Skip to content
View tomasnavb's full-sized avatar

Block or report tomasnavb

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Content in all repositories owned by your account will be closed.
Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. Markdown is supported. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
tomasnavb/README.md

Tomás Navarro

Cloud Infrastructure Engineer

Infrastructure-focused engineer with 2.5 years of experience managing Linux servers, PostgreSQL databases, and real-time IoT data pipelines in production. Designing and deploying production-grade cloud infrastructure on GCP using Terraform, HCP Terraform, and Cloud Build — with a focus on multi-environment isolation, least-privilege IAM, and zero static credentials.

📍 France → Open to Remote globally
📧 tomasnavarro.dev@gmail.com


🏗️ Projects

Active development — Sep 2026–present

  • GCP Organization with 4 isolated Folders and Projects (bootstrap / development / production / shared)
  • HCP Terraform managing 11 workspaces across dev/prod/shared/mgmt via for_each
  • Workload Identity Federation across all environments — no static service account keys
  • Networking (VPC, subnets) implemented for dev and prod

Next: GKE cluster, Cloud Run API, Pub/Sub worker, Firestore


Feb 2026–present

  • Two isolated VPCs (prod + management) with no public IPs
  • Regional MIG with auto-healing across 3 zones + HTTP Load Balancer
  • Cloud SQL with private IP only — IAP-only SSH, no bastion host
  • Secret Manager with least-privilege service accounts per workload
  • Dual backup strategy via Cloud Functions + Cloud Scheduler
  • Immutable deployments from Packer golden images
  • Cloud Build CI/CD with plan/apply separation and destructive change protection

🛠️ Tech Stack

Cloud & IaC
GCP Terraform HCP Terraform Workload Identity Federation Cloud Identity Cloud Build Cloud SQL Cloud Functions Cloud NAT IAP Secret Manager Packer Cloud Storage

Systems & Networking
Linux / Ubuntu VPC Firewalls Networking Bash

Data & Observability
PostgreSQL MongoDB Grafana

Automation & Dev
Python Flask REST APIs Git Docker


🏅 Certifications

  • HashiCorp Certified: Terraform Associate (004) — HashiCorp, Aug 2026 Verify
  • Google Associate Cloud Engineer — Google Cloud, Jun 2026 · Verify
  • EF SET English Certificate — C1 Advanced (70/100)

💼 Experience

IoT Infrastructure Engineer — Efficact (Oct 2022 – May 2025)
Sole infrastructure engineer for a 3-server Linux environment supporting ~400 industrial devices across 6-8 client deployments. Administered production PostgreSQL databases, built Grafana dashboards, developed a Python/Flask REST API for real-time industrial KPIs, and owned day-to-day incident response.

Independent IT Consultant (May 2025 – Present)
Built a Python/MongoDB desktop application (PyQt5) that reduced a ~20-hour manual segmentation process to under 20 minutes across 16 recurring publishers.


🔗 Connect

LinkedIn Email

Pinned Loading

  1. excel-processing-pipeline-gke excel-processing-pipeline-gke Public

    Async Excel processing pipeline on GCP — Cloud Run, GKE, Pub/Sub, Firestore, and HCP Terraform with Workload Identity Federation. Built and documented in public, from architecture to implementation.

    HCL

  2. gcp-wordpress-blueprint gcp-wordpress-blueprint Public

    Production-grade WordPress infrastructure on GCP, fully provisioned with Terraform. Cloud Build CI/CD, private Cloud SQL, IAP access, and automated backups.

    HCL

  3. flow-programming-challenge flow-programming-challenge Public

    This is my personal project made to participate in the "Flow Programming Challenge" from Epic IO. In this document I'm going to explain how to deploy the project.

    Python