Independently writes Ansible playbooks and roles for infrastructure lifecycle management including bare-metal provisioning, storage configuration, network setup, and monitoring stack deployment. Implements inventory management with group variables, host-specific overrides, and dynamic inventory sources for CMDB and cloud API integration. Structures infrastructure automation with modular roles, Jinja2 templates for config generation, and handlers for service orchestration across server fleets.

Implements infrastructure-level backup solutions using snapshot-based and agent-based approaches. Configures backup orchestration across multiple systems with centralized monitoring. Manages backup storage tiers (hot, warm, cold) and automates disaster recovery runbooks.

Applies capacity planning for on-premise and hybrid infrastructure: server procurement planning, storage growth forecasting, and network bandwidth analysis. Implements monitoring dashboards for capacity trend visualization and alerting.

Manages CDN infrastructure using Terraform or CloudFormation with multi-origin setups. Configures edge rules for geo-routing, header manipulation, and WAF integration. Monitors CDN performance metrics and troubleshoots latency issues.

Independently configures and manages Crossplane. Writes IaC for common tasks. Understands networking and security basics.

Applies DR design for on-premise and hybrid infrastructure: RAID configurations, SAN replication, warm/hot standby servers. Implements automated backup schedules and conducts quarterly DR testing with documented recovery procedures.

Independently configures and manages Envoy Proxy. Writes IaC for common tasks. Understands networking and security basics.

Implements GitOps for infrastructure: configures Atlantis/Spacelift for automated Terraform apply from PRs, organizes Terraform modules in Git with versioning, manages infrastructure secrets through Vault integration. Ensures plan review workflow before apply.

Creates Helm charts with environment-specific overlays and secret management integration. Configures Helm repositories and manages chart versioning for infrastructure components. Writes Helm tests and integrates chart validation into deployment pipelines.

Independently configures and manages Istio Service Mesh. Writes IaC for common tasks. Understands networking and security basics.

Manages Kubernetes clusters with custom resource definitions and operators. Configures persistent storage, resource quotas, and horizontal pod autoscaling for production workloads.

Independently develops Pulumi infrastructure programs with custom providers, dynamic resources, and import workflows. Implements networking, compute, and database provisioning with proper state management. Writes reusable component resources and integrates Pulumi into GitOps deployment pipelines.

Independently configures serverless functions with proper networking, security groups, and environment management. Implements CI/CD pipelines for function deployment. Understands execution model nuances: timeouts, memory, and retry policies.

Independently configures and manages VPN infrastructure: deploys site-to-site and client VPN solutions with high availability and failover. Implements network micro-segmentation using firewall zones, security groups, and service mesh integration. Writes IaC for automated VPN provisioning and certificate rotation.

Independently configures load balancing with Nginx/HAProxy/Envoy: upstream configurations, session persistence, rate limiting, and SSL/TLS termination. Implements IaC for load balancer provisioning and monitoring dashboards for traffic distribution.

Configures Kubernetes cluster security: RBAC with principle of least privilege, NetworkPolicy for traffic segmentation between namespaces, Pod Security Standards (restricted profile). Implements manifest scanning through kube-bench and kubesec, restricts API server access.

Configures cloud security through IaC: IAM policies with conditions and boundaries, SCPs for Organization, encryption at rest through KMS. Configures CloudTrail for auditing, AWS Config Rules for compliance checks, sets up VPC Flow Logs for network traffic monitoring.

Creates comprehensive infrastructure documentation as code: ADR (Architecture Decision Records) for infrastructure decisions, runbooks with automatic CI validation. Generates network diagrams from Terraform through inframap, maintains inventory documentation and configures automatic publishing through MkDocs.

Provisions and manages replicated database infrastructure: automated replica deployment, storage IOPS planning, and network latency optimization between regions. Configures monitoring for replication lag, disk usage, and failover readiness. Implements infrastructure-as-code for HA database clusters.

Configures infrastructure network security: multi-tier segmentation (DMZ, private, database subnets), VPN for secure remote access, TLS termination on load balancer. Configures IDS/IPS rules, sets up VPC Flow Logs for traffic analysis and automates firewall rules through Terraform.

Integrates container scanning into CI/CD pipeline: configuring Trivy/Grype as gate in GitHub Actions, automatic image scanning on registry push. Configures admission policies by severity level, sets up CVE whitelists and monitors for new vulnerabilities.