Hire the Best AWS IAM Developers

I've cut AWS bills by 60%, maintained 99.9% uptime across 50-node EKS clusters, and shipped SOC2-compliant infrastructure for FinTech and SaaS companies - across 6+ years of hands-on cloud engineering. Whether you're a startup drowning in cloud costs, a SaaS company outgrowing your Kubernetes setup, or an enterprise navigating a SOC2 or GDPR audit - I've solved that exact problem, with numbers to back it. ▸ Kubernetes & EKS Architecture I design production-grade EKS clusters built to scale multi-AZ, auto-scaling with Karpenter, Spot Instance optimized, and GitOps-driven deployment pipelines. I've supported engineering teams of 10–50 engineers with infrastructure that doesn't create 2am incidents. ▸ FinOps & Cloud Cost Engineering I don't just trim costs I restructure how cloud spend works. Slashed cluster compute costs 60% via Karpenter + EC2 Spot strategy. Reduced CI/CD infrastructure costs 35% by migrating Jenkins pipelines to GitHub Actions. ▸ DevSecOps & Compliance Built GDPR and SOC2 Type II compliant infrastructure from scratch Zero-Trust IAM, AWS WAF, automated secrets rotation, CloudTrail audit logging, and compliance documentation. Experienced with HIPAA and PCI-DSS-ready architectures for FinTech clients. ▸ Observability & Reliability Full monitoring stacks with Prometheus, Thanos, Loki, and Grafana SLO dashboards, alerting runbooks, and incident response playbooks. I build for 99.9%+ uptime, not hope for it. Certified: AWS DevOps Engineer – Professional | AWS Solutions Architect – Associate | HashiCorp Terraform Associate (003) I work best with teams that want infrastructure they can trust clean IaC, documented runbooks, and systems built to last. Available for long-term platform engineering partnerships, DevOps retainers, and project-based engagements. Message me and we'll spend 15 minutes figuring out whether I'm the right fit for your infrastructure.

I help startups and SaaS teams run their applications reliably on AWS by taking full ownership of the cloud, deployment, and operational layer. Instead of hiring multiple specialists, you get one engineer responsible for making your system stable, scalable, secure, and cost-efficient in production. I design, build, deploy, and maintain AWS environments so your developers can focus on product features while the infrastructure runs smoothly. ═══════ What I can handle end-to-end ═══════ ➤ AWS infrastructure setup (VPC, networking, IAM, security, databases, compute) ➤ Scalable deployments using EC2, ECS, or serverless services ➤ CI/CD pipelines and automated release workflows ➤ Monitoring, logging, alerting, and incident stability ➤ Cost optimization and resource efficiency ➤ Backups, security hardening, and reliability best practices ➤ Targeted backend or automation fixes that require system-level understanding This covers the entire AWS and operations layer of a production system.

Get $100 AWS Credit + a complimentary, No-Strings-Attached AWS Cloud Assessment. ⭐⭐⭐⭐⭐ "Rarely have I worked with someone as skilled and thorough as Carlos is. Setting up my team on git, configuring our AWS servers to be safe, scalable, and fast, working with my developers to optimize code, being a good person". James Rector, UPWORK 100+ 5-star projects, I'm one of highest-rated and highest-earning AWS freelancer on UPWORK. I have been helping SaaS businesses to build scalable, secure, highly available and high-performing environments on AWS following DevOps/Dev Ops best practices. Here is what I can help you with: ✅ Review of your AWS current architecture performance, security and costs ✅ Architecture of new AWS infrastructure and Data Pipelines ✅ Migrations to AWS, AWS Cost Reduction, Database Optimisations, DevOps Engineer ✅ Managed Services SLA Problems that I solve: ⚡️ Performance At Scale: I build and deploy industry-tested and proven infrastructure code that ensures your application runs and performs fast without compromising security. ⚡️ Cost Optimisation: My infrastructure architecture enables the efficient use of resources and can help you save up to 90% in your AWS costs ⚡️ Security & Compliance: I can help you Scale and innovate quicker while building a solid foundation that will help you maintain a secure, compliant environment. ⚡️ Training & DevOps. I can help you increase your team's technology adoption while automating your DevOps/ Dev Ops processes. Technologies that I adopt and I'm an expert at: ➡️. AWS services such as s EC2, ECS, EKS (Kubernetes), S3, RDS, Step Functions, Lambda, AWS Gateway API, DynamoDB, Beanstalk, Elasticache, SNS, SES, IAM, ControlTower, WAF, Shield, Cloudformation, Cloudfront, CloudWatch, VPC, Route 53, Certificate Manager and others. ➡️. Supporting services such as CDK, Terraform, Rancher, ISTIO, Prometheus, Grafana, Teleport, Papertrail, Graylog, New Relic, Dynatrace, DataDog, Kafka, NEO4J and Spot.io. ➡️. Strong CI/CD DevOps engineering using GitHub/BitBucket Pipelines, CircleCI, ARGOCD. Industries: - FinTech - Media - Ecomm - and more! Here are some of the case studies of the clients I have helped with: 1. MONETRACK - Deploying a client stack in minutes on AWS instead of weeks Industry: Finance Problem: An unreliable process that caused constant frustration and delays. Process: Each deployment would take days to weeks to be set up, requiring between 5-6 people. Results: They now deploy a client stack in minutes instead of weeks using AWS EKS and a customised CI/CD process. In addition, I have: · Improved deployment time from weeks to minutes. · 80% reduction in costs per deployment. · Secure alignment with their client's compliance requirements. 2. Tourism Media - Great flexibility, deploying applications faster and secure on AWS Industry: Media Problem: With no CI/CD integration across all deploys, the job to integrate each stack was inconsistent and pruned to errors. Process: Deployment was not consistent across the board; they were also not resource-friendly Result: They can now push out a consistent deployment process across the company while being quickly adopted by their teams. In addition, I also have: · Improved deployment time by 60% · 70% costs reduction in EC2 instances · Greater scalability and reliability than their Legacy infrastructure. 3. Value-Ad - Scale 10X more on AWS with great stability and without the extra cost. Industry: Finance Problem: An infrastructure that could not scale securely and effectively was harming their client base. Solution: Deploy a new AWS EKS (Kubernetes) environment that is scalable, highly available, secure (PCI-DSS compliant) and cost optimised using AWS Well Architect Framework best practices. Result: They can now handle 10X more requests with excellent stability and without extra cost than their legacy infrastructure. In addition, I have added: · Greater scalability and reliability · Deployments are simplified and done in minutes instead of hours · 32% cheaper than its previous infrastructure Now a bit of myself: I'm a passionate professional with 25 years of experience in enabling business strategies through the practical application of technology architecture principles, practices, and tools. User-centric and solution-oriented, I have managed projects and teams across Australia, New Zealand, the USA, Brazil, the UK, Ukraine, Singapore, Vietnam and India over the past 14 years. A problem-solver in a broad range of technology stacks covering Architecture, Development, Integration, Data, Infrastructure, and Support. Seamless configuration and migration include fast deployment of critical and complex workloads on the cloud with hands-on expertise in AWS Services. Send me a message. I would love to discuss your project.

AWS Cloud Security Architect & DevSecOps Engineer specializing in Kubernetes, AWS, GCP, and Azure. I help SaaS and fintech companies secure cloud infrastructure, reduce costs, and pass security audits without slowing down development. I’ve secured 1500+ nodes, reduced cloud costs by up to 40%, and helped teams pass critical security audits. With 10+ years of hands-on experience across cloud, security, networking, and DevSecOps, I operate as a senior-level architect and stay hands-on through implementation when needed. Clients bring me in when the stakes are high and mistakes are expensive. I typically identify critical issues and improvements within the first few days of engagement. ✅ How I Help Teams Win Clients bring me in when they need to: • Reduce cloud spend by 20–40% without performance trade-offs • Pass security reviews and audits faster • Design secure-by-default architectures that scale with growth • Untangle complex or over-engineered cloud environments • Enable faster releases while strengthening security posture 🔐 Cloud Security Architecture (Built for Real-World Use) I design production-grade cloud security architectures that protect critical workloads without blocking developers, including: • Zero-trust and defense-in-depth security models • IAM strategy, least-privilege access, and network segmentation • WAF and edge security tuned for real traffic and threats • Security reviews aligned with best practices and compliance needs ☁️ Cloud Architecture, Migrations & FinOps I’ve led multiple successful migrations and re-architectures across AWS, GCP, and Azure for growth-stage and enterprise teams. • Secure, scalable multi-account / landing-zone design • Cloud migrations with zero downtime • Infrastructure as Code using Terraform • Cloud cost optimization and FinOps best practices 🚀 DevSecOps & CI/CD Enablement I embed security into CI/CD pipelines so teams can ship faster without increasing risk. • Secure CI/CD pipelines (GitLab-based workflows) • Kubernetes security hardening and workload protection • Automated security checks and policy enforcement • Reduced operational friction between security and engineering 🌐 CDN, WAF & Edge Security Optimization I help teams improve performance while protecting applications at scale. • CDN caching strategies to reduce latency and load times • WAF configuration and tuning • Protection against OWASP threats, bots, and DDoS attacks 🏆 Proven Results • Reduced cloud infrastructure costs by ~30% within 60 days • Designed secure, multi-region architectures for high-traffic platforms • Enabled smoother audits and faster security approvals • Delivered migrations with improved performance and reliability 🤝 How I Typically Work Most engagements start with a focused cloud security or architecture audit, followed by a clear action plan. I’m a strong fit if you are: • A SaaS or cloud-native company preparing to scale • A fintech or security-sensitive platform • A team facing audits, security reviews, or cloud cost pressure 📩 Next Step Send me a message with your current setup or challenge — I’ll outline the fastest way to improve it.

Building something complex? I help companies architect, build, and scale systems that actually work — from first commit to 1M users. And I can prove exactly how I do it. Why Clients Hire Me After 74+ Upwork contracts and $200K+ delivered, I've learned that most projects fail for the same reasons: unclear scope, wrong architecture decisions early on, and vendors who say "yes" to everything. I do the opposite — I ask hard questions upfront so we don't discover problems in production. How I Work: AI-Augmented Development I don't just use AI tools — I've systemized them into a Multi-Agent Development Methodology: → Every decision documented and versioned (no tribal knowledge) → Full audit trail — see exactly how your project evolves → Real-time visibility into progress (not just status updates) → Clean handoffs — the next developer won't curse me What I Do → AWS Architecture & Infrastructure — Design, migration, optimization, security → Full-Stack Development — React, Angular, Node.js, Python, Java → Compliance Systems — HIPAA, SOC2, enterprise-grade security → IoT & Real-Time Data — AWS IoT Core, sensor networks, dashboards → Trading & Financial Systems — TradingView, Pine Script, algorithmic strategies Where I Add Most Value → Projects where "getting it right" matters more than "getting it cheap" → Systems that need to scale, comply, or integrate with complex infrastructure → Teams that want a technical partner, not just a code vendor → Rescuing projects that previous developers made a mess of → Teams who value documentation and full visibility The Numbers → 100% Job Success Score → Expert-Vetted status (top 1% of Upwork talent) → $200K+ earned on platform → 50+ developers in my agency for larger engagements → 22+ years building enterprise systems (Hewitt, Xerox, Cognizant) Certifications → AWS Solutions Architect – Professional → AWS Advanced Networking – Specialty → AWS Security, Cloud Economics, and Technical Professional Industries I've Built For Healthcare (HIPAA) · Fintech · SaaS · IoT · Insurance · Logistics · Manufacturing · Legal Tech How to Start Send me a message with: → What you're trying to build or fix → Your timeline → Any constraints I should know about I'll give you an honest assessment — including whether I'm the right fit.

I build infrastructure that stays up when it matters. Government platforms for 2M+ citizens, banking systems for 1M+ users, and AI rendering stacks on GPU Kubernetes clusters. Shipped on time, documented for the team that inherits it. 5+ years owning the full stack: physical hardware, hypervisors, Kubernetes, service mesh, cloud networking, CI/CD, observability, and GPU AI workloads. Across government, fintech, SaaS, and deep-tech startups. Government Scale — OpenG2P Ethiopia, 3 Ministries Leading platform engineering for Ethiopia's national OpenG2P welfare system across ATI, MoWSA, and EDRMC. Serving 2M+ beneficiaries on RKE2 with Rancher, Istio mTLS, Keycloak SSO, WireGuard site-to-site VPN, XCP-ng hypervisor with Hardware RAID 1+0, and a full Prometheus + Grafana + Alertmanager + Loki observability stack. Currently executing a large-scale ODK to OpenG2P data migration with schema mapping, validation pipelines, audit trails, and phased rollback. AWS Serverless Architecture — WeTruck Architect and operator of WeTruck's serverless logistics platform. CloudFront to ALB to WAF (deny-by-default with Telebirr payment gateway IP whitelisting) to Lambda (FastAPI via Mangum). Fully Terraformed infrastructure. GitHub Actions with OIDC federation (zero long-lived credentials), RDS PostgreSQL, DynamoDB for JWT token store, SQS with dead-letter queue, Secrets Manager, AWS Amplify for three Next.js frontends (back-office, transporter, shipper), and Route 53 private/public DNS. I own production incidents end-to-end and authored the full deployment runbook and troubleshooting playbook. AWS in daily use: Lambda, EC2, EKS, CloudFront, ALB, WAF, RDS, DynamoDB, SQS, Secrets Manager, Amplify, ECR, Route 53, IAM OIDC, VPC (private subnets, NAT Gateway, VPC endpoints), CloudWatch, ACM. MPLS and AI Rendering Infrastructure — MetaPlux (Tech Lead) Tech Lead on a distributed GPU-aware AI rendering platform. MPLS networks for deterministic, low-latency routing across distributed rendering nodes with label-switched paths and traffic engineering for QoS-sensitive GPU workload traffic. BGP and OSPF routing across hybrid environments connecting on-premises GPU clusters to cloud egress points. WireGuard VPN tunnels for secure, auditable connectivity. Multi-cloud strategy across AWS and Azure for rendering workload distribution. Platform architecture for GPU-aware Kubernetes scheduling and job orchestration. This role sits at the intersection of deep networking and modern cloud infrastructure, the combination most DevOps engineers don't have. AI and GPU Infrastructure — Exponent.ch (Switzerland) Provisioned and managed NVIDIA GPU-enabled RKE2 clusters running AI and automation workloads: n8n, Langfuse LLM observability, LibreChat, and ClickHouse analytics. Standardized Helm deployments across 5+ environments using shared-stacks architecture. Integrated Teleport for zero-trust cluster access, automated secrets via Lade and 1Password. Prometheus + Grafana + Mimir observability with 99.9% metric coverage, 60% MTTR reduction, and 3 critical outages prevented through proactive alerting. Banking Infrastructure — 6 Ethiopian Banks, 1M+ Users Delivered high-availability mobile banking and USSD platforms for Siinqee Bank, Hijra Bank, Wegagen Bank, and others with 99.95% uptime across 1M+ users. Designed MPLS network architecture for multi-branch WAN connectivity with QoS for transaction data. Built Jenkins CI/CD for Maven Java apps (4 hours to 15 minutes). ELK processing 10TB+ daily logs. Proxmox and AWS hybrid cloud with ~35% cost reduction. Full Technical Stack Container Orchestration: Kubernetes (RKE2, EKS, K3s), Docker, Helm, Rancher, OpenShift Infrastructure as Code: Terraform, Terragrunt, Ansible, OpenTofu CI/CD: GitHub Actions, GitLab CI, Jenkins Cloud: AWS (full suite), Azure, OpenStack Networking: MPLS, BGP, OSPF, WireGuard, HAProxy, NGINX, VLAN, VPC design Service Mesh: Istio (mTLS, traffic policies, ingress) Observability: Prometheus, Grafana, Mimir, Alertmanager, Loki, OpenTelemetry, ELK, Zabbix, SigNoz Security and Identity: Keycloak, HashiCorp Vault, Teleport, IAM OIDC Virtualization: Proxmox, XCP-ng, VMware AI and Automation: NVIDIA GPU Kubernetes, YOLO, ONNX, TensorRT, n8n, Langfuse, LibreChat, ClickHouse Databases: PostgreSQL, MySQL, MongoDB, Redis, Elasticsearch, DynamoDB Backend: Python (FastAPI), Bash, Node.js How I work I overcommunicate early, give realistic timelines, and ship verified, not "it should work." I treat testing as the real deliverable, not a checkbox. If something is out of scope or a bad idea, I'll tell you before you spend money on it. Message me if you need: - AWS or Kubernetes infrastructure built or fixed - CI/CD pipelines developers actually trust - GPU and AI infrastructure with inference pipelines and observability - Migration from cloud to cloud, or on-prem to production cloud - MPLS, BGP, or complex network architecture across hybrid environments - Observability that catches problems before users do