Compliant High-Concurrency Remittance Infrastructure
Real-time remittance core with 99.88% uptime, 7,200 concurrent WebSocket connections, and zero-findings regulatory audit on CIS-hardened Debian and PostgreSQL.
Miguel Lozano - Infrastructure & FinOps Engineer
I build infrastructure
that cuts costs and stays yours.
Cloud infrastructure, FinOps, and open-source data platforms. I publish what I build. Everything is documented, measurable, and open to inspection.
Case Studies
View All →
Zero-Downtime Cloud Exit: AWS to Sovereign Bare Metal
Cut cloud OpEx by 50% ($90,000/year) for a cross-border FinTech via zero-downtime migration from AWS to NIST-hardened bare metal infrastructure with K3s.
FinOps and Sovereign AI: Optimizing API Costs and Ad Spend
Eliminate 100% of Google Maps API overages and reclaim 25% of ad budget with Valkey caching, Caddy WAF rate limiting, and AI agents with human-in-the-loop
Self-Hosted FinOps: Data Sovereignty and Capital Efficiency
Eliminate SaaS lock-in with 70% OpEx reduction and 99.8% uptime through a hardened, self-managed open-source stack with pull-based Portainer management.
Projects
View All →
Caddy WAF UI
Go 1.26.4 native sidecar UI for caddy-waf: per-site WAF mode toggle, CRS exclusions, IP rules, and snapshot rollback without modifying the base Caddyfile.
Developmi Hardened
Layered Ansible infrastructure baseline for Debian 12 and Ubuntu: NIST 800-53 compliance, Tailscale zero trust, and containerized runtime application bundles.
Multitenant ELT | Developmi
Multi-tenant marketing ELT pipeline with dlt and dbt: 10 ad and social connectors, isolated PostgreSQL schemas, Metabase dashboards, and dual network isolation.
Caddy and Coraza WAF Integration
Caddy v2.11.4 with Coraza WAF v2.6.1 and OWASP CRS v4.28: Cosign-signed images, Trivy scanning, SLSA provenance, and non-root execution for edge proxy security.
Latest Articles
Read Articles →Sep 21, 2026
Zero-Trust CI/CD: Securing Pipelines with Ephemeral OIDC
A DevSecOps guide to securing CI/CD pipelines: eliminate static IAM secrets by implementing ephemeral OpenID Connect tokens and strict claim validation.
Sep 18, 2026
etcd Fsync Latency: Preventing Kubernetes Cluster Freezes
An SRE deep dive into Raft consensus failure modes: how WAL fsync latency causes leader elections, lease expiration storms, and control plane paralysis.
Sep 16, 2026
S3 Object Storage Repatriation: Petabyte Cloud Economics
FinOps audit of AWS S3 at scale: API request fees, egress costs, EU Data Act leverage, and achieving 80% TCO reduction with sovereign MinIO or Ceph clusters.
Sep 14, 2026
eBPF Runtime Security: In-Kernel Tetragon vs Falco Alerting
DevSecOps comparison of eBPF kernel enforcement via Tetragon versus user-space alerting with Falco: preventing TOCTOU attacks and optimizing CPU overhead.
How I Engineer
Non-negotiable axioms that guide every decision.
Engineering is the Reduction of Uncertainty
The best engineering does not accumulate technology. It eliminates risks, removes unnecessary complexity, and returns control to the organization.
Boring Technology Wins
If a technology is not proven and you cannot read its logs under pressure, it does not enter production. Complexity is the fetish of the mediocre.
Capital Efficiency is an Engineering Metric
Every dollar wasted on unused cloud resources is a direct result of poor technical decisions. Financial inefficiency is a technical defect.
Have a specific infrastructure problem? Let's talk.