Luis is available for hire
Hire LuisLuis Sánchez
Verified Expert in Engineering
Cloud Solution Architect and Developer
Mexico City, Mexico
Toptal member since March 23, 2023
Bio
Luis is a cloud solutions architect for Azure and Google Cloud Platform. He's keen on providing IT solutions focused on software development in DevOps adoption, agile development, systems and platform integration, process automation, business development and optimization, and algorithm analysis. Luis is passionate about designing and creating solutions to spread knowledge to new generations and learning from them. There's always a solution, an answer, and the potential to innovate.
Portfolio
PepsiCo Global - MD Projects
Azure, Azure Virtual WAN, Cloud Networking, DNS, Disaster Recovery (DR), VPN...
Kiel Laboratories, Inc - Technology
Azure, Azure Cloud Services, Azure DevOps, Azure Cloud Security...
Inkitt Inc
Kubernetes, PostgreSQL, Linux, System Architecture, Amazon Web Services (AWS)...
Experience
- Azure - 10 years
- DevOps - 8 years
- CI/CD Pipelines - 8 years
- Terraform - 7 years
- Docker - 6 years
- Infrastructure as Code (IaC) - 5 years
- Kubernetes - 5 years
- Google Cloud Platform (GCP) - 4 years
Work Experience
Cloud Networking Engineer
2026 - 2026
PepsiCo Global - MD Projects
- Designed and implemented the DR networking strategy using Virtual WAN multiregion setup with S2S VPN between AWS and Azure.
- Set up the DNS strategy for DR events to automate as much of the failover process as possible, specifically for Geo-replicated services such as AKV, Storage accounts, PostgreSQL, Event Hub, and ACR.
- Created the routing and tunneling strategy to isolate network communication from on-prem to Primary and DR regions using firewall policies, route maps, VPN sites, and VPN links.
Technologies: Azure, Azure Virtual WAN, Cloud Networking, DNS, Disaster Recovery (DR), VPN, Amazon Web Services (AWS), Terraform, Bicep, ARM, Bash
Azure Cloud Architect
2025 - 2026
Kiel Laboratories, Inc - Technology
- Defined the cloud architecture and governance model and created the IaC Terraform modules and landing zones for multiple subscriptions in a single tenancy environment, following Microsoft CAF best practices and recommendations.
- Set up an Azure DevOps organization and a project structure for tasks and customer support activities. Customized the agile project setup and status flows for both internal and external IT team tasks. Synchronized D365 project operations and ADO work items.
- Worked on multiple PoCs for agentic AI internal solutions using Copilot Studio integrated with the Microsoft 365 suite, as well as LangGraph and CrewAI for Azure AI Foundry deployments.
Technologies: Azure, Azure Cloud Services, Azure DevOps, Azure Cloud Security, Azure Active Directory, Windows PowerShell, Terraform, Microsoft Copilot, Azure Monitor, Azure Application Insights, Role-based Access Control (RBAC), Azure Well-Architected Framework, Azure Compute Services, Azure Storage, Azure Network Security Groups, Terraform Cloud, CI/CD Pipelines, Infrastructure as Code (IaC), Bicep, Dynamics CRM 365, Microsoft Dynamics CRM, Cloudflare, Backup & Recovery, Cloud Cost Management, Observability Tools, Azure DevOps Services, Virtual Machines, Observability, DevOps Engineer, Dynamic Application Security Testing (DAST), Static Application Security Testing (SAST)
DevOps Engineer
2025 - 2025
Inkitt Inc
- Completed a Helm upgrade across development, testing, and production GKE clusters to mitigate security issues and address previous failed upgrade attempts.
- Assisted the engineering teams on new product pipeline releases using GitHub actions, approval gates, and Slack channel integrations for notifications and communication purposes.
- Updated all non-production and production Cloudflare DNS entries with proxied configurations, along with additional GKE config to reflect the proper original source IP address of the requests for firewall compatibility.
Technologies: Kubernetes, PostgreSQL, Linux, System Architecture, Amazon Web Services (AWS), Grafana, Kibana, Nomad, Infrastructure as Code (IaC), Cloudflare, Datadog, Cloud Cost Management, Observability Tools, Amazon Elastic Container Service (ECS), Virtual Machines, Enterprise, Observability, DevOps Engineer, Dynamic Application Security Testing (DAST), Static Application Security Testing (SAST), Bash
Azure Cloud Engineer
2024 - 2024
PepsiCo Global - Main
- Guided the team in understanding Azure DevOps (ADO) and optimized CI/CD pipelines for seamless deployments. My efforts reduced errors, automated processes, and improved team efficiency by promoting best practices in pipeline management.
- Monitored system performance, traced API calls, analyzed logs, and set up automated alerts to detect anomalies. These proactive measures enhanced system reliability, reduced downtime, and ensured smooth back-end operations across services.
- Created advanced SQL queries to generate detailed reports, enabling data-driven decisions. Additionally, I supported developers with coding tasks and troubleshooting, fostering collaboration and bridging gaps between development and operations.
- Streamlined back-end processes by resolving API failures and assisting with pipeline configurations. My proactive troubleshooting and collaboration with developers ensured stable operations and improved the overall efficiency of the system.
Technologies: Azure, Azure DevOps, CI/CD Pipelines, Microsoft SQL Server, Monitoring, Kubernetes, Azure Portals, C#, Systems Monitoring, SonarCloud, Cloud, Scalable Architecture, Architecture, Active Directory (AD), Azure Active Directory, Microsoft, Git, Azure Cloud Services, IDP, Microsoft IDP, OpenID Connect (OIDC), Cloud Ops, SQL, System Architecture, C#.NET, .NET, .NET Core, Azure SQL Databases, Backup & Recovery, Cloud Cost Management, Observability Tools, Azure DevOps Services, Visual Studio, Azure Service Bus, Virtual Machines, Enterprise, Observability, Static Application Security Testing (SAST)
DevOps Engineer (via Toptal)
2023 - 2024
Stage Front Tickets, Inc.
- Created CI/CD pipelines for different web apps based on .NET and JavaScript.
- Documented the migration process for new Azure subscriptions, VNet design, and landing zones.
- Created the core/base for Terraform-managed infrastructure using Azure DevOps and Terraform CLI automation.
Technologies: CI/CD Pipelines, Azure, DevOps, Cloud Architecture, Identity & Access Management (IAM), Azure Application Insights, Azure Monitor, Azure Web Application Firewall, Security, Azure Cloud Security, Cloud Infrastructure, JFrog, SonarCloud, Cloud, Scalable Architecture, Application Architecture, Architecture, Distributed Systems, Grafana, Prometheus, PostgreSQL, Active Directory (AD), Azure Active Directory, Microsoft, On-premise, Git, Azure Cloud Services, Microsoft IDP, Multitenancy, OpenID Connect (OIDC), Kubernetes Security, Cloud Ops, SQL, System Architecture, Microsoft Entra, Cloudflare, Datadog, Infrastructure as Code (IaC), Backup & Recovery, Cloud Cost Management, AWS Deployment, Amazon Web Services (AWS), AWS DevOps, Observability Tools, Virtual Private Cloud (VPC), Azure DevOps Services, Azure Service Bus, Amazon Elastic Container Service (ECS), Virtual Machines, Enterprise, Observability, DevOps Engineer, Dynamic Application Security Testing (DAST), Static Application Security Testing (SAST), Bash
Multi-cloud Solution Architect
2022 - 2024
Canadian Tire Corporation
- Spearheaded cloud migration and operational optimization for CTC. Designed and executed robust cloud architecture solutions focusing on enterprise scalability frameworks, advanced security, and alignment with critical organizational objectives.
- Led a specialized team of GCP, Azure, and DevOps engineers. Established a knowledge management process. Developed standardized solution protocols for recurring issues. Mentored and coached technical specialists to enhance team capabilities.
- Streamlined cloud operations by implementing a JIT technical consultation model. Reduced dependency on the ticketing system through proactive technical interventions. Enhanced team efficiency by creating knowledge and problem-solving protocols.
Technologies: Azure, Azure DevOps, Terraform, Artifactory, Git, Visual Studio Code (VS Code), Jira, Confluence, ServiceNow, Multitenancy, OpenID Connect (OIDC), Terraform Cloud, Microsoft Copilot, Content Delivery Networks (CDN), Kubernetes Security, Cloud Ops, SQL, System Architecture, Microsoft Entra, Datadog, Azure SQL Databases, Backup & Recovery, Cloud Cost Management, Observability Tools, Virtual Private Cloud (VPC), Azure DevOps Services, Visual Studio, Apache Kafka, Amazon Elastic Container Service (ECS), Virtual Machines, Enterprise, Observability, DevOps Engineer, Static Application Security Testing (SAST), Google Cloud Platform (GCP), Google Kubernetes Engine (GKE), Google Cloud Storage, Google BigQuery, Google Cloud SQL, Cloud Run, Cloud Dataflow, Google Cloud Dataproc, GitHub Actions, Bash
Cloud Architect
2021 - 2023
Digicel Group
- Planned and executed the migration of over 1500 on-premises servers and 100+ applications with different approaches such as lift and shift, replatform, rearchitecture, and rebuild.
- Consulted, designed, and performed migrations from client-server legacy desktops to microservices and serverless applications. The infrastructure is built and updated with CI/CD pipelines.
- Reduced total CapEx and moved to OpEx from the on-prem data center to the Azure cloud. Enhanced security via hardened VM images, firewall rules, NSG, and framework best practices. Reduced latency for end users.
Technologies: Azure, Azure DevOps, Linux, Networking, Shell, Cybersecurity, IT Automation, Cloud Architecture, Docker, Kubernetes, Azure Kubernetes Service (AKS), Monitoring, Azure Landing Zones, DevOps, CI/CD Pipelines, Infrastructure as Code (IaC), Role-based Access Control (RBAC), Azure Virtual Networks, System Administration, Automation, Infrastructure, Containerization, Azure Key Vault, Azure Blobs, Azure Resource Manager (ARM), Azure Virtual Machines, Azure Virtual Network Gateway, MySQLdb, Site Reliability Engineering (SRE), Scaling, GitOps, Continuous Integration (CI), DevSecOps, IT Security, Configuration Management, Cloud Security, Serverless, YAML, Continuous Delivery (CD), GitHub Actions, Identity & Access Management (IAM), Azure Application Insights, Azure Monitor, Azure Web Application Firewall, Azure Virtual Desktop, Cloud Infrastructure, JFrog, SonarCloud, Cloud, Scalable Architecture, Architecture, Grafana, Prometheus, PostgreSQL, Active Directory (AD), Azure Active Directory, Microsoft, On-premise, Git, Azure Cloud Services, IDP, OpenID Connect (OIDC), Azure Content Delivery Network, Content Delivery Networks (CDN), Kubernetes Security, Cloud Ops, SQL, System Architecture, Microsoft Entra, Azure SQL Databases, Backup & Recovery, Cloud Cost Management, Observability Tools, Azure DevOps Services, Azure Service Bus, Virtual Machines, Observability
Cloud Architect Advisor
2020 - 2021
Colbun (via Spinup)
- Worked on cloud migration of SCADA systems in the electricity production industry to reduce CapEx, enable scaling, and reduce operational maintenance of servers with microservices.
- Provided guidance for cloud governance, migration processes, development/testing and production environment definition, infrastructure as code and provisioning, CI/CD processes, and pipelines setup for microservices deployment automation.
- Delivered flawless deployment and integration between testing and production environments. Reduced latency and network costs by refactoring VNet design and VPN setup.
- Optimized performance of microservices tasks by using autoscaling on nodes and containers. Reduced analytics platform costs by US $100,000/year.
Technologies: Azure, Azure DevOps, Python, Networking, Shell, Cybersecurity, IT Automation, Cloud Architecture, Docker, Kubernetes, Azure Kubernetes Service (AKS), Monitoring, Azure Landing Zones, DevOps, CI/CD Pipelines, Infrastructure as Code (IaC), Role-based Access Control (RBAC), Azure Virtual Networks, Automation, Infrastructure, Containerization, Azure Key Vault, Azure Blobs, Azure Resource Manager (ARM), Azure Virtual Machines, Azure Virtual Network Gateway, MySQLdb, Site Reliability Engineering (SRE), Scaling, Artifactory, GitOps, Continuous Integration (CI), IT Security, Configuration Management, Cloud Security, Serverless, YAML, Continuous Delivery (CD), Identity & Access Management (IAM), RabbitMQ, Azure Application Insights, Azure Monitor, Azure Web Application Firewall, Azure Cloud Security, Cloud Infrastructure, SonarCloud, Cloud, Scalable Architecture, Application Architecture, Architecture, Distributed Systems, Machine Learning Operations (MLOps), Grafana, Prometheus, PostgreSQL, Active Directory (AD), Azure Active Directory, Microsoft, On-premise, Git, Azure Cloud Services, OpenID Connect (OIDC), Kubernetes Security, Cloud Ops, SQL, System Architecture, Software Architecture, Microsoft Entra, Azure SQL Databases, Cloud Cost Management, Observability Tools, Virtual Private Cloud (VPC), Azure DevOps Services, Azure Service Bus, Apache Kafka, Virtual Machines, Observability, DevOps Engineer
Google Cloud Certified Trainer
2020 - 2020
Banco Pichincha
- Provided training on Networking in Google Cloud, Architecting with Google Cloud, Google Cloud: Core Infrastructure, Google Cloud Platform Big Data and Machine Learning Fundamentals, and Modernizing Data Lakes and Data Warehouses with GCP.
- Delivered over 50 laboratories with the Data Anlytics team. Reduced the technology gap for current migration projects.
- Provided training on Compute Engine, GKE, App Engine, Cloud Storage, Cloud SQL, Cloud Spanner, Cloud Bigtable, BigQuery, Cloud Composer, Cloud Data Fusion, Cloud Dataflow, Cloud Dataproc, Cloud Pub/Sub, Cloud Console, Terraform, Stackdriver and IAM.
Technologies: Google Cloud Platform (GCP), Virtual Private Cloud (VPC), Security Groups, Network Load Balancing (NLB), Google Compute Engine (GCE), Google Cloud SQL, Google BigQuery, Google Bigtable, Google Cloud Storage
Cloud Architect Consultant
2019 - 2020
Finning Cat
- Worked on a cloud-native big data analytics solution for the mining and construction vehicle industry. Performed cloud design and architecture for different application microservices integration for data engineering process implementation.
- Designed and worked in implementing the CI/CD automation process using Azure DevOps, pipelines as code (YAML), and templates to apply DRY principles.
- Conceived the strategy and implemented the automation process for CI/CD of infrastructure as code and microservices deployment with autoscaling to process data ingestion from telemetry worldwide massively.
Technologies: Azure, Azure DevOps, Networking, Shell, Cybersecurity, IT Automation, Cloud Architecture, Docker, Kubernetes, Azure Kubernetes Service (AKS), Monitoring, Azure Landing Zones, DevOps, CI/CD Pipelines, Infrastructure as Code (IaC), Role-based Access Control (RBAC), Azure Virtual Networks, System Administration, Automation, Microservices, Event-driven Architecture, API/Services Architecture, Infrastructure, Ansible, Containerization, Azure Key Vault, Azure Blobs, Azure Resource Manager (ARM), Azure Virtual Machines, Azure Virtual Network Gateway, MySQLdb, Site Reliability Engineering (SRE), Scaling, Artifactory, GitHub, GitOps, Continuous Integration (CI), DevSecOps, IT Security, Cloud Security, Serverless, YAML, Cloud Design, Continuous Delivery (CD), Identity & Access Management (IAM), Helm, Azure Application Insights, Azure Monitor, Azure Web Application Firewall, Security, Azure Cloud Security, Cloud Infrastructure, Cloud, Scalable Architecture, Application Architecture, Architecture, Distributed Systems, Artificial Intelligence (AI), Machine Learning Operations (MLOps), Grafana, Prometheus, PostgreSQL, Active Directory (AD), Azure Active Directory, Microsoft, On-premise, Git, Azure Cloud Services, Kubernetes Security, Cloud Ops, SQL, System Architecture, Software Architecture, Microsoft Entra, Azure SQL Databases, Cloud Cost Management, Observability Tools, Virtual Private Cloud (VPC), Azure DevOps Services, Virtual Machines, Observability, DevOps Engineer
Software Architect
2015 - 2017
Hotel Connections
- Worked under the guidance and leadership of the delivery manager, ensuring technical quality and architectural alignment while providing technology solutions that meet functional requirements.
- Built and worked on enterprise-grade software systems on top of the Microsoft .NET development stack as part of an agile development team. Provided technical and team leadership through coaching and mentoring.
- Slashed the cost of software licenses for development and QA environments up to 100% (sometimes from US $50,000 to $0). Reduced development time by 90% through implementing industry best practices, coding standards, and TDD.
- Improved the overall efficiency of the IT team by 100% while adopting Scrum Agile with distributed teams. Reduced applications' latency by up to 90% by redesigning the architecture of the back end with SOA in the cloud.
- Increased readability of documentation by applying SOLID principles and code documentation standards. Reduced design and analysis time in half by introducing a 4+1 view model.
Technologies: Amazon Web Services (AWS), C#, Windows PowerShell, Microsoft SQL Server, Networking, Cybersecurity, IT Automation, Monitoring, DevOps, CI/CD Pipelines, System Administration, Automation, Event-driven Architecture, API/Services Architecture, Infrastructure, Azure Key Vault, Azure Virtual Machines, Scaling, Continuous Integration (CI), IT Security, RabbitMQ, Cloud, Application Architecture, Architecture, Distributed Systems, Amazon EC2, Amazon RDS, Active Directory (AD), Cisco, Microsoft, On-premise, Git, SQL, System Architecture, Software Architecture, C#.NET, .NET, GitLab CI/CD, Amazon EKS, Visual Studio, Virtual Machines
Project History
Cloud Migration and Automation
I worked on cloud migration of SCADA systems in the electricity production industry. As an Azure architect, I provided guidance for cloud governance, migration processes, development/testing and production environment definition, infrastructure as code and provisioning, CI/CD processes, and pipelines setup for microservices' deployment automation.
Cloud Governance and Self-serving Initiative
I worked in an enterprise-grade multi-environment in the mature stages of cloud adoption with Azure. The product development was under agile methodologies, and it was cloud native in essence. Multiple vendors and their own teams from the client were working on product and feature development for big data, analytics, IoT, and ML in the road for AI implementation for customers and end users.
I was part of a solution and enterprise architecture board in charge of designing a new governance model to enable several key teams to reach the goal of having entire autonomous product development teams: self-serving their infrastructure, aligning their technical skills and working toward the best practice framework, complying with cloud architecture, building a zero trust security model, and fully automating processes.
I was part of a solution and enterprise architecture board in charge of designing a new governance model to enable several key teams to reach the goal of having entire autonomous product development teams: self-serving their infrastructure, aligning their technical skills and working toward the best practice framework, complying with cloud architecture, building a zero trust security model, and fully automating processes.
Data Center Migration to Azure Cloud
I worked on a long-term project to assess, plan, and execute a migration of over 1,500 servers from an on-prem data center to Azure with different transformations directly to VMs, app service web apps, functions, containers, and microservices.
All cloud resources were treated as IaC using Terraform and Azure DevOps. All the applications that could be modernized with the least effort (mostly those written in C# and Python) were converted to cloud-ready and some to cloud-native services and were deployed and maintained using ADO CI/CD pipelines.
All cloud resources were treated as IaC using Terraform and Azure DevOps. All the applications that could be modernized with the least effort (mostly those written in C# and Python) were converted to cloud-ready and some to cloud-native services and were deployed and maintained using ADO CI/CD pipelines.
Education
2000 - 2004
Bachelor's Degree in Software Engineering
ITESM Laguna Campus - Torreon, Mexico
Certifications
DECEMBER 2020 - DECEMBER 2025
Azure Security Engineer Associate
Microsoft
AUGUST 2020 - AUGUST 2023
Microsoft Azure Solutions Architect Expert
Microsoft
APRIL 2019 - OCTOBER 2025
DevOps Engineer Expert
Microsoft
MARCH 2019 - MARCH 2025
GCP Professional Cloud Architect
Google Cloud
AUGUST 2018 - AUGUST 2025
Microsoft Certified: Azure Administrator Associate
Microsoft
Skills
Tools
Terraform, Azure Kubernetes Service (AKS), Azure Key Vault, Azure Virtual Network Gateway, GitHub, Azure Application Insights, Azure Monitor, Azure Web Application Firewall, Git, Azure Network Security Groups, Azure DevOps Services, Google Kubernetes Engine (GKE), SonarCloud, Grafana, VPN, GitLab CI/CD, Amazon EKS, Observability Tools, AWS CloudFormation, Visual Studio, Amazon Elastic Container Service (ECS), Amazon OpenSearch, AWS IAM, Amazon CloudWatch, AWS Step Functions, Jenkins, Shell, Rundeck, Azure Application Gateway, Kong, Ansible, Artifactory, Helm, RabbitMQ, Azure Active Directory B2C (ADB2C), Jira, Confluence, Microsoft Copilot, Kibana, Microsoft Dynamics CRM, AWS Deployment, Amazon SageMaker, Cloud Dataflow, Google Cloud Dataproc, Google Compute Engine (GCE)
Languages
Bicep, Python, C#, YAML, SQL, C#.NET, Bash Script, Go, Bash
Paradigms
Azure DevOps, DevOps, Automation, Continuous Integration (CI), Continuous Delivery (CD), Application Architecture, Role-based Access Control (RBAC), Microservices, Event-driven Architecture, DevSecOps, API/Services Architecture
Platforms
Azure, Docker, Kubernetes, Microsoft, Google Cloud Platform (GCP), Linux, Amazon Web Services (AWS), Amazon EC2, AWS Lambda, Windows Server, Oracle, New Relic, Visual Studio Code (VS Code), Apache Kafka, Langfuse, Cloud Run
Storage
Azure Blobs, Azure Active Directory, On-premise, Azure Cloud Services, Azure Storage, MySQLdb, PostgreSQL, Azure SQL Databases, Amazon DynamoDB, Microsoft SQL Server, Datadog, Google Cloud Storage, Google Cloud SQL, Google Bigtable
Frameworks
Azure Well-Architected Framework, .NET, .NET Core, Windows PowerShell
Industry Expertise
Cybersecurity
Other
Solution Architecture, Cloud Architecture, Azure Landing Zones, CI/CD Pipelines, Infrastructure as Code (IaC), Azure Virtual Networks, System Administration, Infrastructure, Containerization, Azure Resource Manager (ARM), Azure Virtual Machines, Site Reliability Engineering (SRE), Scaling, Serverless, Cloud Infrastructure, Cloud, Scalable Architecture, Architecture, Distributed Systems, Microsoft Azure, ARM, Azure Compute Services, Kubernetes Security, Cloud Ops, System Architecture, Software Architecture, Azure Service Bus, Virtual Machines, DevOps Engineer, Software Development, Agile Practices, Networking, IT Automation, Monitoring, IT Security, Configuration Management, Cloud Security, GitHub Actions, Identity & Access Management (IAM), Azure Virtual Desktop, Security, Azure Cloud Security, Azure Data Factory (ADF), Prometheus, Amazon RDS, Active Directory (AD), Terraform Cloud, IDP, Microsoft IDP, Multitenancy, OpenID Connect (OIDC), Azure Content Delivery Network, Content Delivery Networks (CDN), Backup & Recovery, Cloud Cost Management, AWS DevOps, Virtual Private Cloud (VPC), Enterprise, Observability, Static Application Security Testing (SAST), Amazon API Gateway, Windows Services, API Management, GitOps, Cloud Design, Azure Portals, Systems Monitoring, JFrog, Artificial Intelligence (AI), Machine Learning Operations (MLOps), Cisco, ServiceNow, Microsoft Entra, Cloudflare, Nomad, Dynamics CRM 365, GPU Computing, Data Engineering, Amazon Redshift, Argo CD, Railway, FastAPI, OpenTelemetry, Dynamic Application Security Testing (DAST), Amazon Bedrock AgentCore, Google BigQuery, Security Groups, Network Load Balancing (NLB), Azure Virtual WAN, Cloud Networking, DNS, Disaster Recovery (DR)
Collaboration That Works
How to Work with Toptal
Toptal matches you directly with global industry experts from our network in hours—not weeks or months.
1
Share your needs
Discuss your requirements and refine your scope in a call with a Toptal domain expert.
2
Choose your talent
Get a short list of expertly matched talent within 24 hours to review, interview, and choose from.
3
Start your risk-free talent trial
Work with your chosen talent on a trial basis for up to two weeks. Pay only if you decide to hire them.
Top talent is in high demand.
Start hiring