Aldin Secic

• Designed and built the entire multi-tenant cloud infrastructure in Terraform — modular and scalable
— covering Kubernetes, networking with service endpoints, managed data stores, secrets, and
identity, with per-service CI/CD on GitHub Actions.
• Stood up Kubernetes with OS-segregated, autoscaled node pools and a static egress NAT gateway
for enterprise firewall allow-listing; Istio terminates TLS and validates JWTs at the edge before traffic
reaches a service.
• Self-hosted an Elastic observability stack (Elasticsearch StatefulSets with anti-affinity and
PodDisruptionBudgets, Kibana, Logstash alerting, APM) and instrumented every service with Serilog
and OpenTelemetry traces.

• Own a reusable GitLab CI/CD library spanning eight language ecosystems (Node, Java, .NET, Go,
Python, Android, iOS, generic): teams include a single entry point and get a complete build → test →
scan → deploy pipeline, eliminating per-team pipeline duplication across tens of teams.
• Wrote the .NET pipeline end-to-end — build, test, SonarQube and coverage integration, branch and
merge-request workflows — plus 14+ custom build images published to ECR, opening the platform to
a new ecosystem without touching existing language paths.
• Embedded DevSecOps by default: SCA and dependency scanning, secret detection (TruffleHog),
SAST (SonarQube), and container scanning run unconditionally in every workflow, so teams inherit
compliance rather than opting in.
• Architected and wrote the core of a multi-cloud Kubernetes provisioning library on Pulumi (AWS
EKS first, plus Azure / GCP / on-prem), cutting cluster provisioning from days to under 30 minutes
and becoming the standard path for 10+ production clusters, each with 17+ pre-configured add-ons
for security, observability, networking, and autoscaling.
• Co-own the AWS IaC composite that deploys hundreds of EKS microservices — Istio and Kong
service mesh, IRSA and scoped IAM roles, Vault and AWS Secrets Manager integration, multi-tenant
namespace isolation — alongside Lambda, ECS, RDS, S3 and CloudFront components.
• Built a CI/CD observability service (NestJS, PostgreSQL on RDS, deployed to EKS) ingesting pipeline
webhook events into Grafana dashboards — DORA metrics, test results, and security-scan trends
across hundreds of projects; integrated Dynatrace and PagerDuty for alerting and incident response.

Contract
• Remote
◦ Globally-distributed mobile-commerce platform on AWS
◦ Led a team of up to 8
• Built new and modified existing Terraform modules across an AWS infrastructure managed entirely
as code, spanning multiple accounts and regions.
• Redesigned the backend architecture to sustain 10, 000 requests/second with cross-regional support
and reduced cost — stateless services, a DynamoDB write / Elasticsearch read split, and
asynchronous CDC fan-out via Lambda and RabbitMQ — validated with K6 load testing in CI, and led
the distributed team executing it.
• Ran GitOps delivery with FluxCD across seven Kubernetes clusters on three control planes (AWS
EKS, a separate managed-cloud stack, on-prem Rancher RKE), with secrets encrypted in Git via SOPS
+ AWS KMS and image automation committing new tags back to Git.
• Managed identity as code across ~12 Auth0 tenants with a base-and-overlay model and reusable
matrix deploy pipelines; integrated automated code-quality checks and Elastic APM observability
into CI/CD across the service fleet.

Sarajevo (Hybrid)
• Bespoke software / digital transformation
• Led the PSD2 regulatory implementation for one of Austrias longest-standing banks in Angular
under a tight deadline, and built / maintained CI/CD pipelines that improved deployment consistency
and delivery speed.
• Delivered the admin & operations portal for the first fully online US insurance company in React.

(On-site)
• Fast-paced, varied client projects
• Built React and .NET / Angular applications across multiple client projects, set up an end-to-end
testing architecture, and contributed to digital-transformation initiatives.