DevSecOps & Site Reliability Engineer with a strong analytical mindset and high commitment to reliability and security. Experienced in building, operating, and supporting systems across various projects using modern technologies. Continuously learning and adaptable, with the ability to work effectively in both onshore and distributed team environments.
Summary
Education
University Bina Sarana Informatika
Information Systems - Associate's degree
2017 - 2020
University Nusa Mandiri
Information Systems - Bachelor Degree
2020 - 2021
Work Experience
Meteor Inovasi Digital
Devops Engineer
October 2021 - November 2023
- Build and preparing the infrastructure for new development
- Understand stakeholder needs and communicate it to development and release developers
- Work systematically to automate and improve development and release processes
- Identify technical issues and perform software repairs and updates
- Collaborate across the organization to define, prioritize, and ensure the reliability, availability, and performance of the product and services.
- Monitoring the health of our environment and maintaining comprehensive documentation of our infrastructure and tools.
Infosys Solusi Terpadu
DevSecOps Engineer
December 2023 - September 2024
- Develop and implement a comprehensive DevSecOps strategy to embed security practices throughout the software development lifecycle (SDLC) and operational processes.
- Collaborate with development teams to define and implement infrastructure requirements, such as static code analysis, into the continuous integration and deployment (CI/CD) pipelines.
- Design and implement secure infrastructure and cloud architecture
- Monitor and report on key security metrics and indicators to assess the effectiveness of security controls and identify areas for improvement
- Automate infrastructure provisioning and configuration management.
Digiasia Bios
IT Operation Lead
August 2024 - Now
- Lead and manage cross-functional operational teams (DevOps, TechOps, OpsDev) to ensure high-quality execution, efficient workflows, and timely delivery of initiatives.
- Oversee production system stability, including incident response, root-cause analysis, post-mortem reviews, and continuous improvement to reduce downtime and operational risks.
- Drive DevOps practices and automation, enabling faster deployments, standardized CI/CD pipelines, and improved infrastructure reliability.
- Design and optimize cloud infrastructure, leveraging Alibaba Cloud (ACK, ECS, RDS, NAT, WAF, OSS), Kubernetes, cloud networking, observability stacks, and security controls to support high availability.
- Implement and enforce operational governance, including SOP, MOP, monitoring frameworks, SLA/OLA adherence, and compliance with internal and external audit requirements.
- Collaborate with engineering and business teams, translating operational insights into strategic recommendations to improve system performance, scalability, and cost efficiency.
- Lead cost optimization initiatives, ensuring infrastructure spending aligns with business needs through right-sizing, architecture review, and consolidation strategies.
- Mentor and develop operational teams, fostering a culture of ownership, reliability, security, and continuous learning.
Projects
DuitHape
DevOps Engineer
- Build and preparing the infrastructure for new development on top of the cloud provider AlibabaCloud
- Network building on the project
- Build automate tools Continuous integration and Continuous deployment/delivery with Jenkins
- Make and manage docker container, Alibaba Cloud Container Service for Kubernetes (ACK)
- Build Database ApsaraDB RDS for MySQL, ApsaraDB for Redis
- Create SSL certificates Cert-Manager with Helm
- Build Monitoring with cloud monitor Alibaba Cloud
Metaverse
DevOps Engineer
- Built and prepared cloud infrastructure for new development on Amazon Web Services (AWS).
- Designed and implemented network architecture for project environments.
- Developed CI/CD automation using Jenkins for continuous integration and delivery.
- Built and operated Darkrift MMO Server, VPN services, and Hyperledger Besu private blockchain.
- Created and managed Docker containers, Amazon EKS, Amazon ECS, Amazon CloudFront, and Amazon S3.
- Provisioned and maintained databases using Amazon RDS (MySQL) and Amazon ElastiCache.
- Implemented firewall and application security using AWS WAF.
- Managed SSL/TLS certificates using Cert-Manager with Helm and Nginx Ingress.
- Built observability and monitoring solutions using Grafana, Amazon CloudWatch, OpenTelemetry, and Jaeger.
Alfamind V3
DevOps Engineer
- Performed maintenance and operations on infrastructure hosted on Alibaba Cloud.
- Built and maintained CI/CD automation using Jenkins and Bitbucket Pipelines.
- Implemented code quality analysis using SonarQube.
- Managed Docker image registry using Nexus Repository.
- Maintained managed databases including ApsaraDB RDS for MySQL, ApsaraDB RDS for Redis, and ApsaraDB for MongoDB.
- Implemented monitoring and alerting using Alibaba Cloud Monitor.
Alfamind V4
DevOps Engineer
- Prepared cloud infrastructure for new development on Google Cloud Platform (GCP).
- Set up infrastructure using Compute Engine and MemoryStore (Redis).
- Built and deployed n8n using Google Cloud Run.
- Built and deployed applications based on the Frappe Framework using Google Cloud Run.
- Automated application preparation and configuration for Frappe Framework using Ansible.
- Performed ongoing infrastructure maintenance and monitoring.
Daikin
DevOps Engineer
- Build and preparing the infrastructure for new development on Heroku
- Deploy application to Heroku
- Build automate tools Continuous integration and Continuous deployment/delivery with Jenkins
- Make Dockerfile for framework php Laravel, Next.js, Nest.js
- Used Heroku Postgres, Heroku Data for Redis, Heroku Connect (For connect SalesForce)
Talent DNA
DevOps Engineer
- Built and managed network infrastructure to support application environments.
- Created Docker images for Flutter PWA applications.
- Implemented CI/CD pipelines using Jenkins.
- Developed and maintained Dockerfiles for Laravel applications.
Bank Jatim
DevSecOps
- Collaborated closely with the development team to support application delivery.
- Prepared and managed configurations for Development and Pre-Production environments.
- Worked with container orchestration technology using OKD (Red Hat OpenShift).
- Built centralized Jenkins pipelines to automate Spring Boot application deployments.
- Configured and maintained supporting services including PostgreSQL, Redis, RedisLabs, ActiveMQ, Zipkin, MinIO (object storage), and Jenkins.
Pos Indonesia
DevSecOps
- Monitored and ensured the stability of Development, Staging, and Production environments.
- Supported the DevSecOps team by troubleshooting and validating connectivity across environments.
- Worked with technologies including Amazon EKS, Redis, PostgreSQL, Keycloak, Jenkins, MinIO, Amazon S3, ActiveMQ, and the ELK Stack.
- Contributed to building and supporting SAP environments.
ASDP Indonesia Ferry
DevSecOps
- Managed the procurement of GitLab Premium licenses.
- Built and configured GitLab Omnibus and GitLab Runner within the ASDP environment.
- Implemented DevSecOps best practices across the development lifecycle.
- Designed and implemented a centralized CI/CD architecture using GitLab CI and GitOps principles.
- Integrated security scanning tools including SonarQube, Trivy, and Tenable for continuous security assessments.
- Delivered training sessions on GitLab, DevSecOps practices, GitLab CI, and GitOps for internal teams.
Infomedia Nusantara by Telkom Indonesia
DevSecOps
- Implemented DevSecOps best practices across the software delivery lifecycle.
- Designed and built a centralized CI/CD architecture using Jenkins DSL and GitOps principles.
- Integrated continuous security scanning using SonarQube, Aqua Trivy, and OWASP ZAP.
- Conducted training sessions on DevSecOps practices, GitLab CI, and GitOps for engineering teams.
Solusi Pasti Indonesia (Kaspro Payment)
IT Operation Lead, DevSecOps, SRE
- Ensured 99.9%+ system uptime through proactive monitoring, incident response, and infrastructure optimization.
- Improved scalability of KasPro’s microservices and monolithic systems through Kubernetes (ACK) enhancements, right-sizing compute, and optimizing network architecture.
- Strengthened platform security with WAF configuration, API rate limiting, IP whitelisting, alerting rules, and fraud-detection workflow refinement.
- Implemented standardized CI/CD pipelines, production deployment flows, and automated rollback mechanisms to reduce release risks.
- Led cross-team coordination between Business, Tech, Ops, and Vendor partners to support mission-critical payment features including QRIS, Cash-in/Cash-out, Wallet Lifecycle, and Transaction Orchestration.
- Executed cost-efficiency initiatives, reducing infrastructure spend through compute optimization, cluster consolidation, and service rationalization.
Starbucks App
IT Operation Lead, DevSecOps, SRE
- Oversaw and maintained the entire infrastructure ecosystem, ensuring optimal performance and continuous availability for Starbucks-related services.
- Maintained proactive monitoring & observability frameworks, including Grafana dashboards, ELK logging pipelines, Wazuh alerts, and real-time incident notifications.
- Ensured SLA achievement through structured incident handling, rapid response, minimal downtime, and continuous service improvement.
- Coordinated closely with cross-functional teams (Engineering, Ops, DevOps, Vendors) when issues occurred, ensuring efficient root-cause analysis, resolution, and clarity in communication.
- Performed routine system health checks, capacity planning, and environment readiness for high-traffic scenarios and promotional periods.
- Provided regular operational updates, reporting, and reliability insights to internal stakeholders for transparency and alignment.
Skills
Kubernetes
Docker
Podman
Containerd
Linux
Windows
RHEL Family
DEBIAN Family
Jenkins
Gitlab CI
Bitbucket CI
Github CI
AWS Code Pipeline
Gitlab
Bitbucket
Github
Alibaba Cloud
Amazon Web Service
Google Cloud
DigitalOcean
Microsoft Azure
Apache
Nginx
Caddy
HTTPD
RDBMS
Grafana
Prometheus
OpenSearch
ELK
FluentBit
FluentD
Jaeger
OpenTelemetry
Terraform HCL
Ansible
OKD
ActiveMQ
SonarQube
Keycloack
SSO
ArgoCD
Aqua Trivy
Defect Dojo
Golang
Bash Script
Wazuh
SIEM
NMAP
Wireshark
AI n8n
Helm
Kustomize
Hardening
Packer
Nomad