Francisco Roa

Senior (AI) Platform Engineer · Cloud Architect

franciscoroaprieto@gmail.com github.com/franroa linkedin.com/in/francisco-roa-prieto Remote or on-site · Europe, North & Latin America franroa.github.io/platform-engineer

Platform engineer and cloud architect (AWS Certified Solutions Architect – Associate · CKA) who designs and runs internal developer platforms end-to-end — the paved road that lets product teams ship safely and fast without re-implementing infrastructure, pipelines or security each time. Fifteen years across full-stack product, DevOps and multi-cloud platforms; the throughline is reliability, cost-awareness and developer experience. I build the guardrails (Terraform modules, CI components, Helm charts, OPA policy) that make the right thing the easy thing.

Core competencies

Platform as a product — reusable Terraform modules, GitLab CI components, Helm charts; golden paths; shared-responsibility model.

Kubernetes — AKS/EKS at scale, node pools, ingress + WAF, cert-manager, GitOps (Argo CD / Flux).

Infrastructure as Code — Terraform at scale, remote state as source of truth, module libraries, Test-Driven Infrastructure.

Cloud & networking — Azure & AWS, hub-and-spoke VNets, cross-subscription peering, DNS/NAT, single P2S VPN entry.

CI/CD & policy — GitLab CI components, OPA/rego gates (plan → policy → apply), secretless OIDC.

Security & identity — Entra ID, PIM, least-privilege RBAC, Key Vault isolation per tenant-region.

Observability — Grafana / Mimir / Loki, dashboards & alerting as code, SLIs/SLOs.

AI platform & tooling — foundations for an internal AI platform and AI-assisted developer tooling.

Experience

Senior (AI) Platform Engineer

Jun 2026 — Present

Technosylva · Azure & Kubernetes · AI Platform

Design, scale and optimize the cloud infrastructure behind mission-critical microservices and the company's next-generation AI platforms. Lead Developer Experience — abstracting Azure/AKS complexity behind golden paths, self-service and policy-as-code.

AKS at scale — hub-and-spoke networking, tenancy isolation, GitOps delivery
Terraform module libraries, OPA/rego policy gates, secretless CI/CD
Foundations for an internal AI platform and AI-assisted developer tooling

Platform Engineer — Azure & Kubernetes

Feb 2025 — Jun 2026

Technosylva · (promoted to Senior)

Built and operated the Azure/AKS developer platform: reusable Terraform modules, GitLab CI components, multi-region clusters, and the guardrails that keep tenant teams safe by default.

Software Architect

Apr 2024 — Dec 2024

XERIDIA

Designed clean, maintainable architectures for enterprise applications (incl. OutSystems), focused on separation of concerns and long-term maintainability.

Masters Director — Business Analytics

Oct 2023 — Apr 2024

Esden Business School

Directed the Business Analytics master's programme — curriculum and mentoring bridging data, analytics and engineering practice.

DevOps — Kubernetes & AWS

Oct 2019 — Dec 2023

SYNAOS · Hannover (Remote)

Migrated infrastructure to AWS (EKS) and Azure (AKS): Packer + Ansible base images, Terraform for the infrastructure, and an own Test-Driven Infrastructure (TDI) framework in Go. Adopted the AWS Well-Architected Framework.

Multi-account governance (Control Tower + SSO across Azure/AWS), aws-nuke cleanup
Cost-aware design — up to 90% savings on instance choices (~1,500€/week/env)
Flux & Argo CD, GitLab Runners on Kubernetes, a DevSecOps pipeline, observability as code

Full-Stack Engineer — Java & React

Jan 2017 — Aug 2019

Klarna · Berlin

Google Pay API integration and a merchant onboarding API (OAuth2). Built an own TDD testing framework; microservices in Java 11 / Spring Boot with React/Redux front-ends, Kafka, Jenkins CI/CD.

Software Engineer — earlier roles

2011 — 2016

Targetic · Hieronymus · DADA Company · AVANZO

Full-stack PHP/JS (Zend, MySQL, jQuery plugins), database engineering for a social platform, an iOS game (cocos2d / Objective-C), and SCORM e-learning courseware.

Certifications

AWS Certified Solutions Architect – Associate
CKA — Certified Kubernetes Administrator

Tools I've built

gctui — a local GitLab-CI cockpit (Go + Bubble Tea): assemble, run pipelines locally, diff vs remote.
tflocal — local-only Terraform overrides (Go): run real modules locally, leave the tree untouched.
time-tracker (tt) — ticket-aware time tracking in tmux (Python).

Languages

Spanish — mother tongue.
German — upper level (C1).
English — upper-intermediate (B2).

This CV has an interactive companion: a 3D map of a production developer platform I build and operate —

Tip: use “Print / Save as PDF” above for a clean, one-file copy.