovy Pipelines, Nexus Sonatype Pro, Sysdig Secure, Falco, Anchore, PostgreSQL (EDB), Selenium Grid, RHEL

PT. IT Group Indonesia
Nov 2017 – Nov 2019 · 2 yrs | Jakarta, Indonesia

Top performer from the Red Hat Linux System Administration training cohort, hired directly into a client-facing role; achieved RHCSA within three months. Delivered Linux infrastructure and database engagements across banking, financial services, and telco clients.

• 🐧 RHEL Administration: RHEL installation and configuration (NTP/Chrony, network bonding, multipath), security patching, preventive maintenance, and RCA from system logs (syslog, vmcore). Authored OS hardening Bash scripts for RHEL 6 & 7.
• 🗄️ EnterpriseDB / PostgreSQL: Cluster replication setup, Enterprise Failover Manager (EFM), PostgreSQL Enterprise Manager (PEM), BART backup/restore at enterprise level.
• 🛰️ Enterprise Identity & Patching: Implemented Red Hat Satellite 6.2 for centralized patch and content management; Red Hat Identity Management (IdM/FreeIPA) integrated with Active Directory.
• 🏗️ Clustering & OpenShift 3: Implemented Red Hat HA (Pacemaker) and GFS2 Resilient Storage; deployed OpenShift 3.1 with Container Storage, Metrics, Monitoring, and Logging.

Tech stack: Red Hat Enterprise Linux (RHEL), OpenShift 3.1, Red Hat Satellite 6.2, Red Hat IdM, Pacemaker HA, GFS2, PostgreSQL (EDB EFM/PEM/BART), Bash Scripting

Freelance / Project-Based
2022 – Present · Selected Engagements

• ☁️ Monolith → Kubernetes Migration (AWS): Migrated a monolithic application from VM to Kubernetes; deployed multi-environment clusters (non-prod / prod), built GitHub Actions CI/CD, designed reusable Helm templates stored in S3, and managed VPC, subnets, and ingress configuration.
• 📜 EFK Logging Pipeline: Built a centralized logging pipeline alongside the Kubernetes migration — Fluentd (via Helm) shipping to Elasticsearch on AWS, visualized in Kibana; wrote a custom Fluentd parser converting unstructured logs to structured JSON with multi-line stack-trace handling.

Tech stack: Kubernetes, Amazon EKS, Helm, GitHub Actions, AWS (EC2, RDS, S3, VPC), Fluentd, Elasticsearch, Kibana

• IT Staff — PT. Graha Bara Lestari (Partner PT. PLN), 2013–2017: billing system monitoring, LAN troubleshooting, customer data verification, DB queries, hardware/OS maintenance.
• IT Hospitality — PT. NettoCyber (Four Seasons Hotel), 2012–2013: bandwidth management, wireless installation, hardware/software troubleshooting, guest support.
• Apprentice, IT Support — PT. Nutrifood Indonesia, 2011: PABX/PC/printer troubleshooting, end-user support, PC installation, video conferencing setup.

Financial Sector | Sea Labs (Shopee) | PT. IT Group Indonesia | PT. Graha Bara Lestari

Fintech & Banking (OJK / BI Compliance) 🏦 | E-Commerce Hyperscale 🛒 | Telco Infrastructure 📡 | DevSecOps & OWASP 🛡️ | High Availability & SRE 📈 | Cloud Native & Kubernetes ☁️

💻 Featured Projects & Repositories

Project / Repository	Description
	🌐 Personal engineering portfolio, operational philosophy, and consulting offerings.
	🛡️ Cloud-native runtime security rules and system call monitoring integration.
	📦 Lightweight Kubernetes cluster infrastructure & automated deployment scripts.
	🔍 Code quality gates and static application security testing (SAST) workflows.
	⚡ Zero-plaintext credential protection & sub-2ms secret sniffer for autonomous agents.
	🚀 Core scalable application infrastructure platform and microservices architecture.
	📱 PC companion application and remote execution telemetry bridge for Hermes Agent.

---

🧰 Things I code with

Category	Technologies
CI/CD Pipelines
Container Orchestration
Automation & Config
Cloud Platforms
Observability (O11Y)
DevSecOps / OWASP
Linux Systems
Databases
Mobile & QA Pipelines

---

GitHub Stats

(since June 10, 2018)

---