SecDevOps Architect &
Senior Solutions Architect
I design resilient cloud platforms, automated CI/CD security pipelines, and immutable infrastructure. My focus is eliminating operational friction, automating vulnerability compliance, and cutting recurring cloud spend.
Featured Architectural Work
Real-world initiatives delivered across cloud infrastructure and platform engineering.
Shift-Left Vulnerability Automation
Challenge
Manual vulnerability reviews caused release bottlenecks and left critical CVEs lingering unaddressed.
Architecture
Integrated Tenable APIs directly into CI/CD release stages. Enforced automated security gates and RBAC via Microsoft Entra ID.
Outcome
Dramatically reduced MTTR on high-severity risks and prevented unverified workloads from reaching production.
Enterprise IaC & Cost Governance
Challenge
Manual server provisioning created environment drift, unmonitored resources, and unnecessary cloud expenditures.
Architecture
Standardized deployments through Terraform IaC modules. Automated patch compliance with Azure Update Manager and Resource Graph.
Outcome
Achieved 100% declarative provisioning, eliminated manual configuration drift, and trimmed cloud spend by 35%+.
Reliable Microservices & Operations
Challenge
Unreliable legacy maintenance scripts and slow incident troubleshooting under peak load.
Architecture
Restructured backend API gateway communication, hardened Linux runtime environments, and automated runbooks using structured AI workflows.
Outcome
Maintained sub-100ms API response times and maintained 99.95% production uptime across operational workloads.
Technical Disciplines
Tools and frameworks applied in production enterprise environments.
Cloud Architecture
- Microsoft Azure
- Cloud Security Architecture
- High-Level & Detailed Design
- Cost Optimization (FinOps)
DevSecOps & IaC
- Terraform (IaC)
- CI/CD Pipeline Automation
- Docker & Container Workflows
- Policy as Code
Security & Access
- Vulnerability Management
- Tenable API Integration
- Microsoft Entra ID (SSO / RBAC)
- Zero-Trust Network Policies
Systems & Operations
- Linux System Administration
- Bash & PowerShell Scripting
- AI Prompting & Automation
- Telemetry & Incident Response
Need Advisory Services via JuansTEC?
Available for cloud security audits, IaC migrations, and fractional architecture advisory through JuansTEC (juanstec.com).
Let's Connect
Available for senior full-time engineering roles, technical advisory, and consulting retainers.