Infrastructure-focused engineer with 2.5 years of experience managing Linux servers, PostgreSQL databases, and real-time IoT data pipelines in production. Designing and deploying production-grade cloud infrastructure on GCP using Terraform, HCP Terraform, and Cloud Build — with a focus on multi-environment isolation, least-privilege IAM, and zero static credentials.
📍 France → Open to Remote globally
📧 tomasnavarro.dev@gmail.com
Active development — Sep 2026–present
- GCP Organization with 4 isolated Folders and Projects (bootstrap / development / production / shared)
- HCP Terraform managing 11 workspaces across dev/prod/shared/mgmt via
for_each - Workload Identity Federation across all environments — no static service account keys
- Networking (VPC, subnets) implemented for dev and prod
Next: GKE cluster, Cloud Run API, Pub/Sub worker, Firestore
Feb 2026–present
- Two isolated VPCs (prod + management) with no public IPs
- Regional MIG with auto-healing across 3 zones + HTTP Load Balancer
- Cloud SQL with private IP only — IAP-only SSH, no bastion host
- Secret Manager with least-privilege service accounts per workload
- Dual backup strategy via Cloud Functions + Cloud Scheduler
- Immutable deployments from Packer golden images
- Cloud Build CI/CD with plan/apply separation and destructive change protection
Cloud & IaC
GCP Terraform HCP Terraform Workload Identity Federation
Cloud Identity Cloud Build Cloud SQL Cloud Functions
Cloud NAT IAP Secret Manager Packer Cloud Storage
Systems & Networking
Linux / Ubuntu VPC Firewalls Networking Bash
Data & Observability
PostgreSQL MongoDB Grafana
Automation & Dev
Python Flask REST APIs Git Docker
- HashiCorp Certified: Terraform Associate (004) — HashiCorp, Aug 2026 Verify
- Google Associate Cloud Engineer — Google Cloud, Jun 2026 · Verify
- EF SET English Certificate — C1 Advanced (70/100)
IoT Infrastructure Engineer — Efficact (Oct 2022 – May 2025)
Sole infrastructure engineer for a 3-server Linux environment
supporting ~400 industrial devices across 6-8 client deployments.
Administered production PostgreSQL databases, built Grafana
dashboards, developed a Python/Flask REST API for real-time
industrial KPIs, and owned day-to-day incident response.
Independent IT Consultant (May 2025 – Present)
Built a Python/MongoDB desktop application (PyQt5) that reduced
a ~20-hour manual segmentation process to under 20 minutes
across 16 recurring publishers.
