excloud
platform engineer
jun 2023 – aug 2026
remote
built and operated the platform alongside the engineering lead, with production responsibility across compute, storage, kubernetes, network, identity, data, and the developer surface around them.
- compute / storage
built the qemu/kvm control plane and an spdk + nvme-of storage engine with reconciliation, retryable provisioning, resize, cleanup, and recovery after a crash mid-transition.
- kubernetes
shipped managed clusters end to end: bootstrap, oidc and jwks, short-lived join credentials, cilium, coredns, a csi driver, and the karpenter provider that scales nodes.
- shared platform
wrote the shared go layer used across 20+ services, including an http framework that derives openapi 3.1 from types, domain primitives, typed errors, and opentelemetry middleware.
- network / identity
built imds identity and token delivery, iam authorization, audit events, authoritative dns, and an af_packet arp/ndp proxy with bpf filtering, vlan handling, rate limits, and ipv6 dad.
- developer surface
built the openapi-to-client pipeline feeding the sdk, a 20-group cli, and a terraform provider with 30 resources and 13 data sources, plus the console people use to drive it all.
- accounts
- 4,000+
- active vms
- 380
- managed postgres
- 140
- internal services
- 20+