Freelance senior solutions architect. I make change data capture platforms — Debezium in particular — deployable and operable in real environments: Kubernetes, Kafka, identity, and the operational glue in between.
- Architecting a large-scale CDC platform (Kafka + Debezium) for a US enterprise, streaming from legacy ERPs (AS/400, Informix, SQL Server).
- Contributing to Debezium, with a focus on Debezium Platform deployment and operations.
- Bringing identity and access management to Debezium Platform. Designed and implemented optional OIDC bearer-token authentication for the conductor (debezium/dbz#2306); owner of the design document for credentials management, and co-authoring the RBAC design.
- Single Sign-On for the Debezium Platform — Debezium official blog, August 2026. Keycloak, oauth2-proxy, and OIDC in front of the Platform on Kubernetes.
- Running the Debezium Platform on AWS: PostgreSQL to Amazon Kinesis — Debezium official blog, July 2026.
- Next: identity brokering to Microsoft Entra ID, followed by role-based access control in Debezium Platform.
debezium-platform-lab— reproducible automation for standing up the full Debezium Platform stack on Kubernetes (Strimzi, CloudNativePG, MongoDB, SQL Server, Keycloak SSO), from local Kind to AWS and self-hosted k3s.- PostgreSQL → Amazon Kinesis on AWS
— companion example contributed to
debezium-examples, walked through in the blog post above. - Upstream contributions to
debezium-platform:- #472 — optional OIDC bearer-token authentication for the conductor
- #381 — MongoDB source support
- #415 — Amazon SQS support in
PipelineMapperandConnectionEntity - #411 — extra volumes and volume mounts for the conductor deployment (Helm chart)
- #355 — enable
debezium-operatorfrom the Platform Helm chart
Twenty-plus years of solutions and enterprise architecture: SOA platforms (Tibco, IBM) in Canada, nine years on Intermountain Healthcare's patient portal platforms in the US, and IAM SaaS architecture at Evidian/Eviden in France — which is where the identity depth behind the Debezium SSO work comes from. Based in Granada, Spain; working remotely with US and European teams.
- LinkedIn: linkedin.com/in/pcamus
- Email: pcamus@1int.io
- Available for consulting on CDC, Debezium, Kafka, and Kubernetes data platforms.

