⚡ Efrain Rivas (@digdast)

I am a Senior Cloud Architect & Systems Engineer with 20+ years of progressive enterprise infrastructure experience designing, modernizing, and automating mission-critical platforms across Microsoft Azure, Kubernetes, Active Directory Domain Services, Linux, and multi-hypervisor environments.

• ☸️ 6-Node HA Kubernetes (K3s) & Cloudflared Mesh: Orchestrated a 6-node K3s cluster (36 vCPUs / 56GB RAM, 50+ pods across 12 namespaces) with dual etcd control planes, 4-node Cloudflare Tunnel DaemonSets, Traefik & NPM ingress, Authentik SSO, Checkmk, Reconya, Tomcat 10.1, PrintForge 3D, and 4-replica zero-downtime microservices (resume.ertechlab.com).
• 🧠 Sovereign Dual-GPU AI & RAG Infrastructure: Engineered a dedicated dual-GPU AI platform (NVIDIA RTX 5070 12GB + RTX 3060 12GB) running Ollama local LLMs, Open WebUI with CUDA 12.4 ChromaDB vector RAG embeddings & Faster-Whisper STT, and Paperclip AI multi-agent control plane orchestration.
• 🖥️ Proxmox VE & Hypervisor Fleet Optimization: 5-node HA Proxmox VE clustering with 12-core AVX2 host passthrough, LXC-to-K8s migrations, zero-downtime memory tuning (balloon contention eliminated), and enterprise backup automation.
• 🛡️ DNSSEC, DoH & Automated SSL/TLS Lifecycle: Tri-node synchronized Pi-hole v6, Unbound recursive DNSSEC, and Cloudflare DoH sidecar cluster replicated via Nebula-Sync with automated Cloudflare DNS-01 Let's Encrypt wildcard SSL renewals.
• 🌐 Global Active Directory Architecture: Designed, built, and maintained the enterprise Active Directory forest and multi-site replication topology across 7 global data centers and regional offices for BlueMatrix.
• 🎬 Creator of NovaFlix: Sovereign open-source media streaming platform & home theater engine (Plex/Jellyfin alternative) with 4K HDR Direct Play, HTTP 206 Range streaming, built-in remote access, and SyncPlay.
• 🛡️ Creator of AegisDNS: Recursive DNS resolver & RFC 8484 DNS-over-HTTPS (DoH) engine traversing ICANN root hints with zero telemetry, 227k+ threat sinkhole rules, and real-time cyber command center.
• ⚡ Creator of Pulsearr: Next-gen asynchronous Python media suite unifying Sonarr, Radarr, and Prowlarr into a unified ultra-fast daemon idling under 85MB RAM with SQLite in WAL mode.
• 🚀 Creator of Renamarr: Free, open-source media organizer and FileBot alternative with zero-config IMDb/TVMaze metadata suggestions, UNC network share support, remote CLI agent, and 1-click batch undo.
• 📈 Financial DevOps & Release Engineering: Directed release management across a 5-stage deployment pipeline (DEV ➔ QA ➔ UAT ➔ Staging ➔ PROD) with 99.999% SLA uptime for institutional financial trading systems at StreamingEdge (Tradition).
• 📦 Enterprise Endpoint Automation: Authored an open-source catalog of 58 production Intune & Graph automation scripts covering zero-touch Windows Autopilot, BitLocker encryption, driver hygiene, and proactive self-healing remediations.
• 🖥️ Virtualization Across 5 Stacks: Deep production administration across VMware vSphere/ESXi, Linux KVM, Citrix XenServer, XCP-NG, Microsoft Hyper-V, and Proxmox VE.

📥 Download Resume: 🌐 Live Site (resume.ertechlab.com) | 📄 Tech Style PDF | 📝 Microsoft Word (.docx) | 📖 Read Online (Markdown)

Cloud Platforms & Identity

Virtualization & Hypervisors

Scripting & DevOps Automation