Andres is available for hire
Hire AndresAndres Montalban
Verified Expert in Engineering
Amazon Web Services (AWS) Developer
Montevideo, Montevideo Department, Uruguay
Toptal member since August 29, 2014
Bio
Andres is an experienced Site Reliability Engineer specializing in designing and scaling cloud infrastructure across AWS, GCP, and Azure. Certified in Kubernetes (CKA, CKAD, and CKS), he excels in Infrastructure as Code, Linux, and networking. Andres' contributions to open-source projects like Terraform and SaltStack reflect his commitment to reliability, automation, and efficiency across AI, Media, and SaaS industries.
Portfolio
Overjet
Google Cloud Platform (GCP), Google Kubernetes Engine (GKE), Terraform...
Around
Amazon Web Services (AWS), Amazon EKS, Amazon S3 (AWS S3), AWS Lambda...
ReadySet Technology, Inc.
Amazon Web Services (AWS), Kubernetes, Terraform, DevOps, Helm, Debian, Git...
Experience
- Amazon Web Services (AWS) - 13 years
- Linux - 12 years
- SaltStack - 6 years
- Terraform - 5 years
- MySQL - 5 years
- Packer - 4 years
- Kubernetes - 3 years
- DevOps - 3 years
Preferred Environment
Amazon Web Services (AWS), Infrastructure as Code (IaC), Python, Packer, GitLab, Kubernetes, Docker Compose, Docker, Terraform, MySQL
The most amazing...
...thing I've done is lead a team of engineers supporting a SaaS platform used by the biggest companies in the world, including three of the five biggest in tech.
Work Experience
Staff DevOps Engineer
2025 - 2025
Overjet
- Refactored a Windows-based image ingestion pipeline to run on Linux (Wine), cutting $200,000 a year in licensing costs and improving startup time by 90%.
- Reduced cloud spend through spot node adoption and Kubernetes VPA tuning, right-sizing over-provisioned workloads while maintaining performance.
- Tuned CloudSQL (PostgreSQL) performance with pg_repack, query optimization, and index audits, reclaiming terabytes of storage and boosting query efficiency.
- Designed and deployed just-in-time (JIT) access with GCP Privileged Access Manager (PAM), reinforcing HIPAA and SOC 2 compliance.
Technologies: Google Cloud Platform (GCP), Google Kubernetes Engine (GKE), Terraform, GitHub Actions, Google Cloud Functions, Google Pub/Sub, Grafana, Prometheus
Senior Site Reliability Engineer
2021 - 2025
Around
- Deployed an AWS organization migrating production workload to a specific account. Configured AWS authentication using Google Workspace as IDP using SAML.
- Migrated the IaC codebase to a state-of-the-art configuration, handling multiple providers, including AWS, Google Workspace, GCP, PagerDuty, and others. This was achieved using Terraform and Terragrunt along with Atlantis.
- Migrated multiple geographically distributed Kubernetes clusters without downtime.
- Deployed EKS clusters in all available AWS regions, enabling the best latency for our videoconferencing product.
- Upgraded the PostgreSQL version of the main database without downtime and improved the database structure, indexes, and queries, enhancing overall performance during peak hours.
Technologies: Amazon Web Services (AWS), Amazon EKS, Amazon S3 (AWS S3), AWS Lambda, AWS Global Accelerator, Terraform, Terragrunt, GitHub, Kubernetes, Tailscale, PostgreSQL, Helm, Argo CD, Cloud, CI/CD Pipelines, Site Reliability Engineering (SRE), Ubuntu, Grafana, Prometheus, Video Streaming, AWS Cloud Architecture
DevOps Engineer
2021 - 2021
ReadySet Technology, Inc.
- Built pipelines to generate AWS AMIs with Packer used by customers to deploy the infrastructure offered by the company.
- Created the Terraform code to fully deploy the solution in AWS, including VPC, RDS, Load Balancers, and EC2 instances.
- Implemented pipelines to run quality checks on Terraform code—including deployments and modules—to ensure the code followed industry standards. Used such tools as pre-commit hooks, checkov, tflint, tfsec, and terraform-docs.
Technologies: Amazon Web Services (AWS), Kubernetes, Terraform, DevOps, Helm, Debian, Git, Amazon EC2, Bash Script, MacOS, Cloud, CI/CD Pipelines, Ubuntu, AWS Cloud Architecture
DevOps Engineer
2020 - 2021
Syllable Corporation
- Worked with engineering to prepare the cloud infrastructure for HIPAA compliancy.
- Reverse-engineered the running infrastructure and codified the whole stack using Terraform and Terragrunt.
- Created an Infrastructure as Code CI/CD pipeline that allowed the release of infrastructural changes to the corresponding environments using CircleCI and Terragrunt.
- Migrated the AWS account to an AWS organization with multiple accounts to split the production workload from other workloads. Configured AWS user authentication with Google Workspace as IdP.
Technologies: DevOps, Amazon Web Services (AWS), AWS DevOps, Terraform, Kubernetes, AWS CloudFormation, Twilio, Amazon Elastic Container Service (ECS), ECS, PostgreSQL, Cloud, CI/CD Pipelines, Ubuntu, AWS Cloud Architecture
Senior DevOps Engineer
2020 - 2021
Labelbox
- Migrated the main production database (3TB) from MySQL 5.7 to MySQL 8.0 without downtime.
- Created a Terraform module to deploy a production-grade Citus cluster in Google Cloud Platform. Other tools like Packer, Ansible, and Python were used in this project. I have also contributed to the pg_auto_failover project.
- Initiated a self-service infrastructure project for our engineering team, leveraging env0, Terraform, Kubernetes, and Helm charts to allow quick development environments in the cloud.
- Automated the provisioning of on-premise deployments using replicated tooling. The technologies involved were KOTS, kURL, Terraform, Bash scripting, and Packer.
Technologies: Ansible, Google Cloud Platform (GCP), Google Kubernetes Engine (GKE), MySQL, Helm, PostgreSQL, RabbitMQ, Datadog, Elasticsearch, Amazon Web Services (AWS), DevOps, DevSecOps, SAML, Identity & Access Management (IAM), SOC 2, HIPAA Compliance, Terraform, Debian, Git, Docker, Bash Script, Citus, MacOS, Cloud, Ubuntu, Prometheus
Lead DevOps Engineer
2014 - 2020
Perceptyx
- Led a team of nine senior DevOps engineers distributed across four different continents.
- Led and implemented multiple pipelines to improve the quality and robustness of our platform by using tools like Packer, Terraform, GitLab CI, and Kitchen CI.
- Automated package building and testing for FreeBSD servers, SaltStack configuration testing, development environments, AWS AMI creation, and the Perl environment build (runtime and modules).
- Actively participated in multiple SOC 2, ISO 27001, and Microsoft SSPA security certifications, ensuring infrastructure compliance.
Technologies: Amazon Web Services (AWS), Python, GitLab CI/CD, Docker Compose, Packer, Terraform, Docker, Kubernetes, Linux, MySQL, Redis, FreeBSD, SaltStack, DevOps, DevSecOps, SAML, Identity & Access Management (IAM), SOC 2, Jenkins, Debian, Git, Amazon EC2, Unix, Cassandra, Bash Script, Vagrant, MacOS, ISO 27001, Cloud, Ubuntu, Prometheus, AWS Cloud Architecture
CTO
2012 - 2018
Global IT Solutions S.R.L
- Provided support to customers using cloud computing technologies.
- Coached new employees and partners in Linux, networking, and virtualization.
- Supported sales projects generating new services and products based on a mix of technologies.
- Managed projects and deadlines for a team of local and remote personnel.
Technologies: Amazon Web Services (AWS), Networking, Cloud Computing, Virtualization, Bash, Amazon EC2, FreeBSD, Puppet, SaltStack, HAProxy, NGINX, Apache, Linux, Identity & Access Management (IAM), Azure, Red Hat Linux, VMware ESXi, Debian, Git, Terraform, Bash Script, Travis CI, Cloud
DevOps Engineer PHP
2015 - 2015
Business Services
- Migrated the complete infrastructure from private VPSs to AWS.
- Codified the whole infrastructure with Terraform, following best practices.
- Improved database queries and data structure, generating a 300% performance improvement on the same instance (RDS).
Technologies: PHP, DevOps, Debian Linux, MySQL, Infrastructure Monitoring, TYPO3, Beanstalk, Chef, Vagrant, Puppet.js, Elasticsearch, Debian, Git, Amazon Web Services (AWS), Amazon EC2, Terraform, Bash Script
Senior Sysadmin
2011 - 2013
inConcert
- Supervised seven POP data centers in the USA and Spain, providing mission-critical VoIP services to customers worldwide.
- Installed, maintained, and supported more than fifty servers with Linux and Windows platforms.
- Configured and managed intra-carrier VoIP cross-connections to handle thousands of calls per day.
- Developed an automated installation script for A2Billing that allowed other company coworkers to install the solution for our customers worldwide.
- Acted as the point of contact to co-location and hosting providers, including SoftLayer, NAP of the Americas, PhoenixNAP, and others. managed purchases, maintenance plans, and internal company support.
- Helped design and deploy the company's private cloud infrastructure.
Technologies: Cloud Computing, Core Location, Software-defined Data Centers (SDDC), Linux, Red Hat Linux, Debian, Git, CentOS, Bash Script
Senior System Administrator
2010 - 2012
Ikuna Media S.L.
- Migrated a mission-critical system from a dedicated server to a high-availability Amazon platform in one week to support a high traffic spike during the 2010 FIFA World Cup.
- Created a scalable streaming solution using AWS, Adobe Flash Media, Wowza, and Amazon CloudFront, allowing the company to stream live events like MTV Europe awards to thousands of viewers worldwide.
- Reviewed the company web platform performance, supporting several thousand hits per day for customers like EFE News, Telemundo, and Telefonica, resulting in up to a 50% performance increase using the same resources.
- Created email marketing infrastructure using EC2 and SES to provide services to several customers, ensuring deliverability and inbox reach.
- Provided support to development teams, assisting new technologies and best practices to achieve high availability and performant services.
Technologies: Amazon Web Services (AWS), LAMP, MySQL, Adobe Flash, Wowza, Content Delivery Networks (CDN), Amazon EC2, Debian, Git, Bash Script
Owner
2009 - 2012
AM Technology & Systems
- Worked on sales and technical solutions to gain customers and generate new services and products.
- Provided support for hosting servers with a vast range of technologies, from stripped-down LAMP servers to cPanel and Plesk setups.
- Supported Cisco networks with customers in the USA and Australia.
- Supported Windows corporate systems with AD, Exchange, and IIS.
- Migrated hosting servers between providers with hundreds of sites without downtime.
Technologies: LAMP, Zimbra, Microsoft Exchange, FreeBSD, Unix, Linux, VMware ESXi, Git, Bash Script
CTO and Co-founder
2006 - 2009
IT Business
- Supervised the technology department responsible for customers with over 100 PCs.
- Migrated several corporate MS Exchange installations from 5.5 to 2003.
- Deployed corporate VoIP PBXs using Asterisk software.
- Installed and maintained a metropolitan area network using WiFi links with Ubiquiti, MikroTik, and custom equipment with OpenWRT software.
- Managed a seven-member technical team to support customer needs.
Technologies: Telecommunications, Networking, FreeBSD, Cisco, Linux, VMware ESXi, Embedded Linux, Bash Script
NOC Supervisor
2005 - 2006
Diveo Uruguay S.A.
- Supported the company and customer networks that consisted of carrier-class network equipment like Cisco, Harris, and Ericsson Tellabs.
- Managed servers using Linux, Solaris, and Windows.
- Upgraded software and hardware for Cisco core routers (7950), including bootloaders.
- Provided support and assistance to enterprise customers.
- Designed new network links and services and coordinated with the marketing department to increase sales.
Technologies: Solaris, Wireless Networking, Synchronous Digital Hierarchy (SDH), PDH, Rapid Application Development (RAD), Cisco, Linux, Unix, Bash Script
Experience
A2Billing Auto Installer Script
https://github.com/amontalban/A2Billing-Install-ScriptA2Billing auto installer script for CentOS. The script handles all installation, including Asterisk, A2Billing, MySQL, and Sangoma drivers.
This script allowed users to install everything needed to have a VoIP system to resell calls.
This script allowed users to install everything needed to have a VoIP system to resell calls.
Certifications
JANUARY 2022 - JANUARY 2024
Certified Kubernetes Security Specialist
Linux Foundation
SEPTEMBER 2020 - SEPTEMBER 2023
Certified Kubernetes Application Developer
Linux Foundation
SEPTEMBER 2020 - SEPTEMBER 2023
Certified Kubernetes Administrator
Linux Foundation
SEPTEMBER 2020 - SEPTEMBER 2022
Terraform Associate
Hashicorp
Skills
Libraries/APIs
Puppet.js, Terragrunt
Tools
Ansible, Packer, Vagrant, Terraform, SaltStack, Wowza, Helm, Grafana, Apache, Docker Compose, Travis CI, Jenkins, Git, Citus, NGINX, Puppet, Microsoft Exchange, Zimbra, Adobe Flash, GitLab, GitLab CI/CD, Google Kubernetes Engine (GKE), RabbitMQ, Beanstalk, Chef, Azure Kubernetes Service (AKS), Amazon EKS, AWS CloudFormation, Amazon Elastic Container Service (ECS), GitHub
Languages
Bash Script, SAML, Bash, Python, PHP
Paradigms
DevOps, DevSecOps, HIPAA Compliance, Rapid Application Development (RAD)
Platforms
Amazon EC2, Unix, Docker, Kubernetes, Amazon Web Services (AWS), FreeBSD, Linux, Red Hat Linux, CentOS, Debian Linux, LAMP, MacOS, Debian, Ubuntu, Google Cloud Platform (GCP), Solaris, Embedded Linux, Azure, Twilio, AWS Lambda
Storage
MySQL, PostgreSQL, Datadog, Redis, Cassandra, Elasticsearch, Amazon S3 (AWS S3)
Frameworks
Core Location, TYPO3
Industry Expertise
Telecommunications
Other
Identity & Access Management (IAM), SOC 2, Cloud, GitOps, CI/CD Pipelines, Prometheus, AWS Cloud Architecture, VMware ESXi, Site Reliability Engineering (SRE), Video Streaming, HAProxy, Virtualization, Cloud Computing, Networking, Software-defined Data Centers (SDDC), Content Delivery Networks (CDN), Cisco, PDH, Synchronous Digital Hierarchy (SDH), Wireless Networking, Infrastructure as Code (IaC), Infrastructure Monitoring, AWS DevOps, ECS, AWS Global Accelerator, Tailscale, Argo CD, ISO 27001, GitHub Actions, Google Cloud Functions, Google Pub/Sub
Collaboration That Works
How to Work with Toptal
Toptal matches you directly with global industry experts from our network in hours—not weeks or months.
1
Share your needs
Discuss your requirements and refine your scope in a call with a Toptal domain expert.
2
Choose your talent
Get a short list of expertly matched talent within 24 hours to review, interview, and choose from.
3
Start your risk-free talent trial
Work with your chosen talent on a trial basis for up to two weeks. Pay only if you decide to hire them.
Top talent is in high demand.
Start hiring