The platform is the product. Everything else is code looking for a host.
Almost a decade moving critical systems to cloud-native environments. I treat infra as an internal product: SLOs, golden paths, measurable DX.
Today: regulated Kubernetes, end-to-end GitOps, multi-cloud (AWS · GCP · Azure), DevSecOps, AI-ready and FinOps. I build EnkiFlow and GetDecant — SaaS in production.
What I'm building right now.
Three SaaS in production, one open-source MCP server, two repos that hold the operation together, and one hardware design study. Seven active fronts.
EnkiFlow
AI-focused time tracker for builders: analyzes pages, captures context via voice or video, and syncs work across web, desktop, Chrome Extension, and VS Code.
Visit siteGetDecant
Premium SaaS for perfume retail: touch POS, milliliter-level inventory, per-presentation pricing, and multi-store operation with roles, transfers, and super-admin.
Visit siteConnver
WhatsApp CRM for businesses that sell over chat: shared inbox, per-client records and pipeline, and automated follow-up —unanswered quotes, shipping guides, order notices— with AI assistance. No mass campaigns.
Visit siteapple-mail-mcp
Unified MCP server for Apple Mail: millisecond on-disk search (FTS5 over a real 210k-message mailbox) plus complete AppleScript writes, bridged by a canonical Message-ID and gated by one safety layer with dry-run, undo, and explicit confirm. 31 MCP tools for your AI agent.
Visit siteInfrastructure
Local-first IaC repo with official Terraform, Cloudflare DNS, HCP Terraform, Vercel, Supabase, and secrets via 1Password — powering cobos.io, enkiflow, and getdecant.
View repoMesa de terrazo
A terrazzo table threaded with 874 optical fibers that both lights and senses through the same strand: infrared exits the tip, bounces off whatever you set down, and comes back. Full design study — optics, electronics, firmware, budget, and the bench test that decides whether it gets built. Written in Spanish.
Read the studycobos.io · portfolio
This very site: single-page portfolio with operator-console aesthetic, Next.js 16, React 19, Tailwind v4, and a dev terminal that mutates the DOM live.
View repoProof for the work I already ship.
Industry certifications mapped to the platform work I do daily — Kubernetes, multi-cloud, IaC. A roadmap, tracked in the open.
Certified Kubernetes Administrator
Production cluster operations — backs the regulated EKS work I already ship.
AWS Solutions Architect — Professional
Architect-level credential for the legacy → EKS migrations I lead.
Certified Kubernetes Security Specialist
Supply-chain, runtime, OPA/Falco — the DevSecOps angle, signed.
Professional Cloud Architect
Multi-cloud parity for the AWS+GCP work in flight.
AI-ready infra
GPU pools, vector DBs, LLM gateways with guardrails and observability.
Platform engineering
IDPs with golden paths, Backstage, signed service contracts.
FinOps + GreenOps
Per-team allocation, carbon-aware scheduling, aggressive autoscaling.
Zero-trust by default
mTLS, SPIFFE/SPIRE, OPA/Gatekeeper, supply-chain SLSA L3.
GitOps as standard
Promotion from Git as single source of truth: Argo CD, Flux, continuous sync and drift detection.
Policy as code
Rego, Cue, Kyverno — compliance is a commit.
How I work when I take on a project.
Diagnostic
Mapping the current system, real debt, and real constraints — not the ones in the wiki.
Target architecture
Platform design with SLOs, cost, security, and developer experience from day one.
Layered migration
Strangler fig pattern, end-to-end GitOps, observability before features.
Operation and improvement
Runbooks as code, chaos drills, monthly FinOps. The platform evolves — it doesn't freeze.
› open
connection.
Audits, target architectures, migrations, internal platforms, FinOps. If the problem is infra and it hurts, drop me a line.