Engineering field notes /// Deployment · Cloud · Kubernetes · Automation

Deployment Engineer / WebOps / Cloud

I make complex web platforms reliable.

Deploying, securing and scaling web experiences from code to production, with a focus on stability, performance and maintainability.

Deployment flow Code in GitHub goes through CI/CD (Azure DevOps or GitHub Actions) and is deployed to Azure App Service, with infrastructure provisioned by Terraform. The deployment serves WordPress sites, web applications and Azure MySQL databases. Code GitHub CI/CD Azure DevOps · GitHub Actions Deploy Azure App Service Infrastructure as Code Terraform WordPress 50+ sites Applications AEM · web apps Databases Azure MySQL
Fig. 01: the deployment path I build and operate · swipe →

Engineering capabilities

01

Cloud Infrastructure

Azure, AWS, App Service, Kubernetes (EKS/AKS), Front Door, networking

02

CI/CD & Automation

Azure DevOps, GitHub Actions, Terraform, DEV → VAL → PROD promotion

03

WordPress at Scale

Multi-site enterprise operations, updates, migrations, performance

04

Security & Reliability

WAF, hardening, pentest remediation, monitoring, backups, incident response

Selected engineering work

Real projects. Practical impact.

01 Kerry Group · Edge security

Stopping disguised bot traffic at the edge

Challenge
A high-traffic domain was flooded by unknown bots that kept rotating their IP, user agent and location, so blocking by any single attribute didn't work.
Approach
I built bot-filter rules in Azure Front Door WAF. A rate-limiting rule catches repeated hits on the same URL, and suspicious requests get a bot challenge first. Anyone who passes gets through, and normal visitors are never challenged.
Result
Requests cut from 36M to 20M per year, saving €150K/year.
  • Azure Front Door
  • WAF
  • Rate limiting
  • Bot challenge
02 CI/CD · Infrastructure as Code

Repeatable cloud deployments

Challenge
Classic, click-configured pipelines and hand-built environments made releases slow and hard to reproduce.
Approach
YAML pipelines (build → UAT → Production) with pre-release checks for PII, disallowed plugins and stray SQL dumps. Terraform provisions App Service with slots, MySQL, Application Insights and Storage. Secrets stay in pipeline variable groups.
Result
+50% pipeline efficiency from the CI/CD transformation, and IaC adopted with Terraform.
  • Azure DevOps
  • GitHub Actions
  • Terraform
03 Products · client work

Built end-to-end

From idea to production: my own products and sites for clients.

  • GB Consultoria SST ↗

    Client site for an occupational health & safety consultancy in Brazil. The contact form opens WhatsApp with the message pre-filled, and every push deploys automatically to Hostinger.

    React · Vite · Tailwind · GitHub Actions

  • Avatar IA Lucrativo ↗

    Hand-coded sales page for a digital course. It carries UTM and referrer attribution through to the Hotmart checkout, includes a Digistore24 variant for international buyers, and deploys over SSH to Hostinger.

    HTML · CSS · JS · Hotmart · GitHub Actions

  • MyCreche Ireland ↗

    MVP that helps parents find childcare availability and helps crèches manage vacancies.

    Next.js · Supabase

  • MyFamilyFinances ↗

    Family finance manager for budgeting, expenses and investments.

    Next.js · Prisma · Vercel

Engineering lab · open source

Python, applied AI & automation

Smaller builds on GitHub. Each one is documented and tested, and most run in Docker.

  1. L1

    rag-docs-assistant ↗

    A RAG API over Markdown docs. Chunking and a retrieval funnel find the passages; guardrails block prompt injection and mask PII; medium-confidence answers go to a human review queue; quality is measured with golden sets and an LLM judge.

    FastAPI · Chroma · OpenAI · Docker

  2. L2

    llm-ticket-analyzer ↗

    Support-ticket triage with LLM structured output (category, urgency, summary), validated by Pydantic. A mock mode keeps tests free of API cost.

    FastAPI · Pydantic · OpenAI

  3. L3

    Production-Backup-Workflow-Azure ↗

    A GitHub Actions workflow triggers an Azure DevOps pipeline that backs up App Service content (Kudu API) and MySQL. No credentials are stored in code.

    GitHub Actions · Azure DevOps · MySQL

  4. L4

    secure-code-analysis-pipeline ↗

    Daily scheduled dependency scanning and CodeQL analysis for Java and JavaScript, with results published as SARIF.

    CodeQL · Maven · npm

  5. L5

    fastapi-tasks-api ↗

    A containerized REST API with full CRUD, Pydantic validation and OpenAPI docs.

    FastAPI · Docker

Now building Prometheus metrics for rag-docs-assistant, then a Prometheus + Grafana stack, followed by Helm and Argo CD.

Experience timeline

7+ years in production

  1. Sep 2025 – Present

    Kneat Solutions

    Deployment Engineer

    • I own the release plans for an enterprise app used by regulated life-sciences customers, across DEV, VAL and PROD.
    • I coordinate the SRE, Cloud, DBA and customer teams from planning through go-live and hypercare.
    • After releases, I trace incidents across Kubernetes (EKS/AKS) workloads and restore service.
  2. 2022 – Sep 2025

    Kerry Group

    Cloud & Web Administrator · WebOps

    • I ran 50+ enterprise AEM and WordPress platforms on Azure.
    • I led the Sitecore → AEM migration of the main site.
    • The WAF rollout saved €150K/year, and the CI/CD transformation gave +50% pipeline efficiency.
  3. 2019 – 2022

    WP Engine

    WordPress Technical Support

    • I diagnosed enterprise customers' production issues across DNS, TLS, CDN and server layers.
    • I guided customers through migrations, optimisation and onboarding.
  • Limerick, Ireland · Irish citizen
  • Remote or on-site
  • English · Portuguese · Italian (intermediate)
  • Postgraduate Diploma in Software Engineering B.Sc. in Information Technology Microsoft Azure Fundamentals (AZ-900)

Contact

Have an interesting engineering challenge?