About me
Senior DevOps Engineer based in Jakarta, Indonesia. I run Kubernetes and cloud infrastructure for financial services, and lately I spend much of my time making AI coding agents safe and useful for infrastructure work.
Find me on GitHub.
Experience
Trimegah Sekuritas Indonesia
Aug 2025 – PresentSenior DevOps Engineer · Jakarta
- Led AI-native engineering adoption in the DevOps team: an agent harness (context, guardrails, human review) for coding agents across GitOps and Terraform repositories, cutting the context needed to start a session from 50k to under 10k tokens.
- Made AI agents safe to use in a regulated environment with pre-edit guardrails, reusable agent skills and MCP servers for day-to-day infrastructure operations.
- Redesigned cloud network connectivity to remove hops and points of failure in front of the core trading API gateway.
- Planned and ran an identity provider migration with a blue-green cutover and rollback plan; no errors on the infrastructure side.
- Built zero-trust access to internal infrastructure: single sign-on, MFA, mesh VPN and privileged access management.
- Moved PostgreSQL from VMs to Kubernetes with a database operator: point-in-time recovery, connection pooling and metrics.
- Ran production application migrations as canary releases with no significant downtime.
- Manage hundreds of virtual machines with Terraform.
Mercor
Apr 2026Independent Contractor · Remote
- Wrote expert-level infrastructure tasks used to evaluate frontier AI models, with automated testing and local lab environments.
Mirae Asset Sekuritas Indonesia
Jun 2023 – Aug 2025DevOps Engineer · Jakarta
- Modernised the API infrastructure on a cloud-native API gateway (Kong) with central management, and hardened it with a WAF together with the security team.
- Replaced the legacy tracing and logging stack with Grafana Tempo and Loki, cutting log infrastructure cost by 60% and shortening incident resolution.
- Moved application monitoring to OpenTelemetry with a standard library for Java and Go services, tracing requests from the gateway down to database queries.
- Introduced GitOps with Argo CD across environments and clusters, cutting deployment time by 70%.
- Reduced total cloud cost by 40% with Spot instances, bin packing and cost labelling.
- Upgraded PostgreSQL from 10 to 16 with logical replication to keep downtime low.
- Integrated Vault with Kubernetes and Argo CD for secrets, with role-based access shared with developers.
Ruangguru
Feb 2022 – Jun 2023Infrastructure Engineer · Jakarta
- Built custom metrics that show cloud cost per team on the existing monitoring platform.
- Audited the cloud infrastructure against the CIS framework with the audit team.
- Designed the infrastructure and network to move a SaaS workload serving millions of requests a day onto the internal platform, lowering monthly cloud cost.
AI3, Keio University
Jan 2022 – Apr 2022Research Intern · Remote
- Designed a tool that schedules ML workloads on limited GPU memory so several researchers can share one GPU (source).
Certifications
- Certified Kubernetes Security Specialist (CKS) — Linux Foundation
- Certified Kubernetes Administrator (CKA) — Linux Foundation
- Linux Foundation Certified System Administrator (LFCS)
- Professional Cloud Architect — Google Cloud
Skills
Kubernetes, containers, Terraform, GitOps (Argo CD), HashiCorp Vault, the Grafana stack (Loki, Tempo, Mimir, Alloy), OpenTelemetry, PostgreSQL, Bash, Python, Go.
Languages: English (IELTS 7.5), Japanese (JLPT N4).
Education
Universitas Brawijaya
2018 – 2022B.Comp, Informatics Engineering · Malang
Thesis: a distributed lab on multi-cluster Kubernetes.
Speaking
Kubernetes Community Days Indonesia
Nov 2021Speaker — the sidecar pattern in distributed systems