01 · Person
About Yongky
I design, automate and optimise large-scale cloud infrastructure that stays secure, reliable and affordable.
Summary
I am a Senior Cloud & DevOps Engineer with 7+ years of designing, automating and optimising cloud infrastructure across AWS, Azure, GCP and Alibaba Cloud. I lead cloud migrations and reliability work, and build on Kubernetes, Terraform and GitOps pipelines.
Most of my work is for regulated financial workloads, where cost, resilience and security all have to hold at once. Rightsizing, automation and better observability have delivered $14k/month in savings, and I bring DevSecOps, SRE practice and ISO 27001 compliance into every change while mentoring the engineers around me.
yongky@mumeyong.dev · Download CV (PDF) · LinkedIn (opens in a new tab) · GitHub (opens in a new tab)
Experience
Senior Cloud Engineer
PT Sinarmas Multiartha Tbk · Oct 2022 – present
- Delivered $14,000/month in cloud cost savings through proactive optimisation with developer and engineering teams.
- Automated provisioning with Terraform and Ansible, cutting manual work by 80%, backed by clear documentation and knowledge sharing.
- Led multi-cloud Kubernetes cluster management, coordinating with application teams for reliable releases and consistent uptime.
- Built a unified monitoring stack (Prometheus, Grafana, ELK, Datadog) and improved incident response by running RCA sessions.
- Strengthened DevSecOps with IAM governance, vulnerability management, automated package scanning and CI/CD security gates.
- Mentored junior engineers through structured documentation and peer reviews.
Cloud Engineer
PT Bank Sinarmas Tbk · Jul 2021 – Oct 2022
- Architected and deployed high-availability, multi-AZ environments, explaining design trade-offs to stakeholders and guiding teams through the migration.
- Built self-healing GitLab CI pipelines — 40% fewer failed deployments while holding 99.99% service uptime.
- Cut cloud spend by $5,000/month through FinOps automation, rightsizing and usage monitoring.
- Migrated legacy applications to Docker and Kubernetes, improving scalability and deployment speed by 60%.
- Hardened security with zero-trust networking, IAM hardening, policy enforcement and Alibaba Cloud CDN & WAF Gen 3, improving response times by 30%.
System Engineer
S-Quantum Engine (SQE) · Oct 2020 – Jul 2021
- Designed serverless architectures on AWS Lambda and Alibaba Function Compute, reducing compute overhead and speeding up event processing.
- Built automated CI/CD pipelines, planned together with QA and development teams.
- Implemented ELK-based observability with anomaly detection, cutting troubleshooting time by 50%.
- Managed ACK and AKS clusters with GitOps workflows on ArgoCD and FluxCD.
- Improved ISO 27001 compliance through IAM governance, policy automation and audit-ready documentation.
Skills
| Cloud & infrastructure | AWS, Azure, GCP, Alibaba Cloud, OpenStack, cloud architecture, VPC, IAM, networking, high availability, scalability |
|---|---|
| Containers & orchestration | Kubernetes (ACK, EKS, GKE, AKS), Docker, Helm, ingress, service mesh (Istio / Linkerd) |
| Infrastructure as Code | Terraform, Pulumi, Ansible, CloudFormation, Packer |
| CI/CD & GitOps | GitLab CI/CD, GitHub Actions, Jenkins, ArgoCD, FluxCD, pipeline automation |
| Observability & monitoring | Prometheus, Grafana, ELK / EFK, Datadog, alerting and metrics optimisation |
| Security & compliance | DevSecOps, zero-trust, WAF, CDN, IAM & RBAC, secrets management (KMS / SSM), ISO 27001 |
| Programming & automation | Python, Bash, API integration, CLI tooling, automation frameworks |
| Databases & storage | Apsara RDS, MySQL, PostgreSQL, Nginx, object storage (OSS / S3) |
Certifications
- AWS Cloud SysOps
- AWS Cloud Practitioner
- GCP Cloud Engineer Associate
- CCNA Security
- CCNA Switching & Routing
- CCNA Switching & Routing 2
- CCNA Essentials
- MTCNA MikroTik
Education
Informatics Engineering · University of Amikom Yogyakarta
Jul 2016 – Oct 2019 · GPA 3.68 / 4.00
Principles
- Well-architected
- Every design weighs cost, resilience and operational complexity — explicitly.
- Everything as code
- Infrastructure, policy and delivery are declared, reviewed and reproducible.
- Secure by design
- Least privilege, isolation and secrets management are part of the first diagram.
- Measured
- If it matters it has metrics, logs, an owner — and a cost line.