Andrew Kim

Designed and operated a multi-account AWS cloud foundation for 50+ engineering teams and AWS accounts across EU and UK environments, using AWS Organizations, Control Tower, Account Factory (Terraform), IAM Identity Center, centralized logging, and automated guardrails. Built self-service account and environment provisioning with Terraform, CloudFormation, AWS Step Functions, Lambda, and Python, reducing setup time from 1–2 days to under 4 hours. Implemented regional governance with AWS Control Tower, Service Control Policies, governed regions, and region deny controls to prevent out-of-region workloads and data. Developed reusable platform modules for networking (VPCs), IAM roles, KMS keys, EKS environments, databases, security baselines, centralized logging, and connectivity to standardize paved roads for application teams. Automated account baseline validation and configuration reconciliation to detect configuration drift and ensure inherited security, networking, logging, and regi

Built and operated infrastructure enabling Cloudflare’s EU regional services and data localization capabilities, allowing customer traffic to benefit from the global network while restricting sensitive layer-7 processing to approved European locations. Automated regional edge and control-plane configuration using Terraform, Cloudflare APIs, Python, and Go with version-controlled workflows including validation, peer review, staged rollouts, and rollback procedures. Supported routing architectures using Anycast, DNS, TLS, CDN, WAF, DDoS protection, and load balancing, separating global traffic protection from region-specific application-layer processing. Developed automated validation for regional configuration, certificate state, DNS records, routing policies, and infrastructure drift to reduce the risk of incorrect changes propagating to production edge locations. Built dashboards and alerts with Prometheus/Grafana and centralized logging to monitor regional traffic processing, TLS f

Built and standardized CI/CD infrastructure supporting 25+ engineering teams across 100+ repositories, creating reusable build/test/artifact/deployment workflows for Ruby, Node.js, Python, and Java services. Developed shared Jenkins pipeline libraries and Docker-based build environments to reduce duplicated CI configuration while preserving language-specific testing and packaging requirements. Extended deployment automation around Hubot and internal services with release queues, environment validation, artifact promotion, deployment status tracking, rollback workflows, and engineering notifications. Built GitHub webhook and API integrations for pull requests, commit statuses, releases, approvals, and deployment events to provide end-to-end visibility into software delivery. Established repository and release standards using branch protection, required checks, CODEOWNERS, release tags, deployment approvals, and reusable templates to improve consistency across engineering teams. Implemen