DavidS.Kom., CSCU, CEH
Senior DevOps & Cloud Engineer
I've spent the last 10+ years working with AWS and Azure, building and managing infrastructure across multiple industries. Currently leading technical teams and focusing on scalable cloud solutions.
🏆 What I Do Best
About David
DevOps engineer with hands-on experience in cloud infrastructure and team leadership
Hey there! I'm David
I've been working in DevOps and cloud infrastructure for 10+ years now, mainly with AWS and Azure Platform. I really enjoy the challenge of building scalable systems and leading technical teams. Recently, I've been working a lot with Azure Stack deployments helped a construction project data and information company migrate from Azure to AWS infrastructure with Native Cloud Architecture. My focus has also expanded to cloud computing by leading cloud migrations and modernization initiatives by using rehost, replatform, and refactor or re-architect strategies for technology delivery.
Cloud Architecture
AWS & Azure multi-cloud expertise with Azure Stack infrastructure automation
DevOps Leadership
Team management, CI/CD pipelines, and operational excellence
Infrastructure
Kubernetes, Docker, and scalable system architecture
Security
CSCU, CEH certified with security framework implementation
My Journey
David
S.Kom., CSCU, CEH
Senior DevOps & Cloud Engineer
Tangerang • Jakarta • Remote
"I love solving complex infrastructure challenges and helping teams work more efficiently"
📍 Work Locations
Professional Experience
From IT support to cloud architecture — here's what I've been up to over the past 10+ years
Senior DevOps & Cloud Engineer


Business: Hubexo builds construction management software used by thousands of companies across APAC and Nordic regions. I'm responsible for the cloud infrastructure behind 7 SaaS products — Archify, ArchifySpec, SMART, eProcure, TenderSearch, ConstruData21, and Olmero — running on AWS and Azure.
Key Achievements
- •Responsible for the full cloud infrastructure and DevOps strategy across all 7 production SaaS products, running on both AWS and Azure in a multi-cloud setup
- •Built out multi-region infrastructure across APAC and Nordic using Terraform, so each product can run geo-redundantly with 99.9%+ uptime and low latency for regional users
- •Set up and manage the Azure Stack environment in West Europe for SMART — everything is Terraform-managed with automated provisioning, no manual steps needed
- •Run production AKS clusters that handle our microservices workloads, with auto-scaling, pod disruption budgets, and self-healing so things stay up during traffic spikes
- •Put together the event-driven backbone using Apache Kafka for real-time data streaming between services, plus Redis clusters that handle millions of cache requests daily
- •Built the observability stack from scratch — Prometheus for metrics, Graylog for centralized logs, Kibana dashboards, OpenTelemetry for distributed tracing, and CloudWatch for APM. Cut our incident detection time by 60% and resolution time by 45%
- •Deployed and tuned OpenSearch and Elasticsearch clusters that power search and log analytics across all products — we're indexing terabytes of data at this point
- •Manage PostgreSQL and MySQL clusters in production with automated failover, point-in-time recovery, and HA configurations so our databases stay reliable under heavy SaaS workloads
- •Led cost optimization using OpenCost and KubeCost — rightsized resources, set up automated scheduling, and moved to reserved capacity where it made sense. Brought monthly infra spend down by over 30%
- •Standardized CI/CD pipelines across all 7 product teams, bringing deployment times down from hours to under 15 minutes with zero-downtime rolling releases
- •Lead a DevOps team and work closely with all product teams to set platform engineering standards, enforce IaC governance, and help developers ship faster
- •Designed the disaster recovery architecture with clear RTO/RPO targets, automated backups, and we run DR drills every quarter to make sure it actually works
- •Hardened security across all cloud environments — network segmentation, least-privilege access, and compliance frameworks are in place
🚀 Key Project: Multi-Region Platform Expansion — APAC & Nordic Cloud Architecture
- •Led the architectural design and deployment of Archify and ArchifySpec into the Stockholm (Nordic) region, establishing Hubexo's first European cloud presence with Terraform-managed multi-region infrastructure
- •Architected and deployed comprehensive Azure Stack infrastructure in West Europe for the SMART platform, implementing end-to-end IaC with Terraform modules for reproducible, auditable infrastructure
- •Engineered geo-redundant deployment architecture with automated failover, reducing cross-region latency by 40% and enabling seamless service continuity across 8+ deployment regions
- •Built production-grade AKS clusters integrated with Kafka event streaming, Redis caching, OpenSearch, and Elasticsearch — supporting real-time data processing for construction management workflows
- •Deployed unified observability stack across all regions — Graylog centralized logging, Prometheus metrics, Kibana dashboards, and OpenTelemetry tracing — providing single-pane-of-glass operational visibility
- •Implemented FinOps governance with OpenCost and KubeCost, establishing cost allocation by product and region with automated alerting on spend anomalies
- •Established high-availability database infrastructure with PostgreSQL and MySQL clusters featuring automated replication, failover, and point-in-time recovery across regions
Roles
Technologies Used
DevSecOps Engineer



Business: Health Tech, Medical, and Telemedicine | IT Consultant
Key Achievements
- •Apply technical knowledge to create a modernization roadmap. Solution Architect to meet business and IT needs, ensuring technical viability of new projects and successful deployments
- •Capacity Planning (analyze EC2 instances usage and convert to reserve instance model)
- •Monitor 30+ servers and also systems performance via NewRelic APM, Prometheus, and Grafana Dashboard
- •Setup Cloud automation with AWS CLI, Bash, and python Boto
- •Manage Identity Management to unify diverse cloud and third-party providers
- •Manage Amazon AWS Cloud infrastructure, particularly interested in scalability, high availability, and testable infrastructure
- •Manage all of AWS United States, Singapore, and Indonesia workloads in AWS VPC and achieve high availability
- •Cost-efficient implementation of private networking, and the latest EC2 instance type for all application services
- •Apply security best practices to AWS infrastructure and harden security findings
- •Support the development team in building and designing highly fail-safe applications and infrastructure
- •Develop automation tools to ensure scalability and high availability of our services
- •Drive continuous enhancement of software development infrastructure and security: CI/CD, WAF inside cloud services with AWS
- •Define convention and documentation towards the concept of automation
- •Run monitoring and alerting system on webhook Slack Channel
- •Troubleshoot complex infrastructure-related issues that may span across infrastructure and application integrations
- •Implement Elastic Kubernetes Service and Dashboard for Microservices and Load Balancer
- •Implement Security in the Cloud for Kubernetes API, EC2, S3, VPC, DNS, RDS, Container
- •Managing, supervising, and delegating jobs to other teams to deliver the best solution
- •Improve and monitor hardware, software, and network for the whole company
- •Propose new projects to increase the company's performance, reduce cost, and revenue
- •Manage and involve the project timeline ISO 27001:2013 process and team to deliver the best achievement
- •Collaborate with cross-function teams in tech, design, product, and operations support
- •Interact, coordinate, and negotiate with third-party vendors and partners to learn and gather requirements in order to create new or enhance the existing architecture
🚀 Key Project: Multi-Region Healthcare Infrastructure
- •Managed AWS workloads across United States, Singapore, and Indonesia
- •Implemented AutoScale solutions for high availability healthcare applications
- •Applied security best practices and hardened infrastructure security findings
Roles
Technologies Used
Cyber Security Analyst

Business: IT Consultant (Total IT Managed Services)
Key Achievements
- •IT security management and maintaining the best practice for information security standards and compliance in both internal organizations and external customers/clients
- •Periodical evaluation of security breaches for internal and external network infrastructure and application environment
- •Frequent combating with the latest threats from APT, zero-day attacks, malware outbreaks
- •Perform vulnerability assessment and penetration testing
- •Monitoring, managing, analyst, detecting, and responding to infrastructure system and application system incidents in SIEM Administrator
- •Monitors network security events, received from monitored servers, and take appropriate action based on security policy and reviewing alert SIEM tools dashboard security appliance hardware
- •Perform analysis of suspicious offense, cyber threat hunting, and logs activity file
- •Coordinate with the across team both internal and external inside the security perimeter with the relevant section if there are any suspicious events and potential vulnerabilities
- •Assist customers with security-related issues
- •Operates SIEM and updates the ticket for any feedback from the resolver group
- •Apply the remediation action regarding any SOC policy and rules with threat intelligent tools
- •Carrying out all activities regarding the Security Operation Center Daily Reports to the CISO
🚀 Key Project: Security Operations Center (SOC)
- •Operated SIEM tools and managed security incident tickets
- •Performed analysis of suspicious offenses and threat hunting activities
- •Delivered daily SOC reports to CISO and security assessment
Roles
Technologies Used
iOS Junior Developer

Business: Experience in many roles as a UI/UX Designer, Project Manager, and iOS Developer. As a developer student driven by a passion for being a creative and analytical thinker with demonstrated ability to solve and prevent problems, successful team player, determine strategies, and consistently implement effective solutions with the best-practice method.
Key Achievements
- •Experience in many roles as a UI/UX Designer, Project Manager, and iOS Developer
- •Brainstorm using the Challenge Based Learning (CBL) method
- •Starting from exploring ideas, finding the problem and creating the solution with an application, until the application is published to the App Store
- •Developed innovative solutions for accessibility and inclusive design
- •Led cross-functional teams through product design and development cycles
🚀 Key Project: Musicable App - Accessibility Innovation
- •Developed iOS application for hearing-impaired people to experience music through vibration
- •Created new sensory experience allowing users to experience music in alternative ways
- •Led product from concept to App Store publication
Roles
Technologies Used
Freelance IT Consultant

Business: Provided Consulting IT solutions and managed architecture for the E-Commerce Product Website for end-users, transforming business processes through digital marketing to meet business requirements.
Key Achievements
- •Provided Consulting IT solutions and managed architecture for E-Commerce Product Website
- •Transformed business processes through digital marketing to meet business requirements
- •Delivered end-to-end e-commerce solution for retail business
🚀 Key Project: E-Commerce Digital Transformation
- •Architected and implemented e-commerce platform for retail business
- •Integrated digital marketing strategies with technical implementation
- •Delivered complete solution from consultation to deployment
Roles
Technologies Used
IT Technical Support Supervisor

Business: Fashion Retail - Overall responsibility for IT infrastructure for all PT. Matahari Department Store, Tbk Head Office, DC Warehouse, Branch Stores across Indonesia.
Key Achievements
- •Overall responsibility for IT infrastructure for all PT. Matahari Department Store, Tbk Head Office, DC Warehouse, Branch Stores across Indonesia
- •Maintain all critical information systems and related components including hardware and software, both internally hosted on our own network (i.e. file servers, data storage, and software, etc.), as well as reliable internet access to externally hosted solutions
- •Provide excellent office support to field personnel for all office branch technology, including back-office computer systems, Microsoft Office & Outlook, reliable internet service, and security systems
- •Maintain and configure all branch workstations, printers, etc.
- •Negotiate and build relationships with outside vendors for phone and internet service contracts, network support and consulting services, hardware and related software maintenance and replacement as applicable
- •Support user requests for new tools/applications, and integrate such tools with existing systems
- •Maintain consistent, reliable, and secure information by establishing policies, procedures, methods, and standards; including system access and disaster recovery systems
- •Monitor and manage compliance with technology provisions of applicable Company contracts and agreements (software license requirements etc.) as well as data security and integrity
- •Effectively communicate any project or system issues with Senior Management including remediation plans as required
- •Responsible for coordination and completion of all new office systems
🚀 Key Project: Nationwide Retail IT Infrastructure
- •Managed IT infrastructure across all Matahari Department Store locations in Indonesia
- •Implemented standardized IT policies and procedures across all branches
- •Coordinated vendor relationships and technology procurement for enterprise-wide deployment
Roles
Technologies Used
Want to chat about infrastructure?
I enjoy talking shop about cloud architecture, DevOps workflows, and building reliable platforms.
Educational Journey
Complete educational background from high school to university, building foundation for IT leadership
University Education

Bina Nusantara University
Major in Strategic Information System with focus on System Analysis, Solution Architecture, IT Strategy, and Infrastructure & Security Analysis.
Key Learning Areas
High School Education

Fons Vitae 1 Senior High School
Foundation for critical thinking and analytical skills in social contexts, developing strong communication and problem-solving abilities.
Key Learning Areas
Educational Foundation for IT Leadership
From social science critical thinking to information systems expertise
Cloud Projects
Some of the infrastructure projects I've worked on - from multi-cloud deployments to cost optimization
Multi-Region Cloud Infrastructure Deployment
Architected and led the multi-region platform expansion for Archify and ArchifySpec across APAC and Nordic regions, establishing Hubexo's first European cloud presence with Terraform-managed infrastructure.
Key Achievements
- •Engineered geo-redundant deployment architecture across 8+ regions, achieving 99.9%+ platform availability with automated failover
- •Designed region-specific compliance frameworks using Terraform workspaces to meet local regulatory requirements across APAC and Nordic jurisdictions
- •Built fully automated multi-region CI/CD pipelines with region-specific configuration management, enabling zero-touch deployments
- •Reduced cross-region latency by 40% through strategic infrastructure placement and edge optimization
Project Impact
Healthcare Infrastructure Modernization
Modernized healthcare infrastructure across US, Singapore, and Indonesia regions and on-premise networks with focus on high availability and security.
Key Achievements
- •Managed 30+ servers with 99.9% uptime across three continents - that was quite a challenge!
- •Set up EKS clusters for microservices that now handle 100k+ daily users
- •Got ISO 27001:2013 compliance for healthcare data security (lots of paperwork!)
- •Reduced infrastructure costs by 35% through better resource planning, reserved instances, and consolidated billing strategy
- •Managed Router, Switch Managed/Unmanaged, Firewall Appliances, and Web Application Firewall (WAF) for enhanced security
Project Impact
Enterprise Security Operations Center (SOC)
Built and operated comprehensive SOC infrastructure for multiple enterprise clients with 24/7 monitoring capabilities.
Key Achievements
- •Implemented SIEM solutions monitoring 500+ endpoints across client networks
- •Developed automated threat detection reducing incident response time by 60%
- •Conducted vulnerability assessments identifying and remediating 200+ security issues
- •Established incident response procedures and security playbooks
Project Impact
Cloud-Native Microservices Platform
Architected and implemented cloud-native platform for construction management software with focus on scalability and performance.
Key Achievements
- •Migrated monolithic applications to microservices architecture
- •Implemented CI/CD pipelines reducing deployment time from hours to minutes
- •Established monitoring and observability stack with Prometheus and Grafana
- •Achieved 99.95% uptime with automated scaling and self-healing capabilities
Project Impact
Multi-Cloud Cost Optimization Initiative
Led comprehensive cost optimization across AWS and Azure environments for multiple business units.
Key Achievements
- •Analyzed cloud spending patterns and identified optimization opportunities
- •Implemented automated resource scheduling and rightsizing policies
- •Negotiated reserved instance purchases and savings plans
- •Established FinOps practices and cost monitoring dashboards
Project Impact
Disaster Recovery & Business Continuity
Designed and implemented comprehensive DR/BC strategy for critical healthcare applications.
Key Achievements
- •Established RTO of 4 hours and RPO of 1 hour for critical systems
- •Implemented automated backup and recovery procedures
- •Conducted quarterly DR drills with 100% success rate
- •Created detailed runbooks and emergency response procedures
Project Impact
Project Success Metrics
Want to chat about infrastructure?
I'd love to hear about your infrastructure challenges and see how my experience might help.
Tech Stack
The tools and technologies I work with daily - from AWS and Azure to modern DevOps practices
Cloud Platforms
Container & Orchestration
Infrastructure as Code
CI/CD & DevOps
Data & Messaging
Logging & Observability
Cost Management
Databases
Performance Monitoring
Security & Compliance
Programming & Scripting
Databases & Storage
What I Bring to the Table
Certifications & Skills
Professional certifications and continuous learning in cloud technologies, security, and infrastructure management
Certified Ethical Hacker (CEH)
EC-Council
2020
Advanced ethical hacking and penetration testing certification
Key Skills
Computer Security Certified User (CSCU)
EC-Council
2019
Comprehensive computer security and cybersecurity fundamentals
Key Skills
AWS Solutions Architect
Amazon Web Services
In Progress
Cloud architecture and AWS services expertise certification
Key Skills
Certified Kubernetes Administrator (CKA)
Cloud Native Computing Foundation
Planned 2025
Kubernetes cluster administration and orchestration
Key Skills
Technical Expertise Matrix
Cloud Platforms
DevOps Tools
Monitoring
Security
Programming
Databases
Continuous Learning & Development
Education & Background
Bachelor of Computer Science (S.Kom.)
Information Technology & Computer Science
Strong foundation in computer science principles, software engineering, and information systems. Specialized coursework in network security, database management, and system administration provided the technical foundation for my career in IT infrastructure and cloud engineering.
Let's Connect
Interested in discussing cloud infrastructure, DevOps practices, or potential collaborations? Let's connect.
Contact Information
Let's Connect
- ✓10+ years AWS and cloud infrastructure expertise
- ✓Experience in technical leadership and team collaboration
- ✓Passionate about scalable infrastructure solutions
- ✓Open to opportunities in Tangerang, Jakarta, or remote