San Gemini (TR), Italy | Fully remote since April 2023
DevSecOps Engineer
Cloud & Kubernetes
AI infrastructure & MLOps
DevSecOps Engineer in Eustema's R&D team, part of Lutech, working fully remotely since April 2023. I develop and operate AI platforms for legaltech and the public sector and contribute to healthcare AI research, combining cloud and Kubernetes infrastructure, security, backend development and MLOps. My work also includes architecture studies, project documentation and training colleagues. I identify friction and improve solutions to make everyday work simpler and help teams work independently. I share findings through publications, open source contributions and university presentations. Professional interests: AI, DevSecOps, Cloud and MLOps, with a focus on research and technology useful to people. English C1.
Work experience
DevSecOps Engineer
Eustema S.p.A. | 2025-07 - present | Fully remote
R&D of AI platforms for legaltech, the public sector and healthcare. Responsible for the CI/CD infrastructure and deployment design deliverables for an AI agent research platform.
- Designed shared templates and GitLab CI pipelines with Argo CD GitOps promotion, progressively automating software delivery while retaining manual approval for production.
- Integrated SBOMs, vulnerability scanning and Cosign signature and attestation verification before promoting the same image across environments.
- Operated AI infrastructure on Kubernetes: LLM serving with KubeAI and vLLM, GPU allocation and persistent storage, MLflow migrations and observability services.
- Developed FastAPI microservices and shared libraries for document management, configuration, audit and authorization. Standardized logging, tracing, probes and graceful service shutdown.
- Developed and deployed a Kubernetes operator using CRDs and Kopf to manage AI agents in development environments, with functional testing and a deployment demonstration.
- Authored architecture studies and deliverables covering CI/CD, deployment, resilience and sizing. Trained teams through guides and workshops, enabling independent pipeline execution.
- Contributed to healthcare AI research by planning reproducible infrastructure and DevSecOps/MLOps workflows.
DevOps Developer
Eustema S.p.A. | 2024-04 - 2025-07 | Fully remote
Infrastructure and automation for the R&D platform, AI document services and support for cloud releases in public-sector projects.
- Built Coder remote development environments on Kubernetes with Terraform templates, Docker and GPU workspaces, and developer onboarding.
- Developed document services and delivery pipelines for a legaltech AI platform. Improved ingestion through load testing and parallelization, and automated GitLab repository backups and exports.
- Designed and developed a framework to evaluate deployed RAG applications, contributing to applied research and its technical report as first author.
- Managed Kubernetes services, storage, monitoring and releases on premises and in the cloud, including GKE and AWS EKS test environments for public-sector projects.
Software Developer
Eustema S.p.A. | 2023-04 - 2024-04 | Fully remote
Moving an AI document platform from research to production on Google Cloud, alongside contributions to rehabilitation medicine research.
- Containerized services and prepared Kubernetes manifests for an AI platform serving a Lombardy regional public-sector organization, contributing to its production deployment on Google Kubernetes Engine (GKE).
- Ran Bandit SAST analysis and load tests. Resolved ingress and probe issues and maintained release images and platform backups.
- Researched and documented HL7 FHIR interoperability and data exchange for rehabilitation medicine research projects.
Company internship and experimental cloud bursting thesis
Eustema S.p.A. | 2022-10 - 2023-04 | Company research
Experimental company thesis on automatically expanding Kubernetes across on-premises infrastructure and private clouds in a hybrid multi-cloud environment.
- Built two OpenStack cloud environments from scratch and connected them to an on-premises cluster to experiment with Kubernetes K3s spanning a hybrid multi-cloud architecture.
- Developed a cloud bursting proof of concept and evaluated automatic resource expansion using containerized services and load tests.
Technical skills
- Kubernetes and cloud: on-premises Kubernetes, GKE, deployments on AWS, Docker, Helm, Kustomize, Linux, NFS, MetalLB and NGINX Ingress, CRDs and Kopf operators.
- CI/CD and GitOps: GitLab CI, Argo CD, environment promotion, rollback, multi-architecture builds, shared templates and Terraform for Coder workspaces.
- DevSecOps: SBOMs with Syft, vulnerability scanning with Grype, signatures and attestations with Cosign, Bandit SAST, Keycloak, JWT and RBAC.
- MLOps and LLMOps: MLflow, KubeAI, vLLM, Ollama, NVIDIA GPU management, MinIO, Langfuse and RAG evaluation with DeepEval.
- Backend and data: Python, FastAPI, Pydantic, Bash, MongoDB, PostgreSQL, Elasticsearch, Neo4j, NATS and Temporal.
- Observability and collaboration: OpenTelemetry, JSON logging, health checks, load testing, technical documentation, onboarding and knowledge transfer.
Education
MSc in Computer and Robotics Engineering
University of Perugia | 2020-09 - 2023-04-28
Data Science curriculum. Grade: 110/110 cum laude. Experimental thesis: building two OpenStack clouds and integrating them with an on-premises cluster for Kubernetes cloud bursting in a hybrid multi-cloud environment.
BSc in Computer and Electronic Engineering
University of Perugia | 2014-09 - 2020
Grade: 99/110. Thesis on designing and analyzing a data center network, with infrastructure simulation using Huawei eNSP.
Italian native; English C1, Cambridge First Certificate in English (2013); French A1.
Professional registration
Registered Information Engineer in Italy, Order of Engineers of the Province of Perugia, Section A, no. 4540, since 1 July 2024. State Examination passed at the University of Perugia, second session 2023.
Official register
Certifications earned
Microsoft Certified Azure Fundamentals AZ-900
Microsoft | 2023
Fundamentals certification.
HCIA-Routing & Switching
Huawei | 2020
Certification earned in routing and switching.
First Certificate in English (FCE)
Cambridge English | 2013
English C1. First Certificate in English earned in 2013.
Selected completed courses
Selected course completion certificates relevant to AI, cloud platforms and software delivery. See LinkedIn for the full list of completed courses.
AI Agents Fundamentals
Hugging Face | 2025
Course completion certificate.
View course certificate
Elements of AI
University of Helsinki and Reaktor | March 2024
Course completion certificate.
View course certificate
Managing Cloud-native Applications with Kubernetes
Coursera | November 2023
Course completion certificate.
View course certificate
Foundations of Red Hat Cloud-native Development
Coursera | November 2023
Course completion certificate.
View course certificate
Jenkins: Automating your delivery pipeline
Coursera | November 2023
Course completion certificate.
View course certificate
Career Essentials in Generative AI
Microsoft and LinkedIn | September 2023
Course completion certificate.
View course certificate
Ethics in the Age of Generative AI
LinkedIn Learning | September 2023
Course completion certificate.
View course certificate
Publications and open source
Publications
First author of A System for Comprehensive Assessment of RAG Frameworks, arXiv technical report, 2025. Coauthor of Attribute-Based Management of Secure Kubernetes Cloud Bursting, IEEE Open Journal of the Communications Society, 2024.
arXiv technical report | IEEE paper
Open source contributions
Merged pull requests in Coder, KubeAI and CheshireCat covering Helm, networking and container connectivity. I maintain personal cross-platform Docker projects, including money4band.
I share tools, guides and experiments as MrColorRain. If you find my work useful, you can support it on Ko-fi with a one-time tip or monthly membership.
Coder contribution | KubeAI contribution | CheshireCat contribution | GitHub profile
Innovation recognition
Special recognition for the most innovative project in Eustema's internal challenge (2023). Originator and coordinator of an AI-based automated penetration testing proof of concept, exploring GANs and MulVAL and presented to the company jury.
Knowledge sharing and professional events
Presented professional roles and enterprise technologies at the University of L'Aquila Career Day (2024) and the University of Perugia Career Day (2025). Attended Red Hat Summit: Connect in Rome (2024 and 2025) and the DLT Workshop in Perugia (2025).
