.

Software · Platforms · Security · Systems

Software, platforms,
and security.

I work on production systems — application code, infrastructure, and the layers between.

Contact Selected work
01Selected work

Production systems

Selected
work.

01PostgreSQL

Production diagnosis

PostgreSQL under load

TimescaleDB ran out of memory under queries from a FastAPI service. A second issue was a sequential scan on about 13 million rows after the planner missed a type constraint.

I fixed the query shape and made the constraint visible to the planner. Memory for that path dropped from about 2 GB to tens of MB.

02Jenkins

Regulated finance

Shared Jenkins library

For several months I was primary reviewer on a shared Jenkins library (Groovy) for a large regulated engineering organization. That review came before production branches.

03Linux

Public work

Linux sched_ext

Public sched_ext work: a merged change to statistics metadata, and an investigation of task starvation and scheduler watchdog behavior under real-time load. Stall reproduced and results documented for the maintainers.

Merged scx contribution Scheduler investigation
02Experience

Roles and dates

Experience.

  1. MAR—APR 2026

    AI Solutions & Platform Engineer · Short-term project

    Document processing, search, and serverless delivery

    • Built an LLM document pipeline for an energy-sector client: 253 structured rules from process docs, most BPMN diagram production automated, lower token use.
    • Built a product search engine in Python (graph traversal, trigram matching, SQL, query expansion).
    • Automated Hetzner Cloud lifecycle and GitHub Actions for a serverless platform.
    AI / PLATFORM
  2. MAR 2025—MAR 2026

    Cloud, DevOps & Software Engineer

    Distributed IoT systems in production

    • Operated production Kubernetes for services on live IoT telemetry; GitOps delivery.
    • Services in Rust, Go, Java, and Python; AWS with Terraform; GitHub Actions pipelines.
    • PostgreSQL schemas and Liquibase migrations; monitoring with Prometheus and Grafana.
    IOT / CLOUD
  3. NOV 2023—MAY 2025

    DevOps, Security & Software Engineer

    Regulated hybrid-cloud delivery

    • CI/CD for a large regulated organization (Jenkins shared libraries; path to AKS, ACR, API Management).
    • Secrets with CyberArk Conjur; container and runtime checks with Falco and Trivy; SonarQube and OWASP tooling.
    • Multi-cluster monitoring with Prometheus Thanos; JVM dump analysis when app logs were not enough.
    • Automation in Python, Bash, and Go.
    FINANCE / SECURITY
  4. JUL 2022—JUL 2023

    Software Engineer

    Backend integration and database changes

    • Java and Spring Boot services integrating a legacy SAP ERP with a supply-chain SaaS platform.
    • Data mappings between the systems; structural database changes with Liquibase without downtime.
    JAVA / DATA
  5. 2021—2022

    Early engineering work

    Geospatial systems, data analysis, and automation

    • Java/Spring geospatial system, SQL work, Power BI reporting, a Telegram bot.
    FOUNDATIONS

Technical interests

Space
systems.

I study distributed software over constrained links, telemetry, fault recovery, secure communications, software integrity, and autonomy with limited human supervision. Related to work on distributed services and reliability.

NASA · Sounding rocket over Alaska
03Current experiments

Early exploration

Machine learning
and drones.

01

Machine learning

Fundamentals and how models fit into software systems.

02

Drone systems

Software, sensors, networks, and hardware as one system.

04Capabilities

Technologies
used.

Tools that show up in the work above.

01

Software engineering

Java · Go · Rust · Python · Groovy · SQL · Spring Boot · REST APIs · Application profiling · PostgreSQL · Liquibase

02

Platform and cloud

Kubernetes · Docker · Terraform · AWS · Microsoft Azure · AKS · ACR · Azure API Management · Hetzner Cloud · GitHub Actions · Jenkins · ArgoCD · GitOps · Prometheus · Thanos · Grafana

03

Security engineering

CyberArk Conjur · HashiCorp Vault · Falco · Trivy · SonarQube · OWASP tooling · IAM · RBAC · Runtime visibility · Network controls · eBPF

04

Cloud-native credentials

CKS — Certified Kubernetes Security Specialist
CKA — Certified Kubernetes Administrator
CKAD — Certified Kubernetes Application Developer
KCNA — Kubernetes and Cloud Native Associate
KCSA — Kubernetes and Cloud Security Associate
Linux Foundation LFS207

05Open source

Public contributions

Open-source
work.

Contributions and investigations include Linux sched_ext, the Fury Kubernetes distribution and CLI, the Apache OpenServerless operator and CLI, Tetragon, and Trivy.

GitHub profile
06About
Portrait of Luigi De Matteis

Background

About.

Backend services, PostgreSQL, shared CI/CD, Kubernetes, cloud infrastructure, observability, Linux, eBPF, and security controls around secrets, containers, identity, and runtime.

07 · Contact

Contact.

Software, platform, or security work.

ldematteis123@gmail.com