Files
alexa-amundson-resume/roles/06-cloud-engineer.md
Alexa Amundson ec7b1445b5 kpi: auto-update metrics 2026-03-13
RoadChain-SHA2048: c645c1292ab1555e
RoadChain-Identity: alexa@sovereign
RoadChain-Full: c645c1292ab1555ebe6982915536d1c94701ff6bb16c20ed6ef4144eb50c9f984b4bfe5b9902109e8defd958d6be43ced8ec11cf95d6241536cd4da0b75f8fb48cbeb1b9f450c8f665b73d39e837d23e73e2ba4201af4dc40c02a34283efb04b39c612083465536f194f16adfadb1b56f714a65b918f40750f54eebf7724236861de173ec31963ff3b1b988d712be7e5acc3fe391eb804d3fdcfb9ccf77afc732660d23fff801f894318327eabf775eb4f4e67f7f22d07f23b0e17f6594cfe95b83b275fb7baaa97115e86562604fc5b47cc8024574b61396924e0ee2b7e454b0a1480c3076c7ad72408ceb4a75360d2d49c7d805c37ac5315af00e4a8ca2262
2026-03-13 23:16:12 -05:00

51 lines
2.1 KiB
Markdown
Raw Blame History

This file contains ambiguous Unicode characters
This file contains Unicode characters that might be confused with other characters. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.
# Alexa Amundson
**Cloud Engineer**
amundsonalexa@gmail.com | [github.com/blackboxprogramming](https://github.com/blackboxprogramming)
---
## Summary
Needed global reach without global infrastructure costs. Architected a hybrid edge-cloud stack: Cloudflare serverless for global distribution, Pi fleet for sovereignty, WireGuard mesh for secure connectivity — 178 cloud resources managed solo.
---
## Experience
### BlackRoad OS | Founder & Cloud Engineer | 2025Present
**The Strategy: Edge + Cloud, Not Either/Or**
- Pure cloud is expensive and you don't own the compute. Pure edge is limited and hard to reach. Combined both
- 99 Pages for global CDN, 23 D1 for serverless databases, 47 KV for edge config, 11 R2 for object storage — all on Cloudflare
- 5 Pi edge nodes for persistent compute, AI inference, and data sovereignty. WireGuard mesh connects everything. 4 tunnels route 48+ domains
**The Architecture: Zero Open Ports**
- No port forwarding, no exposed services. All external traffic flows through Cloudflare tunnels to fleet
- WireGuard mesh (10.8.0.x) for encrypted inter-node communication. Tailscale overlay (9 peers) for management access
- RoadNet WiFi mesh (5 APs) provides local device connectivity — devices on the mesh can reach the fleet directly
**The Numbers**
- 178 total Cloudflare resources deployed and maintained. 48+ custom domains with automated SSL/TLS
- Cloudflare Workers for edge compute and API routing — millisecond response times at the edge, heavy processing on fleet
---
## Technical Skills
Cloudflare Pages/Workers/D1/KV/R2/Tunnels, DigitalOcean, WireGuard, Tailscale, Docker, Nginx
---
## Metrics
| Metric | Value | Source |
|--------|-------|--------|
| CF Pages | *live* | cloudflare.sh — wrangler pages list |
| D1 Databases | *live* | cloudflare.sh — wrangler d1 list --json |
| KV Namespaces | *live* | cloudflare.sh — wrangler kv list |
| R2 Buckets | *live* | cloudflare.sh — wrangler r2 bucket list |
| Fleet Nodes | *live* | fleet.sh — SSH probe to all nodes |
| Nginx Sites | *live* | services.sh — /etc/nginx/sites-enabled via SSH |