Available for Strategic Roles

Infrastructure Reliability Engineer
with DevOps Capability

Specializing in designing enterprise cloud environments, orchestrating automation-driven operations, and architecting resilient hybrid cloud solutions.

View My Skills Contact Me
Golf Khomsan Profile

About Me

I am an Infrastructure Reliability Engineer focused on bridging the gap between traditional operations and modern DevOps practices. My expertise lies in building enterprise-grade hybrid cloud architectures that are secure, scalable, and highly available.

I specialize in automation-driven operations, using tools like Terraform and n8n to eliminate toil and streamline workflows. My goal is to ensure system reliability while enabling rapid delivery through robust CI/CD pipelines and observability stacks.

Infrastructure

Data Center & Cloud (IaaS, DRaaS)

Monitoring

Centralized Dashboards & Visibility

Core Responsibilities & Achievements

Cloud, Kubernetes & DevOps

  • Operated and maintained Amazon EKS production cluster (tfac-eks-cluster-prod) supporting containerized applications across UAT and Production environments.
  • Implemented GitOps deployment strategy using ArgoCD and Helm to manage version-controlled Kubernetes deployments.
  • Integrated CI/CD pipelines using Jenkins and SonarQube for automated build, code quality validation, and deployment.
  • Managed container image lifecycle through GitHub Container Registry (GHCR), including version tagging and access control.
  • Configured Kubernetes ingress and DNS (Cloudflare) for external service exposure.
  • Administered Kong API Gateway (Kong Admin) for service routing, upstream configuration, and API exposure management.
  • Troubleshot Kubernetes deployment, networking, and API routing issues in production environments.

Network Security & Firewall

  • Migrated firewall infrastructure from Sophos to FortiGate 90G.
  • Redesigned network zones and improved firewall policies for stronger segmentation and access control.
  • Configured and maintained Site-to-Site VPN connections between locations.
  • Applied security controls across IT and OT environments.

Infrastructure & Data Center Operations

  • Supported and maintained production infrastructure, handling incidents, service requests, problems, and change activities.
  • Deployed and maintained on-premise Data Center systems, including server setup and network configuration.
  • Analyzed Apache access/error logs and system logs to troubleshoot traffic issues and HTTP errors (4xx/5xx).
  • Coordinated with vendors (Microsoft, Dell, Cisco TAC, Veritas) for troubleshooting and issue resolution.

Virtualization & High Availability

  • Managed VMware and Nutanix virtualization platforms.
  • Optimized VM resource allocation to maintain system stability and performance.
  • Performed capacity planning to support workload growth.

Backup & Disaster Recovery

  • Managed backup solutions using Veeam Backup & Replication and Veritas Backup.
  • Conducted restore testing to ensure recovery readiness.
  • Maintained disaster recovery procedures for critical systems.

Automation & Monitoring

  • Developed automation workflows using n8n to reduce manual operational tasks and improve notification processes.
  • Built a web-based monitoring dashboard integrating multiple infrastructure data sources.
  • Developed a gold price prediction project integrating TwelveData and GNews API for technical and sentiment analysis.

Featured Projects

EKS Migration

EKS Migration: SG to TH

Strategic migration of mission-critical workloads from Singapore to Thailand region for compliance and latency optimization.

EKS Terraform Velero
CI/CD Infrastructure

CI/CD Infrastructure

Implemented end-to-end GitOps pipelines for DEV, UAT, and PROD environments using ArgoCD and tailored promotion strategies.

ArgoCD GitLab CI Helm
DB Migration

High-Scale DB Migration

Dual migration: PostgreSQL to Aurora RDS and legacy Rocky Linux Postgres to modern Ubuntu LTS infrastructure.

AWS DMS PostgreSQL Aurora
Multi-Cloud Arch

Multi-Cloud Solution Design

Hybrid architecture integrating On-Premise Data Centers with AWS Public Cloud via Site-to-Site VPN for HA.

Hybrid Cloud VPN AWS
Firewall Security

Fortigate Firewall Implementation

Deployed Next-Gen Firewall clusters with strict segmentation, Deep Packet Inspection, and HA configurations.

Fortigate Network Security HA
n8n Automation

n8n Automation Workflows

Orchestrated complex operational tasks and alerting systems using n8n to integrate tools and reduce manual toil.

n8n Webhooks APIs

Technical Expertise

Network & Security

Cloudflare DNS Management Cloudflare WAF Configuration Firewall Policy Management DNAT / SNAT Configuration VPN Site-to-Site IDS / IPS Network Segmentation

Container & Orchestration

Docker Kubernetes (K3s,K8s,EKS) Helm Kong MetalLB Longhorn Storage Lens Rancher

Automation & DevOps

n8n Workflow Terraform (IaC) CI/CD Design Nginx Proxy

GitOps & CI/CD

GitHub / GitLab Jenkins ArgoCD (GitOps) GHCR (GitHub Container Registry) Automated CI/CD Pipelines SonarQube (Code Quality Analysis)

Monitoring & Observability

Prometheus Metrics Collection Grafana Dashboard Visualization Centralized Web Monitoring Platform Kubernetes & Cluster Health Monitoring Automated Alerting Workflow (n8n) Uptime Kuma Imprement

Infrastructure & Cloud

Data Center Ops IaaS / DRaaS / BaaS AWS (S3, EKS, Aorora ,ECS.EFS ,EBS ,ACM ,IAM,Bedrock) local cloud (Vcloud) High Availability Load Balancing

Virtualization

VMware vSphere Nutanix AHV ESXi Hyper-V

Backup & DR

Veeam Backup Veritas Backup Replication NAS Business Continuity

OS & Scripting

Windows Server Ubuntu Linux Rocky Linux PowerShell Phyton Script Bash Scripting

Architecture & Solution Design

Infra Architecture DR Architecture Hybrid Cloud Design Scalability Planning

Professional Mindset

My engineering philosophy is built on five core pillars that ensure long-term stability and business growth.

Reliability First

Systems should fail gracefully and recover automatically.

Security by Design

Security is not a layer, it's the foundation of every build.

Automate Everything

If it's done twice, it should be a script or a pipeline.

Scalability Planning

Architect for tomorrow's traffic, not just today's.

Cost Optimization

Efficiency means performance without wasted resources.

Let's Collaborate

Ready to build the next generation of infrastructure? Whether it's a new system design or optimizing an existing one, I'm here to help.

Send an Email