alex@whitealbu:~$ whoami

Alex Albu

> platform engineer at capital on tap

I design and run internal platforms on Kubernetes that let product teams ship without thinking about infrastructure. That means Go operators and custom resources, GitOps with Flux, event-driven autoscaling, and the Terraform, identity and Cloudflare edge around them. Five years across fintech, e-commerce and AWS consultancy. Based in London.

   __ _   __ _
  / _` | / _` |
 | (_| || (_| |
  \__,_| \__,_|

alex@whitealbu

role: platform engineer
employer: capital on tap
location: london, uk
uptime: 5 years (since 2021)
clusters: aks, eks, k3s
clouds: aws, azure, cloudflare
languages: go, rust, ruby
shell: zsh

alex@whitealbu:~$ cat experience.log

2026-06 → now

capital-on-tap Platform Engineer

London

# fintech · business credit cards for small businesses in the UK and US · Azure, AKS, Flux

Built a governed AI access layer that let production workloads and apps built by non-engineering teams use Azure AI Foundry and Anthropic models safely, with all traffic routed through a central agent gateway for authentication, policy enforcement and usage tracking.
Lead the design and delivery of several CRDs in the platform's Go operator (Kubebuilder, CEL validation), improving the developer experience around self-service infrastructure.
Introduced event-driven autoscaling (KEDA) into the k8s platform's CRDs, giving product teams queue-driven and scale-to-zero scaling out of the box and cutting compute costs by an estimated 30 to 40%.

--stackaksfluxgorustterraformdatadogcloudflaregrafanaprometheus

2024-02 → 2026-06

bloom-and-wild Senior Platform Engineer

London

senior platform engineer 2025-10 → 2026-06 · platform engineer 2024-02 → 2025-10

# direct-to-consumer flowers and gifts · 2M+ requests a day · 8 countries · AWS, Cloudflare

Owned the platform for a high-traffic e-commerce business: infrastructure as code, CI/CD and deployments, observability, DNS and the Cloudflare edge, as the platform partner to the backend and data teams.
Introduced load testing for peak trading which greatly improved overall scaling performance. Wrote it up for the engineering blog.
Led the move of image resizing from a self-hosted Lambda to Cloudflare Image Transformations across web, iOS and Android, with a Cloudflare Worker redirecting legacy URLs with 0 downtime.
Built bw-cli, an open source k9s-style terminal UI for ECS.

--stackawsecsterraformcloudflaredatadogk6ruby on railsgo

2022-09 → 2024-02

allcloud DevOps Engineer

Bucharest

# AWS Premier Consulting Partner

Consultant DevOps engineer across six enterprise AWS engagements, delivering infrastructure as code, CI/CD pipelines and operational support for each client's own architecture.
Earned the AWS Solutions Architect and SysOps Administrator Associate certifications.

2021-09 → 2022-08

ibm DevOps Engineer

Bucharest

devops engineer 2021-12 → 2022-08 · cloud engineer intern 2021-09 → 2021-11

DevOps engineer on a strategic consultancy project, delivering cloud infrastructure, observability and developer tooling. Joined as a cloud engineering intern working with Linux, Ansible, Jenkins, Docker and OpenShift.

alex@whitealbu:~$ ls -l ~/projects

# drwxr-xr-x public repo · drwx------ private, described here

drwx------yamlSep 2026

homelab/

A GitOps-managed k3s platform on mixed hardware that runs a public e-commerce shop alongside home services. Everything in the cluster is declared in Git and reconciled by Flux.

2 nodesamd64 + arm6424 flux kustomizations45 pods0 open ports

Zero-trust ingress. Cloudflare Tunnel into Istio with the Gateway API, Cloudflare Access with Google sign-in in front of every admin page, and Grafana signing users in from the Access token.
Recoverable data. Postgres on CloudNativePG with continuous WAL archiving and nightly base backups to Cloudflare R2: 30 days of point-in-time recovery, with backup freshness on a Grafana dashboard.
Supply chain. CI builds multi-arch images and an OCI artifact of each app's manifests; Flux deploys them pinned by digest. Secrets live in Git encrypted with SOPS and age.
Observability. Prometheus and Grafana with cluster, application and business dashboards, generated from code.
Blast radius. Stateful workloads are pinned to the SSD node, and the cluster's DNS stays off the home ad blocker, so a blocklist or a Pi-hole outage can't reach the shop.
Home services. Home Assistant using the Pi's Bluetooth, Jellyfin with Intel Quick Sync transcoding, a download stack behind a VPN, and Pi-hole for the house.

visitor --> cloudflare edge --> access (google sign-in) --> tunnel --> istio gateway --> app

git push -> github -> flux -> k3s -+- node1  x86 laptop, control plane, postgres, media
                                   +- pi1    raspberry pi 5, home assistant, pi-hole

--stackk3sfluxistiogateway apicloudflaresopscloudnativepgprometheus

drwx------go, tsSep 2026

iguanas-jewellery/

An online shop for a small jewellery business: a Go API, a storefront and an admin app, with Postgres, Valkey, Stripe payments and Google sign-in. Every push publishes a multi-arch image and an OCI artifact of the manifests, and Flux deploys them to the homelab pinned by digest.

--stackgotypescriptpostgresvalkeystripefluxoci

drwxr-xr-xgoOct 2024

bw-cli/

A k9s-style terminal UI for AWS ECS. Browse services and task counts, shell into containers with ECS Exec, restart a service or change its desired count, all from the keyboard.

$ brew tap alexalbu001/homebrew-bw-cli

--stackgotviewaws ecshomebrew

drwxr-xr-xgoJun 2025

greenops/

A solo hackathon project: a CLI that scans AWS resources and suggests changes that cut both carbon footprint and cost, with Amazon Bedrock writing the recommendations.

--stackgoawsbedrockterraform

alex@whitealbu:~$ cat ~/open-source/contributions.log

# upstream contributions to open source projects, reviewed and merged by each project's maintainers

● merged2026-09-06

TeraSky-OSS/backstage-plugins #206

# TeraSky's open source plugins for Backstage, the developer portal

● merged2026-09-04

tryretool/terraform-provider-retool #68

# Retool's official Terraform provider

● merged2026-01-30

github-aws-runners/terraform-aws-github-runner #4948

# the widely used Terraform module for self-hosted GitHub Actions runners on AWS

○ in review2026-09

agentgateway/agentgateway #3665

# an open source proxy for AI agents and MCP servers

alex@whitealbu:~$ ls ~/writing

-rw-r--r-- 7 min read 2024-12-03 code & wild on medium

Load Testing at Bloom & Wild: Preparing for Peak Success

How we swapped educated guesses about ECS capacity for k6 load tests built from past peak traffic, and what they showed about our autoscaling ahead of Valentine's Day, Mother's Day and Christmas.

--tagsawsk6observabilitycapacity planning

-rw-r--r-- 6 min read 2024-06-14 code & wild on medium

How Addressing Security Findings Caused a Production Incident at B&W

--tagsawssecurity hubdmsnetworking

alex@whitealbu:~$ tree ~/skills

├── kubernetes: aks · eks · k3s · operators in go (kubebuilder) · keda · istio · gateway api
├── gitops, ci/cd: flux · azure devops · github actions
├── cloud: azure · aws · cloudflare
├── developer platform: backstage · retool · mirrord
├── infra as code: terraform
├── observability: datadog · prometheus · grafana
└── languages: go · rust · ruby · bash

alex@whitealbu:~$ cat certifications.txt education.txt

certifications.txt

AWS Certified Solutions Architect, Associate · 2022
AWS Certified SysOps Administrator, Associate · 2023
AWS Certified AI Practitioner · 2025

education.txt

BSc Informatics, 2019 → 2022
Bucharest University of Economic Studies (ASE), Faculty of Cybernetics, Statistics and Computer Science
Thesis: a DevOps solution for autoscaling repo ↗

alex@whitealbu:~$ contact

email: [email protected]
github: github.com/alexalbu001
linkedin: linkedin.com/in/alex-albu001
medium: medium.com/@alexalbu001

alex@whitealbu:~$ help

experience projects open-source writing skills education contact theme [amber|green|ice] ls uptime clear sudo hire-me