Lucas M.

Demand.io is an AI-powered eCommerce technology company that builds tools and platforms to help consumers shop smarter, find better deals, and make more informed purchases.

• Led the transition of TypeScript, Python, and PHP microservices to a GitOps CI/CD model on GKE using ArgoCD, enabling streamlined releases and ephemeral development environments.
• Architected secure MCP setups with least-privilege integrations for BigQuery and Claude Desktop, and deployed hardened GitHub Actions pipelines with self-hosted runners inside VPCs for sensitive workloads.
• Standardized Helm charts and migrated legacy infrastructure to Pulumi TypeScript stacks, integrating them with GitHub Actions for reproducible GKE deployments.
• Built CDC pipelines on Cloud Dataflow syncing CloudSQL into BigQuery, instrumented applications with OpenTelemetry and GCP Tracers, and configured monitoring and alerting to reduce incident response times.
• Created reusable GitHub Actions workflows for secrets management, IaC automation, and automated tests, and migrated frontends to Cloudflare Pages with custom caching and Zero Trust policies to improve performance and security.

• Improved observability and reliability across cloud-native platforms using Grafana, Faro, Loki, Tempo, OpenTelemetry, and an APM stack.
• Implemented synthetic monitoring and alerts for microservices, detecting browser failures, latency spikes, and third-party outages.
• Built Playwright E2E test coverage with nightly suites and maintained unit tests using Jest and Nock to safeguard deployments.
• Managed on-call and release processes, enabling safe production deliveries with Git Flow.
• Deployed monitoring dashboards on EKS with Helm and provisioned infrastructure using Terraform and GitHub Actions.
• Authored custom Helm charts, CI/CD bash scripts, and reusable pipelines for Node.js applications.
• Designed distributed, multi-source Helm charts integrated with ArgoCD for scalable and flexible delivery workflows.

• Orchestrated complex cloud architectures and streamlined deployment processes across GCP, AWS, and Cloudflare.
• Led the creation and implementation of reusable GitHub Actions workflows critical to operations.
• Developed tailored solutions for secret management, advanced deployments, and infrastructure orchestration.
• Built custom Terraform modules for Infrastructure as Code (IaC) to standardize and manage cloud infrastructure.
• Engineered a robust monitoring ecosystem with Datadog, including synthetics, APM, and RAM, to ensure application performance and reliability.
• Managed Cloud Functions, Cloud Run, and App Engine applications to maintain operational continuity.
• Configured network infrastructure, including VPC connectors and static IPs, enhancing network security and reliability.
• Created documentation and processes for automation to support team knowledge sharing and maintain DevOps standards.
• Deployed and managed a resilient GKE Autopilot cluster for optimal performance of containerized applications.
• Managed Cloudflare Workers and implemented WAF protections to secure applications against security threats.

• Led multiple teams in developing and implementing robust pipelines and workflows for several applications.
• Trained and guided new team members to ensure high-quality delivery.
• Maintained and managed applications on GCP Cloud for various teams.
• Implemented Kong API Gateway and Istio Service Mesh, creating custom plugins and modules in Go and Lua for specific requirements and service-to-service communication.
• Built tools for Secret Management and customized Git tag/release generation using Go.
• Managed Kubernetes deployments with Helm and Kustomize, including custom charts and subcharts.
• Applied GitOps practices with ArgoCD to manage multiple applications across environments.
• Implemented Infrastructure as Code (IaC) strategies and maintained Jenkins Shared Libraries and instances using GitOps and Helm.
• Set up and maintained application monitoring with Datadog and Prometheus in GKE.