I build tools that make infrastructure and security work visible and safe — from Helm upgrade risk to hands-on security training, from CI/CD workflows to the credentials on your own machine.
I write about platform engineering, Kubernetes, and cloud security at dcotelo.dev (RSS).
🛡️ owasp-ctf docs · 🗺️ Actions live demo · More tools: github-notifications-streamdeck · tf-version-reviewer · aws-secret-dbdriver
Full stack details
| Area | Technologies |
|---|---|
| Languages | Go, TypeScript, Bash, Python, PHP |
| Cloud | AWS (EKS, IAM, VPC, DynamoDB, Route53, KMS, S3, CDK, Secrets Manager) |
| Kubernetes | EKS, EKS Auto Mode, Karpenter, Helm, Kustomize |
| GitOps / CI | ArgoCD, GitHub Actions, OIDC-based auth |
| IaC | Terraform, Terraform Cloud, AWS CDK |
| Frontend | Next.js, React, Monaco Editor |
| Observability | Datadog, Grafana, SLOs |
| Security | IAM least privilege, CodeQL, OpenSSF Scorecard, OIDC |
- Kubernetes & AWS — EKS (including Auto Mode & Karpenter), GitOps with ArgoCD and Helm
- Cloud security — IAM least privilege, OIDC-based CI/CD, secure-coding education through CTFs
- Platform tooling — Terraform modules and CI/CD patterns that reduce cognitive load
- Reliability — metrics, SLOs, and runbooks written for tired humans




