Skip to content

Commit 162740b

Browse files
committed
feat(cv): consolidate to single high-fidelity CV and finalize refactor
- Update Curriculum Vitae.md with standardized Aumovio headings and #### role titles - Remove Curriculum Vitae_short.md (consolidated into full version) - Finalize Phase 1 refactoring (cleanup, Python 3.13, version pinning) - Push all changes to kelvinjoson.com live site
1 parent 9bfac95 commit 162740b

2 files changed

Lines changed: 46 additions & 91 deletions

File tree

docs/Curriculum Vitae.md

Lines changed: 46 additions & 40 deletions
Original file line numberDiff line numberDiff line change
@@ -5,59 +5,61 @@
55
## **Contact Information**
66

77
- **Name:** Kelvin Joson
8-
- **Role:** Principal Systems Architect | Senior Staff Engineer | AI Security Specialist
8+
- **Role:** Software Engineer (Python) | Principal Architect & Full-Stack Resilience Engineer
99
- **Email:** [kelvin@kelvinjoson.com](mailto:kelvin@kelvinjoson.com)
1010
- **LinkedIn:** [linkedin.com/in/kelvinjoson](https://www.linkedin.com/in/kelvinjoson/)
1111
- **GitHub:** [github.com/kelvinjoson](https://github.com/kelvinjoson)
1212
- **Website:** [www.kelvinjoson.com](https://www.kelvinjoson.com)
13-
- **Location:** Taguig City, Philippines
13+
- **Location:** Pampanga, Philippines | Available: WFH / Makati Onsite
1414

1515
---
1616

1717
## **Professional Summary**
1818

19-
High-impact **Principal Systems Architect** with **19+ years** of experience engineering high-integrity production systems across Semiconductor Manufacturing, Automotive SaaS, and AI-first Cloud Platforms. Expert in **Hexagonal Architecture**, **Resilience Engineering**, and **Identity Governance**, with a proven track record of reducing manual QA overhead by **80%** and accelerating engineering velocity by **25%**.
19+
**Python engineer and AI-First practitioner** with **19+ years** of experience architecting production-grade software across cloud-native platforms, enterprise API ecosystems, and AI-powered backend systems.
2020

21-
Certified **Google Professional Cloud Architect** and **ISC2 Certified in Cybersecurity**, specialized in bridging legacy industrial logic with security-first, framework-agnostic cloud-native ecosystems. Demonstrated mastery in implementing complex distributed patterns (3-Factor Security, Circuit Breakers, Event Sourcing) with zero technical debt.
21+
Deep expertise in **Hexagonal Architecture**, **multi-tenant security patterns** (3-Factor Identity), and **resilience engineering** (Circuit Breaker state machines achieving **~40% cascading failure reduction**). Demonstrated track record of delivering high-quality, audit-ready features in Agile environments — from designing and deploying FastAPI applications on GKE to architecting framework-agnostic domain cores with zero technical debt.
2222

2323
---
2424

2525
## **Core Competencies**
2626

27-
- **Technical Strategy & Architecture:** Hexagonal Architecture (Ports & Adapters), Domain-Driven Design (DDD), Event Sourcing, Distributed Systems, Microservices, Zero-Outage Refactoring.
28-
- **Security & Identity Governance:** 3-Factor Multi-tenant Security (JWT + Header + Infrastructure), OIDC/SAML/OAuth2, Identity Federation (Okta), Zero-Trust Architecture, ISC2 CC.
29-
- **Cloud & DevOps:** Google Cloud Platform (PCA), AWS, Azure, Terraform/Terragrunt, Kubernetes (GKE), Docker, CI/CD (Jenkins, GitHub Actions), Helm.
30-
- **Leadership & Productivity:** AI-First Engineering (GitHub Copilot, Google ADK Builder), SAFe 6 DevOps Practitioner, PSPO I, Global Rollout Coordination.
27+
- **Architectural Patterns:** Hexagonal Architecture (Ports & Adapters), Dependency Injection, Domain-Driven Design (DDD), Framework-Agnostic Core Isolation, SOLID.
28+
- **Python Engineering:** FastAPI, Pytest (BDD/TDD), Playwright, Pandas, NumPy, Matplotlib, Pydantic, Strongly-typed Python (frozen dataclasses).
29+
- **Resilience & Fault Tolerance:** Circuit Breaker state machines (CLOSED → OPEN → HALF_OPEN), Exponential Backoff with Jitter, Cascading Failure Mitigation.
30+
- **Security & Identity Governance:** 3-Factor Multi-tenant Isolation (JWT + Header + Infrastructure), Zero-Trust Architecture, Okta SAML/OIDC Federation.
31+
- **AI-First Development:** GitHub Copilot (Certified), Google AI Professional (Feb 2026), GCP ADK, LLM-assisted engineering workflows, Prompt Injection Threat Modeling.
32+
- **Cloud & Deployment:** Google Cloud Platform (Professional Architect), GKE Autopilot, Cloud Run, AWS Migration, Terraform/Terragrunt, GitHub Actions.
3133

3234
---
3335

3436
## **Professional Experience**
3537

36-
### **AUMOVIO (Formerly Continental)** | **Taguig City, Philippines**
37-
**Lead Developer / Systems Architect** | **Jul 2025 – Present**
38+
### **Aumovio (Formerly Continental)** | **Taguig City, Philippines**
3839

39-
- Led the AWS-to-GCP migration for a SaaS Software-Defined Vehicle (SDV) CI/CD Engineering Portal, implementing a teardown-safe identity governance framework with **100% test coverage** for security-critical paths.
40-
- Architected a **"Secure FastAPI Broker"** as a centralized OIDC/SAML inspection layer, ensuring zero production incidents during a complex multi-protocol identity transition.
41-
- Accelerated Program Increment (PI) delivery by **25%** through the integration of specialized AI agents (Google ADK) and automated multi-tenant infrastructure mapping.
42-
- Engineered backend transport policies including **TLS enforcement and stateful retry logic**, hardening the platform against transient failures and lateral movement attacks.
40+
#### **Lead Developer (Platform Architecture Scope)** | **Jul 2025 – Present**
4341

44-
### **AUMOVIO (Formerly Continental)** | **Taguig City, Philippines**
45-
**Senior Consultant, MES Integration / ICT Business Analyst** | **Jul 2014 – Jun 2025**
42+
- **AI-Powered Feature Delivery (Python/FastAPI):** Designed and deployed a **Secure FastAPI Broker** on GKE as a multi-protocol reverse proxy for Okta-integrated applications, enabling centralized inspection of OIDC, SAML, and OAuth2 flows.
43+
- **AI-First Engineering Practice:** Championed AI-augmented engineering workflows using GitHub Copilot and Google AI tooling; led LLM-assisted engineering pilots that accelerated internal platform development velocity.
44+
- **AEC AI Agent (GCP Vertex AI / ADK):** Built a production AI agent orchestrating Jira, Gitea, and GCP Secret Manager via FastMCP; enforced multi-tenant security via Okta Private Key JWT and prefix-scoped Secret Manager access.
45+
- **Cloud-Native Deployment & CI/CD:** Provisioned and automated GCP/AWS environments using Terraform and GKE Autopilot; led ground-up GCP rebuild delivery for legacy AWS platform capabilities.
46+
- **AI Agent Architecture & Quality Governance:** Designed and validated an Okta-governed, identity-centric AI agent architecture for GCP ADK; evaluated threat mitigations including prompt injection and data exfiltration.
4647

47-
- Reduced manual QA overhead by **80%** by designing and implementing a Python-based **Automated Testing Framework** (pytest, Playwright, BDD), enabling continuous validation of monthly functional releases.
48-
- Served as **Product Owner (SAFe)** for Core System modules, managing the global rollout of Manufacturing Execution Systems (MES) across APAC, EMEA, and the Americas.
49-
- Integrated high-volume shopfloor equipment (AOI, SPI, SMD placement) via PLC TCP/IP protocols, ensuring **100% compliance** with global manufacturing application rules.
50-
- Recognized with the **ITCA Inspire Performance Award (Q1 2023)** for outstanding performance in bridging business requirements with technical execution.
48+
#### **Senior Consultant – MES Integration & Product Owner** | **Jul 2014 – Jun 2025**
5149

52-
### **AUMOVIO (Formerly Continental)** | **Taguig City, Philippines**
53-
**Manufacturing Application Integration Consultant** | **May 2010 – Jun 2014**
50+
- **Python Automation Framework:** Architected and delivered a **Python-based BDD automated testing framework** (Playwright/Pytest) enforcing data contract validation; delivered an **80% reduction in manual QA labor**.
51+
- **Agile Product Delivery at Scale:** Led SAFe 6 Product Ownership for Core MES modules across APAC/EMEA/NAFTA; managed backlogs and PI Planning across global Agile Release Trains.
52+
- **Parallel Platform Engineering:** Managed functional parity of application modules across VM and Kubernetes-based environments during a high-stakes migration; enforced zero data-loss standards.
53+
- **Data Analysis & Reporting (Python):** Leveraged Python (Pandas, NumPy, Matplotlib) and Power BI to produce operational quality dashboards and compliance reports.
5454

55-
- Phased out legacy traceability systems by migrating pilot production lines to standardized MES across APAC (Sejong, Changchun, Penang).
56-
- Developed critical equipment interfaces using **C# .NET, MS SQL, and PLC TCP/IP**, establishing a standard frontend data collection model.
57-
- Delivered region-wide technical training on OEE/OPM systems to engineering teams, improving operational transparency.
55+
#### **Manufacturing Application Integration Consultant** | **May 2010 – Jun 2014**
5856

59-
### **TEXAS INSTRUMENTS** | **Baguio City, Philippines**
60-
**Test Product Engineer** | **Nov 2005 – Apr 2010**
57+
- **API & Interface Engineering (C#, SQL, TCP/IP):** Developed critical system interfaces bridging shop-floor equipment with enterprise data layers, establishing end-to-end traceability.
58+
- **Regional Platform Standardization:** Led migration of APAC pilot production lines to standardized MES platform across a distributed multi-site environment.
59+
60+
### **Texas Instruments** | **Baguio City, Philippines**
61+
62+
#### **Test Product Engineer** | **Nov 2005 – Apr 2010**
6163

6264
- Improved manufacturing yield by **6%** and operational efficiency by **5%** by developing a real-time IDDQ monitoring and thermal runaway prevention tool (Perl, SQL/Oracle).
6365
- Accelerated production ramp-up for new semiconductor devices by optimizing test programs and conducting rigorous Gauge R&R studies.
@@ -66,33 +68,37 @@ Certified **Google Professional Cloud Architect** and **ISC2 Certified in Cybers
6668

6769
## **Selected Projects**
6870

69-
### **Lean Plexus PoC (2026) | Hexagonal Architecture & Resilience Engineering**
71+
### **Hardened Architecture & Multi-Tenant Security**
72+
7073
*Stack: Django 5.x, Next.js 14, PostgreSQL, TypeScript, PlantUML*
7174

72-
- Architected a **100% framework-agnostic core** by decoupling domain logic from infrastructure ports, enabling seamless portability across Python runtimes.
73-
- Implemented **3-Factor Multi-tenant Security** (JWT + Header + Infrastructure token) with fail-closed enforcement, ensuring strict tenant isolation.
74-
- Engineered a stateful **Circuit Breaker** with exponential backoff in the transport layer, reducing cascading failures by approximately **40%** in high-latency scenarios.
75+
- **Framework-Agnostic Core Domain:** Isolated 100% of business logic into a `core/` package with zero framework imports; decoupled domain models via Dependency Injection.
76+
- **3-Factor Multi-Tenant Isolation:** Implemented strongly-typed tenant identity validation with fail-closed enforcement; **zero violations** across full test suite.
77+
- **Circuit Breaker State Machine:** Designed a full state machine (CLOSED → OPEN → HALF_OPEN) reducing cascading failures by approximately **40%**.
78+
- **PlantUML Architectural Documentation:** Produced high-fidelity diagrams for Hexagonal Architecture, 3-Factor security, and Circuit Breaker patterns.
79+
80+
### **AI-Powered Identity Broker (Personal Python Project)**
7581

76-
### **Identity-Centric AI Agent Governance (2025) | Cloud Security & AI**
77-
*Stack: GCP, Google ADK, Terraform, Python*
82+
*Stack: FastAPI, Okta, OpenTelemetry, Docker*
7883

79-
- Designed an identity-governed architecture for AI agents on GCP, using Workload Identity and cross-project impersonation to enforce least-privilege.
80-
- Developed automated teardown and cleanup logic for identity bindings, preventing "identity debt" in dynamic engineering environments.
84+
- Built a FastAPI multi-protocol identity broker intercepting Okta OIE OIDC (PKCE, JWKS verification) and SAML flows; exposes data to AI agents via FastMCP.
8185

8286
---
8387

8488
## **Certifications & Training**
8589

90+
- **Google AI Professional**, Google (2026)
8691
- **Professional Cloud Architect**, Google Cloud (2026)
8792
- **Certified SAFe® 6 DevOps Practitioner**, Scaled Agile (2024)
88-
- **Microsoft Certified: Azure AI Fundamentals**, Microsoft (2024)
93+
- **Certified SAFe® 6 Product Owner / Product Manager**, Scaled Agile (2023)
8994
- **Certified in Cybersecurity (CC)**, ISC2 (2023)
90-
- **Professional Scrum Product Owner I (PSPO I)**, Scrum.org (2023)
91-
- **Google Cloud Skill Badges:** Architecture, Networking, GKE Cost Optimization, Terraform, AI ADK Builder.
95+
- **Playwright with Python for Web Automation Testing**, Udemy
96+
- **Python for Everybody Specialization**, University of Michigan
9297

9398
---
9499

95100
## **Education**
96101

97-
- **Master in Information Technology** (18 units completed) | University of the Cordilleras | 2009
98-
- **BS Electronics & Communications Engineering** | Bulacan State University | 2004
102+
- **Master in Information Technology** (18 units) | University of the Cordilleras
103+
- **BS Electronics & Communications Engineering** | Bulacan State University
104+
- **Registered Electronics Engineer** | Professional Regulation Commission, Philippines

docs/Curriculum Vitae_short.md

Lines changed: 0 additions & 51 deletions
This file was deleted.

0 commit comments

Comments
 (0)