Feri Ahmad Nurdin

Implemented reusable CI/CD workflows using GitHub Actions to standardize build, test, and deployment pipelines across multiple projects. This reduced duplication, improved maintainability, and streamlined the development lifecycle.

Designed and implemented a CI/CD pipeline using GitOps principles with GitLab and ArgoCD. The pipeline integrates Harbor as a container registry, Trivy for vulnerability scanning, and Kubernetes for automated deployments, ensuring secure, consistent, and scalable application delivery. The release flow consists of two phases: for staging, code successfully built and tested in GitLab Actions is automatically synced to ArgoCD and deployed to the staging environment; for production, a Merge Request is created and reviewed by DevOps or a Lead before being promoted to the live environment.

Implemented Infrastructure as Code (IaC) by provisioning VM instances in Google Cloud Platform (GCP) using Terraform, integrated with Atlantis for automated plan and apply workflows. This setup enabled consistent, auditable, and collaborative infrastructure management through GitOps practices.

Deployed a Kubernetes cluster using Ansible and Kubeadm to automate the provisioning and configuration process. This project demonstrated Infrastructure as Code practices, enabling consistent cluster setup, reduced manual intervention, and improved reliability for multi-node environments.

Automated MongoDB provisioning and management using Ansible, covering installation, backup, restore, and security hardening. This project demonstrated Infrastructure as Code practices to ensure consistent deployments, reliable data recovery, and improved database security.

Implemented centralized user access control for Kubernetes clusters by integrating Rancher with Keycloak as an Identity Provider. This project enabled Role-Based Access Control (RBAC), Single Sign-On (SSO), and secure authentication management across multiple clusters. The focus was on providing developers with direct access to product-specific clusters, making it easier to perform debugging and execute commands when needed.

Developed a monitoring and alerting system using Prometheus and Grafana to improve application observability. The setup enabled real-time metrics collection, visualization, and proactive alerting, reducing incident response time and improving system reliability.

Reduced cloud infrastructure costs by up to 80% through the integration of Cloudflare CDN with GCP. This approach not only optimized expenses but also enhanced application speed, availability, and security. The project utilized Firebase for hosting, Amazon S3 for storage, and Cloudflare for CDN and caching.

Developed an automation workflow with n8n to schedule and trigger maintenance mode in Sapawarga Mobile Apps by updating Firebase values. This eliminated manual late-night interventions by QA/PM, reduced overtime, and streamlined the process of activating maintenance pages during incidents or planned events.

This project demonstrates the integration of Terraform with ArgoCD to automate Kubernetes deployments through GitOps practices. It highlights my ability to build scalable, reliable, and consistent infrastructure using Infrastructure as Code principles.