Files
alexa-amundson-resume/roles/06-cloud-engineer.md
Alexa Amundson ec7b1445b5 kpi: auto-update metrics 2026-03-13
RoadChain-SHA2048: c645c1292ab1555e
RoadChain-Identity: alexa@sovereign
RoadChain-Full: c645c1292ab1555ebe6982915536d1c94701ff6bb16c20ed6ef4144eb50c9f984b4bfe5b9902109e8defd958d6be43ced8ec11cf95d6241536cd4da0b75f8fb48cbeb1b9f450c8f665b73d39e837d23e73e2ba4201af4dc40c02a34283efb04b39c612083465536f194f16adfadb1b56f714a65b918f40750f54eebf7724236861de173ec31963ff3b1b988d712be7e5acc3fe391eb804d3fdcfb9ccf77afc732660d23fff801f894318327eabf775eb4f4e67f7f22d07f23b0e17f6594cfe95b83b275fb7baaa97115e86562604fc5b47cc8024574b61396924e0ee2b7e454b0a1480c3076c7ad72408ceb4a75360d2d49c7d805c37ac5315af00e4a8ca2262
2026-03-13 23:16:12 -05:00

2.1 KiB
Raw Blame History

Alexa Amundson

Cloud Engineer

amundsonalexa@gmail.com | github.com/blackboxprogramming


Summary

Needed global reach without global infrastructure costs. Architected a hybrid edge-cloud stack: Cloudflare serverless for global distribution, Pi fleet for sovereignty, WireGuard mesh for secure connectivity — 178 cloud resources managed solo.


Experience

BlackRoad OS | Founder & Cloud Engineer | 2025Present

The Strategy: Edge + Cloud, Not Either/Or

  • Pure cloud is expensive and you don't own the compute. Pure edge is limited and hard to reach. Combined both
  • 99 Pages for global CDN, 23 D1 for serverless databases, 47 KV for edge config, 11 R2 for object storage — all on Cloudflare
  • 5 Pi edge nodes for persistent compute, AI inference, and data sovereignty. WireGuard mesh connects everything. 4 tunnels route 48+ domains

The Architecture: Zero Open Ports

  • No port forwarding, no exposed services. All external traffic flows through Cloudflare tunnels to fleet
  • WireGuard mesh (10.8.0.x) for encrypted inter-node communication. Tailscale overlay (9 peers) for management access
  • RoadNet WiFi mesh (5 APs) provides local device connectivity — devices on the mesh can reach the fleet directly

The Numbers

  • 178 total Cloudflare resources deployed and maintained. 48+ custom domains with automated SSL/TLS
  • Cloudflare Workers for edge compute and API routing — millisecond response times at the edge, heavy processing on fleet

Technical Skills

Cloudflare Pages/Workers/D1/KV/R2/Tunnels, DigitalOcean, WireGuard, Tailscale, Docker, Nginx


Metrics

Metric Value Source
CF Pages live cloudflare.sh — wrangler pages list
D1 Databases live cloudflare.sh — wrangler d1 list --json
KV Namespaces live cloudflare.sh — wrangler kv list
R2 Buckets live cloudflare.sh — wrangler r2 bucket list
Fleet Nodes live fleet.sh — SSH probe to all nodes
Nginx Sites live services.sh — /etc/nginx/sites-enabled via SSH