Luca Borruto
ENFR
Open to DevOps/Platform roles · Geneva or fully remote

DevOps / Platform Engineer, based near Geneva.

I’m Luca. Eight years in IT, the last 2+ building and running Agicap’s internal platform hands-on: Kubernetes (GKE, AKS), Terraform, ArgoCD, Vault and Prometheus/Grafana/Loki. 49 applications run on it, along with the internal tools I build for it.

Location
Archamps (FR), 20 min from Geneva
Work permit
French national, Swiss G permit eligible
Languages
French (native), English (fluent)
Contract
Permanent or contract
Get in touch
Recent workCV
8 yrs
in IT
49
apps on the platform
< 90 s
to roll back
2,871
Okta resources in Git

Recent work.

04 / 04
01Platform · GitOps
2024 — Now

Kubernetes platform with GitOps CI/CD

49 applications run on the platform. Deployments and infrastructure changes all go through Git.

  • Built the platform on GKE with Terraform, ArgoCD, HashiCorp Vault, cert-manager, external-dns and keyless CI (Workload Identity Federation).
  • Moved deployments behind ArgoCD, so merging to main triggers the deployment automatically. Internal applications are packaged as Helm charts with separate values per environment.
  • Put Terraform behind Atlantis, so every infrastructure change goes through a pull request with the plan visible in the review.
  • Rebuilt the production cluster on a new IP range and cut over in one day (24/06/2026).
  • Set up Prometheus, Grafana and Loki for monitoring, with Slack alerts per team and synthetic probes.
< 90 srollback, from ~2 h
100%infra changes by PR
8core components
GKEAKSTerraformAtlantisArgoCDHelmVaultPrometheusGrafanaLoki
02Identity · Kubernetes operator
2024 — Now

Kubernetes operator that manages the whole Okta configuration from Git

2,871 Okta resources are declared in Git and applied by the operator.

  • Built a Kubernetes operator that keeps Okta accounts, groups and applications in sync with the configuration stored in Git.
  • Added guards so a bad change cannot delete accounts or groups in bulk.
  • Changes are checked in a preview environment before they reach production.
  • 12 alerts monitor the operator in production.
745accounts
488groups
384applications
KubernetesOperatorOktaGitOps
03Internal tools · LLM
2024 — Now

Alfred, an LLM IT-support bot on Slack

104 people used it in its first 30 days company-wide.

  • Built a Slack bot that answers IT questions with Claude, grounded in a Notion knowledge base.
  • Runs on Kubernetes, on the internal platform.
  • Serves local admin passwords on request, without a support ticket. A separate automation rotates these passwords and keeps them encrypted.
766messages
12%became tickets
72passwords
ClaudeSlackNotionKubernetes
04Industrial · SEVESO · VoIP
2021 — 2023

Telephony migration on a SEVESO high-threshold industrial site

Full migration of the site’s telephony to VoIP (SIP), on a live, regulated industrial site.

  • Inventoried every phone, key line, and safety-critical station on-site before planning the migration.
  • Migrated in small batches, running old and new systems in parallel to allow immediate rollback.
  • Carried out the work outside production hours, with the operations team briefed and able to halt the migration at any point.
0 ssafety downtime
570employees
100%inventoried
VoIPSIPLinuxVMware ESXIndustrial networkProject mgmt

Side projects.

github.com/lborruto

Built on my own time, open source.

  • Python
    Kelvin
    Self-hosted heating control for Cozytouch radiators, with Linky energy history and tariff-based cost estimates. PWA, Docker, CI and release pipelines, MCP server.
  • Go
    jackstream
    Self-hosted Stremio addon backed by Jackett. Static Go binary on a scratch image (~20 MB, <50 ms start), multi-arch (amd64/arm64), published to Docker Hub and GHCR, CI with CodeQL and automated releases.
  • nginx · Shell
    indexof
    Self-hosted file server built on nginx’s “Index of /”: login, uploads, search, streamed zips. Two containers, CI with CodeQL.
  • TypeScript
    mcp-leclerc-drive
    MCP server that lets Claude search products and fill an E.Leclerc Drive cart.

The toolbox.

Cloud & Platform
KubernetesKubernetes operatorsGCPAzureAWSDockervSphere
IaC, Delivery & Observability
TerraformAtlantisArgoCDHelmGitHub ActionsPrometheusGrafanaLokiELK Stack
Identity, Security & Network
OktaHashiCorp VaultIntuneApple Business ManagerFreeRADIUSCisco MerakiFortinet
Languages & OS
GoPythonTypeScriptBashNode.jsLinux

Where I’ve been.

2018→
  1. 2024 — Now
    IT System Administrator (Platform/DevOps scope)
    Agicap · Lyon
    Built and run the internal platform (49 apps), the Okta operator and Alfred, the IT-support bot.
  2. 2023 — Now
    Freelance Consultant
    Singular-Solutions · Lyon
    Short engagements across platform, identity and network work.
  3. 2021 — 2023
    IT Infrastructure Project Manager
    Elkem Silicones · Lyon / SEVESO site
    Ran infra projects on a regulated chemical site.
  4. 2018 — 2021
    IT Support Technician
    Tessi · Lyon
    Daily ops, on-site support, internal tooling.
Education2023
Chef de Projets Expert en Systèmes, Réseaux et Cybersécurité
Master’s level · RNCP level 7 (EQF 7)
IPI · IT engineering school
  • 2023
    Administrateur Système, Réseaux et Bases de Données
    Bachelor’s level · RNCP level 6 · IPI
  • 2021
    BTS Services Informatiques aux Organisations
    RNCP level 5 · AFIP Formations
· LET’S TALK

Open to DevOps/Platform roles in Geneva or fully remote.

Permanent or contract, DevOps / Platform, or systems administration. Based near Geneva, eligible for a Swiss cross-border (G) work permit. French (native), English (fluent). On-site or hybrid in the canton of Geneva, or fully remote. Replies within a day.

luca.borruto@gmail.com
LinkedInGitHub