
Luis Sánchez
Verified Expert in Engineering
Cloud Solution Architect and Developer
Mexico City, Mexico
Toptal member since March 23, 2023
Luis is a cloud solutions architect for Azure and Google Cloud Platform. He's keen on providing IT solutions focused on software development in DevOps adoption, agile development, systems and platform integration, process automation, business development and optimization, and algorithm analysis. Luis is passionate about designing and creating solutions to spread knowledge to new generations and learning from them. There's always a solution, an answer, and the potential to innovate.
Portfolio
Experience
- Azure - 10 years
- DevOps - 8 years
- CI/CD Pipelines - 8 years
- Terraform - 7 years
- Docker - 6 years
- Infrastructure as Code (IaC) - 5 years
- Kubernetes - 5 years
- Google Cloud Platform (GCP) - 4 years
Preferred Environment
Azure, Google Cloud Platform (GCP), Terraform, Azure DevOps, Google Kubernetes Engine (GKE), Azure Kubernetes Service (AKS), Terraform Cloud, CI/CD Pipelines, Amazon SageMaker, AWS CloudFormation, Argo CD, Railway, Go, FastAPI, OpenTelemetry, Langfuse, Amazon DynamoDB, Amazon OpenSearch, AWS IAM, Amazon API Gateway, Amazon Bedrock AgentCore, Amazon CloudWatch, AWS Step Functions
The most amazing...
...on-premises data center migration to Azure I've done included a governance model for cloud operations and automation collaboration design, plan, and execution.
Work Experience
Cloud Networking Engineer
PepsiCo Global - MD Projects
- Designed and implemented the DR networking strategy using Virtual WAN multiregion setup with S2S VPN between AWS and Azure.
- Set up the DNS strategy for DR events to automate as much of the failover process as possible, specifically for Geo-replicated services such as AKV, Storage accounts, PostgreSQL, Event Hub, and ACR.
- Created the routing and tunneling strategy to isolate network communication from on-prem to Primary and DR regions using firewall policies, route maps, VPN sites, and VPN links.
Azure Cloud Architect
Kiel Laboratories, Inc - Technology
- Defined the cloud architecture and governance model and created the IaC Terraform modules and landing zones for multiple subscriptions in a single tenancy environment, following Microsoft CAF best practices and recommendations.
- Set up an Azure DevOps organization and a project structure for tasks and customer support activities. Customized the agile project setup and status flows for both internal and external IT team tasks. Synchronized D365 project operations and ADO work items.
- Worked on multiple PoCs for agentic AI internal solutions using Copilot Studio integrated with the Microsoft 365 suite, as well as LangGraph and CrewAI for Azure AI Foundry deployments.
DevOps Engineer
Inkitt Inc
- Completed a Helm upgrade across development, testing, and production GKE clusters to mitigate security issues and address previous failed upgrade attempts.
- Assisted the engineering teams on new product pipeline releases using GitHub actions, approval gates, and Slack channel integrations for notifications and communication purposes.
- Updated all non-production and production Cloudflare DNS entries with proxied configurations, along with additional GKE config to reflect the proper original source IP address of the requests for firewall compatibility.
Azure Cloud Engineer
PepsiCo Global - Main
- Guided the team in understanding Azure DevOps (ADO) and optimized CI/CD pipelines for seamless deployments. My efforts reduced errors, automated processes, and improved team efficiency by promoting best practices in pipeline management.
- Monitored system performance, traced API calls, analyzed logs, and set up automated alerts to detect anomalies. These proactive measures enhanced system reliability, reduced downtime, and ensured smooth back-end operations across services.
- Created advanced SQL queries to generate detailed reports, enabling data-driven decisions. Additionally, I supported developers with coding tasks and troubleshooting, fostering collaboration and bridging gaps between development and operations.
- Streamlined back-end processes by resolving API failures and assisting with pipeline configurations. My proactive troubleshooting and collaboration with developers ensured stable operations and improved the overall efficiency of the system.
DevOps Engineer (via Toptal)
Stage Front Tickets, Inc.
- Created CI/CD pipelines for different web apps based on .NET and JavaScript.
- Documented the migration process for new Azure subscriptions, VNet design, and landing zones.
- Created the core/base for Terraform-managed infrastructure using Azure DevOps and Terraform CLI automation.
Multi-cloud Solution Architect
Canadian Tire Corporation
- Spearheaded cloud migration and operational optimization for CTC. Designed and executed robust cloud architecture solutions focusing on enterprise scalability frameworks, advanced security, and alignment with critical organizational objectives.
- Led a specialized team of GCP, Azure, and DevOps engineers. Established a knowledge management process. Developed standardized solution protocols for recurring issues. Mentored and coached technical specialists to enhance team capabilities.
- Streamlined cloud operations by implementing a JIT technical consultation model. Reduced dependency on the ticketing system through proactive technical interventions. Enhanced team efficiency by creating knowledge and problem-solving protocols.
Cloud Architect
Digicel Group
- Planned and executed the migration of over 1500 on-premises servers and 100+ applications with different approaches such as lift and shift, replatform, rearchitecture, and rebuild.
- Consulted, designed, and performed migrations from client-server legacy desktops to microservices and serverless applications. The infrastructure is built and updated with CI/CD pipelines.
- Reduced total CapEx and moved to OpEx from the on-prem data center to the Azure cloud. Enhanced security via hardened VM images, firewall rules, NSG, and framework best practices. Reduced latency for end users.
Cloud Architect Advisor
Colbun (via Spinup)
- Worked on cloud migration of SCADA systems in the electricity production industry to reduce CapEx, enable scaling, and reduce operational maintenance of servers with microservices.
- Provided guidance for cloud governance, migration processes, development/testing and production environment definition, infrastructure as code and provisioning, CI/CD processes, and pipelines setup for microservices deployment automation.
- Delivered flawless deployment and integration between testing and production environments. Reduced latency and network costs by refactoring VNet design and VPN setup.
- Optimized performance of microservices tasks by using autoscaling on nodes and containers. Reduced analytics platform costs by US $100,000/year.
Google Cloud Certified Trainer
Banco Pichincha
- Provided training on Networking in Google Cloud, Architecting with Google Cloud, Google Cloud: Core Infrastructure, Google Cloud Platform Big Data and Machine Learning Fundamentals, and Modernizing Data Lakes and Data Warehouses with GCP.
- Delivered over 50 laboratories with the Data Anlytics team. Reduced the technology gap for current migration projects.
- Provided training on Compute Engine, GKE, App Engine, Cloud Storage, Cloud SQL, Cloud Spanner, Cloud Bigtable, BigQuery, Cloud Composer, Cloud Data Fusion, Cloud Dataflow, Cloud Dataproc, Cloud Pub/Sub, Cloud Console, Terraform, Stackdriver and IAM.
Cloud Architect Consultant
Finning Cat
- Worked on a cloud-native big data analytics solution for the mining and construction vehicle industry. Performed cloud design and architecture for different application microservices integration for data engineering process implementation.
- Designed and worked in implementing the CI/CD automation process using Azure DevOps, pipelines as code (YAML), and templates to apply DRY principles.
- Conceived the strategy and implemented the automation process for CI/CD of infrastructure as code and microservices deployment with autoscaling to process data ingestion from telemetry worldwide massively.
Software Architect
Hotel Connections
- Worked under the guidance and leadership of the delivery manager, ensuring technical quality and architectural alignment while providing technology solutions that meet functional requirements.
- Built and worked on enterprise-grade software systems on top of the Microsoft .NET development stack as part of an agile development team. Provided technical and team leadership through coaching and mentoring.
- Slashed the cost of software licenses for development and QA environments up to 100% (sometimes from US $50,000 to $0). Reduced development time by 90% through implementing industry best practices, coding standards, and TDD.
- Improved the overall efficiency of the IT team by 100% while adopting Scrum Agile with distributed teams. Reduced applications' latency by up to 90% by redesigning the architecture of the back end with SOA in the cloud.
- Increased readability of documentation by applying SOLID principles and code documentation standards. Reduced design and analysis time in half by introducing a 4+1 view model.
Experience
Cloud Migration and Automation
Cloud Governance and Self-serving Initiative
I was part of a solution and enterprise architecture board in charge of designing a new governance model to enable several key teams to reach the goal of having entire autonomous product development teams: self-serving their infrastructure, aligning their technical skills and working toward the best practice framework, complying with cloud architecture, building a zero trust security model, and fully automating processes.
Data Center Migration to Azure Cloud
All cloud resources were treated as IaC using Terraform and Azure DevOps. All the applications that could be modernized with the least effort (mostly those written in C# and Python) were converted to cloud-ready and some to cloud-native services and were deployed and maintained using ADO CI/CD pipelines.
Education
Bachelor's Degree in Software Engineering
ITESM Laguna Campus - Torreon, Mexico
Certifications
Azure Security Engineer Associate
Microsoft
Microsoft Azure Solutions Architect Expert
Microsoft
DevOps Engineer Expert
Microsoft
GCP Professional Cloud Architect
Google Cloud
Microsoft Certified: Azure Administrator Associate
Microsoft
Skills
Tools
Terraform, Azure Kubernetes Service (AKS), Azure Key Vault, Azure Virtual Network Gateway, GitHub, Azure Application Insights, Azure Monitor, Azure Web Application Firewall, Git, Azure Network Security Groups, Azure DevOps Services, Google Kubernetes Engine (GKE), SonarCloud, Grafana, VPN, GitLab CI/CD, Amazon EKS, Observability Tools, AWS CloudFormation, Visual Studio, Amazon Elastic Container Service (ECS), Amazon OpenSearch, AWS IAM, Amazon CloudWatch, AWS Step Functions, Shell, Rundeck, Azure Application Gateway, Kong, Ansible, Artifactory, Helm, RabbitMQ, Azure Active Directory B2C (ADB2C), Jira, Confluence, Microsoft Copilot, Kibana, Microsoft Dynamics CRM, AWS Deployment, Amazon SageMaker, Cloud Dataflow, Google Cloud Dataproc, Google Compute Engine (GCE)
Languages
Bicep, Python, C#, YAML, SQL, C#.NET, Bash Script, Go
Paradigms
Azure DevOps, DevOps, Automation, Continuous Integration (CI), Continuous Delivery (CD), Application Architecture, Role-based Access Control (RBAC), Microservices, Event-driven Architecture, DevSecOps, API/Services Architecture
Platforms
Azure, Docker, Kubernetes, Microsoft, Google Cloud Platform (GCP), Linux, Amazon Web Services (AWS), Amazon EC2, AWS Lambda, Windows Server, Oracle, New Relic, Visual Studio Code (VS Code), Apache Kafka, Langfuse, Cloud Run
Storage
Azure Blobs, Azure Active Directory, On-premise, Azure Cloud Services, Azure Storage, MySQLdb, PostgreSQL, Azure SQL Databases, Amazon DynamoDB, Microsoft SQL Server, Datadog, Google Cloud Storage, Google Cloud SQL, Google Bigtable
Frameworks
Azure Well-Architected Framework, .NET, .NET Core, Windows PowerShell
Industry Expertise
Cybersecurity
Other
Solution Architecture, Cloud Architecture, Azure Landing Zones, CI/CD Pipelines, Infrastructure as Code (IaC), Azure Virtual Networks, System Administration, Infrastructure, Containerization, Azure Resource Manager (ARM), Azure Virtual Machines, Site Reliability Engineering (SRE), Scaling, Serverless, Cloud Infrastructure, Cloud, Scalable Architecture, Architecture, Distributed Systems, Microsoft Azure, ARM, Azure Compute Services, Kubernetes Security, Cloud Ops, System Architecture, Software Architecture, Azure Service Bus, Virtual Machines, DevOps Engineer, Software Development, Agile Practices, Networking, IT Automation, Monitoring, IT Security, Configuration Management, Cloud Security, GitHub Actions, Identity & Access Management (IAM), Azure Virtual Desktop, Security, Azure Cloud Security, Azure Data Factory (ADF), Prometheus, Amazon RDS, Active Directory (AD), Terraform Cloud, IDP, Microsoft IDP, Multitenancy, OpenID Connect (OIDC), Azure Content Delivery Network, Content Delivery Networks (CDN), Backup & Recovery, Cloud Cost Management, AWS DevOps, Virtual Private Cloud (VPC), Enterprise, Observability, Static Application Security Testing (SAST), Amazon API Gateway, Windows Services, API Management, GitOps, Cloud Design, Azure Portals, Systems Monitoring, JFrog, Artificial Intelligence (AI), Machine Learning Operations (MLOps), Cisco, ServiceNow, Microsoft Entra, Cloudflare, Nomad, Dynamics CRM 365, GPU Computing, Data Engineering, Amazon Redshift, Argo CD, Railway, FastAPI, OpenTelemetry, Dynamic Application Security Testing (DAST), Amazon Bedrock AgentCore, Google BigQuery, Security Groups, Network Load Balancing (NLB), Azure Virtual WAN, Cloud Networking, DNS, Disaster Recovery (DR)
How to Work with Toptal
Toptal matches you directly with global industry experts from our network in hours—not weeks or months.
Share your needs
Choose your talent
Start your risk-free talent trial
Top talent is in high demand.
Start hiring