Tomas Celaya

GCP · GKE · OpenTofu/Terraform · Kubernetes · ClickHouse · PostgreSQL · Superset · Tailscale

• Migrated a customer analytics data lake from DigitalOcean to GCP for cost savings and as the reference deployment for per-customer projects in a multi-tenant product: GKE Autopilot, object storage, a 3-replica ClickHouse cluster, CloudNativePG, and Superset, delivered as reusable OpenTofu modules.
• Cut over a ten-million-row ClickHouse history and its object store with checksum-verified parity against the source, behind a rollback path that left the original environment untouched.
• Replaced key-file secrets with Secret Manager through External Secrets and Workload Identity; exposed internal services over Tailscale with no public ingress.

Terraform · Kubernetes · Grafana · Jsonnet · GitHub Actions · AWS · Python

• Migrated Grafana dashboards and alerting for the platform's products to Jsonnet definitions-as-code, deployed through GitHub Actions to 7 environments; eliminated hand-edited dashboard drift.
• Built Terraform + Kubernetes + Spark reference deployments, from sales demos to production footprints of hundreds of vCPUs, that analytics customers used to complete an AWS region migration.
• Expanded canary-test coverage and run frequency for existing products, turning canary data into actionable signals for development teams.
• Owned every customer performance and functionality escalation, a few per quarter, end-to-end: root-caused with support and engineering, then drove fixes and feature prioritization into the roadmap.

Go · JavaScript · Ansible · Consul · Docker · systemd

• Built an agent for automatic metrics and error reporting from systemd services, with configurable false-positive suppression and proactive alerting suggestions.
• Designed and deployed an offline-first journal/calendar web app with optional sync to a cloud calendar.
• Deployed landing page and product catalog for a custom online shop. Additional contracts under NDA.

Go · Docker · Ansible · AWS · HashiCorp Vault · iSCSI

• Architected and implemented the RESTful provisioning API for a pool of software-defined block-storage clusters exposed over iSCSI, one per AZ across three AZs in each of four production regions, serving both VM disks and dedicated block devices.
• Led a small team that designed, built, and operated internal secrets management on HashiCorp Vault, then extended it into a public-facing certificate-management service with automatic ELB integration and API access for a dozen platform users.
• Produced architecture documentation and workflow diagrams used to align vendors, clients, and cross-language engineering teams; shipped fixes and enhancements to vendor clients and tooling to accelerate integration.

Python · Django · Java · PostgreSQL · BigQuery · Kubernetes · Helm · Terraform

• Designed and implemented the analytics pipeline on BigQuery with Stitch Data ETL, after prototyping a custom ETL path.
• Consolidated close to twenty microservices, each with its own database, into unified Helm charts, making full staging environments reproducible.
• Added Sentry error reporting to the core financial gateway (jPOS-based ISO 8583 processor).

Java · Maven · TestNG/JUnit · Triton · Manta · Docker · Jenkins · Terraform

• Led development of the java-manta client SDK: new features, mission-critical bug fixes, and associated libraries, owning the full lifecycle from feature requests through QA coordination and artifact publishing.
• Fixed correctness issues in streaming client-side encryption by making cipher-state updates transactional; the repaired path went on to carry petabytes of customer data across over a billion objects.
• Established unit-testing patterns and expanded coverage; designed and automated black-box/white-box performance testing of client stacks in Terraform-provisioned environments, from single-digit GB/s synthetic load to the hundreds of GB/s seen during customer migrations.

PHP/Laravel · Go · Scala · Python · Vitess · Kubernetes · Apache Spark

• Enabled a gradual two-week migration of a sharded database in the tens of terabytes across more than a dozen shards, by implementing dynamic database-connection routing across both primary codebases, with zero customer-facing downtime.
• Co-designed an internal event-publishing framework powering webhooks for external partner integrations.
• Maintained and enhanced the Spark-based ETL pipeline over tens of terabytes of order and transaction data behind the sales-forecasting feature; championed functional/integration testing for critical code paths.

• Release Engineer, Boku (2016) — weekly releases across dozens of clustered-Java microservices, shipping Jenkins artifacts to fixed production servers, plus release automation.
• Web Developer, Ynot Marketing (2014–2015) — Laravel/Angular lead-management platform.
• IT / web development, FSU Dept. of Biological Science (2013–2014).
• Web Developer intern, Federated Travel (2012).