Download CV (PDF)My team runs the Kubernetes fleets behind Velo, where every site's backend code runs in its own gVisor sandbox on Amazon EKS.
Most of what I write here started as a production incident. When the root cause is in someone else's code, I send the fix upstream: I've contributed to containerd, gVisor and soci-snapshotter.
I also build the guardrails around the AI agents I work with: hooks that block the dangerous command, score the prose, and check the URL first.
Lead Platform Engineer, 18 years across platform and backend engineering. I run multi-region AWS and Kubernetes platforms, isolate untrusted code, and fix production failures at the source, upstream when needed.
Key achievements
- $2.5M+ a yearcloud savings at Wix, Landa and HiredScore
- 20x / 10xfaster builds / deploys at Landa
- 30%better cold start and request time at Velo
- 10xfewer customer incidents at SAP
Open source
- gVisor #14549: deadline on shim runsc calls
- gVisor #14201: fail-stop on stuck systrap context
- containerd #13799: bounded snapshot removal in GC
- soci-snapshotter #2043: fix fd leak in spancache
- security-profiles-operator #1994: AppArmor owner fix
Experience
- 03/2023 - Present
Lead Platform Engineer Velo by Wix.com
- Led the move off GCP to AWS-only: 6 EKS clusters across 3 regions
- Cut cloud cost $1M a year by moving onto Wix's standard systems
- Hardened isolation of untrusted user code with gVisor and strict network policy
- Built the EKS clusters behind Wix's AI agents and remote dev sandboxes
- 09/2022 - 03/2023
Solo Infrastructure Engineer Landa.app
- Rebuilt the cloud infrastructure alone; developers deployed on their own, several times a day
- Saved $800k a year on cloud spend
- 02/2021 - 09/2022
Senior Platform Engineer HiredScore by Workday
- Led the company's first migration of core services from ECS to EKS
- FinOps lead: spot, savings plans and RIs saved $800k a year
- 05/2018 - 02/2021
CI/CD DevOps Engineer Gigya by SAP
- Architected CI for all company services, improving build efficiency by 50%
- Rebuilt configuration deployment; migrated internal tools from OpenStack to AWS
- 10/2016 - 05/2018
Senior Backend Engineer Gigya by SAP
- Broke up the monolith into .NET microservices; cut test run time 10x
- 09/2015 - 10/2016
Senior Software Engineer MTN Technologies LLC
- Built the lead enrichment system and a Hadoop/Spark data warehouse on AWS
- 04/2014 - 09/2015
Backend Software Engineer Votiro
- Lead server-side developer; introduced Continuous Delivery with one-click production deploys
- 07/2011 - 06/2014
Software Engineer Transway
- Cut artifact creation from a day to minutes; .NET services for fare hardware
Skills
- AWS
- EKS
- Kubernetes
- Terraform
- ArgoCD
- Karpenter
- gVisor
- containerd
- Go
- Python
- Prometheus
- Grafana
- FinOps
Education
B.Sc. Computer Science, The Open University of Israel, 2010 - 2017 · CKA, The Linux Foundation, 2022 - 2025