Active
CKA
Certified Kubernetes Administrator
The Linux Foundation · CNCF
Issued Jun 2025Exp Jun 2027
Open to DevOps / platform / SRE roles
Darren Maverick
Devops Engineer · CKA Certified
I automate infrastructure, and I like knowing exactly what's happening underneath it.
LootCKATerraformAWS SAAAWS CCP
Credentials
Certifications
The exams I've actually sat: Kubernetes, Terraform, and AWS.
Active
Terraform
Terraform Associate
HashiCorp
Issued Apr 2025Exp Apr 2027
Active
AWS SAA
AWS Solutions Architect – Associate
Amazon Web Services
Issued Mar 2025Exp Mar 2028
Active
AWS CCP
AWS Certified Cloud Practitioner
Amazon Web Services
Issued Feb 2025Exp Feb 2028
Experience
Where I've worked
What I actually did in each role, and what changed because of it.
Mybit Innovation Lab
DevOps Engineer
Mar 2026 – Present
·Tangerang, ID · Hybrid
CI/CD OwnershipInfrastructure AutomationObservability PlatformRelease Engineering
I'm based in the Indonesia office on a hybrid setup, working with a local team under an Austrian manager, on platform work for products that mostly serve Europe. I own that platform layer (provisioning, CI/CD, and observability), so the product teams can deploy on their own instead of routing every release through me.
- Technical owner of the monitoring platform for Wero, a European product: designed the monitoring architecture, rules engine, customer-side agents, and alert routing.
- Cut a service's recurring AWS bill from ~$200/mo to $3/mo after tracing the cost to needless payload transfers and redesigning the integration.
- Migrated application file storage to S3, with a structured object hierarchy and IAM role-based presigned-URL access to tighten who can read what.
- Built the observability stack (Grafana, Prometheus, Loki, Alloy, Healthchecks.io) with automated onboarding, so a new service shows up in the dashboards on its own.
- Standardized delivery with Gitea Actions pipelines, PR validation, conventional commits, and semantic versioning, plus IaC in Terraform and Ansible.
Operational impact
$200→$3
monthly AWS cost
recurring spend, cut ~98%
100%
IaC-managed
provisioning via Terraform + Ansible
Zero-touch
monitoring onboarding
new services show up on their own
Inventory
Hover an item to see what I did with it.
Promotion pipeline
Charoen Pokphand Indonesia
System Administrator Intern
Mar 2025 – Feb 2026
Ancol, Indonesia
Kubernetes MigrationGitOpsAPI Gateway & IAMVirtualization Migration
Moved the internal apps off Docker Compose onto a production Kubernetes setup with GitOps delivery, sitting behind an API gateway with proper auth in front of it.
- Led the migration of 50+ internal apps from Docker Compose to production Kubernetes, implementing GitOps delivery workflows.
- Deployed APIMAN API Gateway secured via Keycloak IAM and LDAP, with Traefik as reverse proxy managing ingress and traffic routing.
- Built a React-based backup system on XenAPI, replacing XCP-ng Pro and saving $1,000+ in annual license fees.
- Migrated 10+ VMs from VMware to XCP-ng, including HA setup, recovery testing, and first-layer troubleshooting.
Operational impact
50+
apps migrated
Docker Compose to Kubernetes
10+
VMs migrated
VMware to XCP-ng with HA
$1,000+
license savings
XenAPI backup tooling
Inventory
Hover an item to see what I did with it.
Compose
50+ apps
GitOps
Kubernetes
Bina Nusantara University
Junior Laboratory Assistant
Aug 2023 – Feb 2025
Tangerang, Indonesia
Linux & NetworkingLab InfrastructureTechnical Instruction
Taught Linux, networking, and the systems basics the rest of my work builds on to a bit over a thousand students, and kept the lab machines running while I was at it.
- Delivered hands-on instruction to 1,200+ students across Linux Administration, Networking, Big Data, and Deep Learning.
- Designed troubleshooting-focused case studies and maintained lab VM environments (Docker, Ansible, Proxmox, Cisco).
- Completed infrastructure projects spanning network automation, full-stack development, and applied computing.
Operational impact
1,200+
students taught
across 4 technical tracks
4
course tracks
Linux · Net · Big Data · DL
Inventory
Hover an item to see what I did with it.
Featured project
Reproducible Libvirt Infrastructure for Kubernetes
A whole Kubernetes cluster built from code, hypervisor and all, so I can tear it down and get the exact same one back.
Reproducible Libvirt Infrastructure for Kubernetes Clusters
Going from a bare hypervisor to an HA Kubernetes control plane entirely from code. No clicking through UIs, no nodes I configured once and could never reproduce.
Problem
Every time I wanted a Kubernetes cluster to test something, I'd end up clicking through the hypervisor UI, wiring up networks and storage by hand, and bootstrapping nodes one at a time. It worked, but no two clusters were ever quite the same, and with a single control-plane node, one bad reboot could take the whole thing down. I wanted a cluster I could destroy and rebuild from code and get the exact same thing back.
Outcomes
- One command brings up the networking, storage, and a bootstrapped cluster, then tears it all down and rebuilds it the same way the next time.
- Kube-VIP gives the control plane a virtual IP with automatic failover, so losing a node doesn't take the API down with it.
- I wrote the whole thing up end to end, so next time I (or anyone reading along) can follow the same path instead of rediscovering it.
Lessons learned
- The cluster isn't really reproducible until the hypervisor layer is code too, not just Kubernetes on top of it.
- Control-plane HA is cheap to add up front with Kube-VIP and a pain to retrofit later.
- Writing the docs while building, instead of after, is the only way they end up matching what the code actually does.
Architecture
Provision → Configure → Orchestrate → Stabilize
TerraformProvision
Declares libvirt domains, networks & storage pools
AnsibleConfigure
Bootstraps OS, container runtime & kubeadm
Libvirt NodesCompute
Reproducible VMs from a single golden image
Kubernetes ClusterOrchestrate
kubeadm-joined control plane + workers
Kube-VIP HA Control PlaneStabilize
Virtual IP with load-balanced failover
Technologies
Provisioning
Terraformlibvirt providercloud-init
Configuration
Ansiblekubeadm
Platform
KubernetesKube-VIPcontainerd
Networking & Storage
Bridged networksStorage poolsVirtual IP
Reliability
Observability & Reliability
How I keep track of whether things are actually working: metrics, logs, and uptime, all in one place.
grafana · platform-overview
live
Uptime · 30dSLO 99.9%
99.98%
p99 latency-8ms
142ms
error rate0 firing
0.02%
request rate · req/s
100 req/sloki · live tail
- OKargocdSynced app/web → revision 9f2a1c
- INFOprometheusscrape_targets up=128 down=0
- INFOlokiingested 4.2k lines · 0 drops
- WARNalloynode-04 cpu 78% (threshold 80%)
- OKhealthcheckscron/backup ping received
healthchecks · 28doperational
0 alerts firing
alertmanager · all rules green
Visualize
Grafana
Unified dashboards correlating metrics, logs, and uptime.
Metrics
Prometheus
Time-series scraping with alerting rules on golden signals.
Logs
Loki
Label-indexed log aggregation queried alongside metrics.
Collect
Alloy
Telemetry pipelines shipping metrics and logs to the stack.
Uptime
Healthchecks.io
Dead-man's-switch monitoring for crons, backups, and jobs.
Reliability practices
- New services get picked up by monitoring automatically, with no manual dashboard wiring
- Alert on symptoms, not causes, so there are fewer pages and the ones that fire actually mean something
- Maintenance and provisioning are scripted, so they run the same way every time instead of from memory
Toolkit
Skills & technologies
The tools I actually reach for to provision, ship, monitor, and secure things.
Cloud & Infrastructure
Provisioning and codifying cloud and on-prem estates.
AWSEC2 · EKS · S3 · IAM · VPCTerraformAnsible
Containers & Orchestration
Running workloads reliably at scale.
KubernetesCKADockerKube-VIP
CI/CD & GitOps
Automated, auditable paths to production.
Gitea ActionsGitHub ActionsArgoCD
Observability
Metrics, logs, and uptime in one place.
GrafanaPrometheusLokiAlloyHealthchecks.io
Networking & Security
Ingress, identity, and access control.
KeycloakIAMLDAPNginxTraefik
Programming
Automation, tooling, and services.
GoPythonBashTypeScriptJava
Platforms
Linux (Admin)
XCP-ng
Proxmox
VMware
Git