Josh Deeden

Platform & Full-Stack Engineer

Camas, WA, USA | 626-558-1136 | work@deeden.org | GitHub | LinkedIn

Summary

Platform and full-stack engineer, comfortable from React and TypeScript product code down to the AWS, Kubernetes, and Terraform that runs it. Eight years in cloud infrastructure, CI/CD, and self-service developer platforms for both product teams and AI agents, on two decades of software. AWS, Kubernetes, and Terraform certified.

Professional Experience

Experian Health

Senior DevOps Engineer (Contract) | April 2026 – Present

• Operate and extend a large, multi-account Terragrunt estate for a regulated healthcare data platform, provisioning AWS infrastructure and promoting changes through a four-stage dev → test → UAT → prod path.
• Extend the shared application Helm chart with new capabilities, including KEDA event-driven autoscaling, for teams on the platform’s Kubernetes footprint.
• Ship every change through a PR-reviewed validation pipeline (Bamboo CI + Atlantis plan/apply) that gates Terragrunt plans before they reach any environment.

Clubhouse

Senior Infrastructure Engineer | April 2025 – December 2025

• Optimized the GitHub Actions CI pipeline through caching, parallelization, and dependency management, cutting execution times by 50%.
• Built an enterprise service-ownership system with type-safe validation and automated drift detection, reaching 100% coverage across hundreds of production services.
• Built automated SMS fraud detection that flagged and blocked abusive traffic, saving thousands of dollars per day.
• Cut cloud spend across the estate through observability tuning, cost-attribution tagging, and infrastructure rightsizing.

Centric Software

Senior Cloud Engineer - Innovation Team | March 2024 – April 2025

• Architected enterprise cloud infrastructure with Terraform and Terragrunt across AWS and Azure, reducing deployment times by ~60%.
• Engineered and operated production Kubernetes across AWS (EKS) and Azure (AKS) with Helm, ArgoCD, and CI/CD, backed by full observability (Prometheus, Grafana, Loki, Tempo).
• Pioneered a multi-cloud approach that let the sales team offer flexible client solutions, and mentored developer teams on DevOps practices and CI/CD.

Prismatic

Senior Infrastructure Engineer | March 2023 – December 2023

• Architected customizable Docker containers for CI jobs and production services, improving deployment efficiency 50% and standardizing dev environments.
• Built a Dockerized Go application to streamline monorepo pipeline execution, cutting build times from 20+ minutes to under 5.

Ontra

Lead Infrastructure Engineer | September 2019 – November 2022

• Stood up observability from scratch with Datadog—metrics, distributed tracing, and structured logs, plus the dashboards and alerting the team relied on to catch and diagnose production issues.
• Built a system to provision ephemeral, production-like test environments for every pull request, accelerating feedback loops.
• Delivered a self-hosted GitLab CI runner platform on AWS EKS, scaling build capacity on demand while cutting CI compute costs, and cut new-hire onboarding from 2 days to under 2 hours with an Ansible-automated local setup.

Wurl

Senior Infrastructure Engineer | April 2018 – August 2019

• Architected a serverless video-ingestion pipeline (Lambda, S3, SFTP) that reliably onboarded partner content into the streaming catalog at scale.
• Built a high-performance Go tool for HTTP log processing that turned high-volume access logs into viewer-behavior insights.

Earlier Roles

Software Engineer → Senior Full-Stack Engineer

• Built and shipped software for PolicyGenius, Jibe, OkCupid Labs, VMware, and Microsoft, among others, across Ruby on Rails, Node.js, and Java.

Projects

Reference Platform

Internal Developer & AI-Agent Platform | 2025 – Present

• Vercel-like “push to ship” on governed AWS, for product teams and AI agents alike — 97 Terragrunt units, five AWS accounts, ~90 architecture decision records; governance enforced at admission rather than review.
• One declarative XEnvironment claim provisions a team’s whole footprint (namespace, RBAC, quotas, network policy, IAM, ECR) via Crossplane, with Backstage and Keycloak SSO as the self-service front door.
• AI agents as a first-class, governed workload class — an XAgent composite deploys a live agent with its own identity and observability, including an on-call triage copilot that turns logs, metrics, and deploys into root-cause hypotheses.
• Just-in-time privilege and a signed supply chain — a Kubebuilder operator mints time-boxed elevation behind a passkey step-up; cosign/SBOM/SLSA-signed images verified at admission by Kyverno, then auto-promoted through health-gated environments.
• Self-hosted observability and defense-in-depth — full LGTM stack (Mimir, Loki, Tempo, Grafana) with OpenTelemetry and SLOs, zero static credentials, Tailscale-only private EKS, and Falco.

Dubby

Self-Hosted Media Streaming Platform (Server + Multi-Platform Apps) | 2025 – Present

• Commercial Plex/Jellyfin alternative, built solo as an Nx monorepo — 8 apps, 50+ shared packages, a Hono/tRPC API, background workers, and a license server.
• Native Android TV & tvOS apps in React Native with a custom D-pad spatial-navigation engine, plus a typed tRPC + TanStack Query client shared across web, TV, and mobile.
• A Rust playback engine and adaptive HLS transcoding — a napi-rs addon plans each session by codec, HDR, device, and network; real-time FFmpeg pipelines transcode across hardware encoders with HDR-to-SDR tonemapping. Commercial licensing with Stripe billing.

Technical Skills

• Languages: TypeScript, JavaScript, Python, Ruby, Go, Bash, SQL, HCL
• Cloud & IaC: AWS, Azure, Terraform, OpenTofu, Terragrunt, CloudFormation, AWS CDK, Pulumi, Ansible
• Platform & Orchestration: Kubernetes (EKS, AKS), Helm, Kustomize, Crossplane, ArgoCD, Operators/CRDs (Kubebuilder), Karpenter, Argo Rollouts, Docker, ECS/Fargate
• CI/CD & GitOps: GitHub Actions, GitLab CI/CD, CircleCI, Atlantis, Backstage, GitOps
• Observability: Prometheus, Grafana, Mimir, Loki, Tempo, OpenTelemetry, Datadog, CloudWatch, PagerDuty
• Security & Networking: IAM, EKS Pod Identity, OIDC, Keycloak (SSO), Kyverno, cosign/SLSA, SBOM, Falco, SOPS, Tailscale, VPC, Transit Gateway, WAF, KMS
• Data & Messaging: PostgreSQL, MySQL, Aurora, DynamoDB, Redis/Valkey, Snowflake, Elasticsearch, SQS/SNS, Kafka, RabbitMQ, Celery, BullMQ
• Web: React, Next.js, Remix, React Native (Expo), NestJS, Hono, tRPC, Django, Ruby on Rails

Certifications

Certified Kubernetes Administrator (CKA) · Certified Kubernetes Application Developer (CKAD) · HashiCorp Terraform Associate · AWS Solutions Architect – Associate · AWS Cloud Practitioner