About

I’m Ivan, a DevOps/SRE engineer from Sonora, Mexico, building CI/CD pipelines, GitOps workflows, and Zero Trust infrastructure. Security is a strong secondary interest: not the day job, but it shapes how I build everything else.

Before infrastructure, I spent time in IT and security-adjacent roles (Active Directory administration, network pentesting, vulnerability triage), which is probably why I still default to asking “how would this get broken” before “how does this scale.”

What I actually do:

At TCA Software Solutions, I design GitOps pipelines (ArgoCD, Cloud Build, GKE), migrated a legacy app off VM instance groups onto GKE StatefulSets and cut compute requirements by about two-thirds, and harden Kubernetes clusters with strict network policies. I also architected a multi-cloud Zero Trust network with Netbird that collapsed our perimeter attack surface. Before that, at Mexico’s National Electoral Institute (INE), I deployed and supervised the infrastructure that reported voting results nationwide with zero downtime during election periods. As part of that role, I also ran Active Directory pentests and vulnerability assessments that surfaced and helped remediate several high-severity issues.

Off the clock:

I run a home lab that’s less “hobby project” and more “production environment I happen to own”: OPNsense at the edge with full L2/L3 segmentation, Suricata IDS/IPS watching 24/7, Grafana pulling Prometheus and Loki data across multiple nodes, real-time alerting on anything that moves. I’m also building Project Ozymandias, a fully reproducible NixOS workstation where any machine can be rebuilt from a single config file, dotfiles and all.

I hold TCM Security’s Practical Ethical Hacker certification and Google’s Cybersecurity Professional certificate, and I’m currently working toward Google Cloud’s Professional Cloud Architect, which is a better indicator of where this is actually headed.

Outside of computers:

I read constantly (technical books, fiction, whatever’s next in the stack), and I paint miniatures, which turns out to be the best possible antidote to staring at a terminal for twelve hours.

This site is where I document the projects, the failures, the “here’s what actually happened” version of things that doesn’t fit on a resume. Built with Zola and Duckquill, because static and boring is exactly what infrastructure should be.