Hector Oropesa

I build software and connect the systems behind it. From APIs and AWS infrastructure to servers and workstations, I turn practical problems into tools that make work easier.

Get in touch View experience

TypeScriptPostgreSQLAWSTerraform

Field notes

Writing & ideas

Notes from building software and running systems.

All posts

Latest articleJuly 20, 2026

What Building Repeatable, Battle-Tested CI/CD Pipelines Taught Me

A career growth story about maturing my AWS setup with multi-account organization, IAM Identity Center, billing guardrails, and CI/CD pipelines that other people can trust.

Read article

Software & systems

Experience

Software, cloud infrastructure, and the systems that keep teams working.

Infrastructure engineer

Enterprise MCP

Enterprise tools connected to AI clients through one secure integration layer.

Key contributions

Unified enterprise tool integrations behind a single MCP interface.
Built authenticated employee access and authorization for AI clients.
Automated infrastructure provisioning and service configuration.
Designed deployment workflows for safer releases.

Technology

MCP · API integrations · Secure authentication · Infrastructure automation

Endpoint management & automation

Provisioning Engineer

Device provisioning, policy management, and automation across Microsoft services and NinjaOne RMM.

Key contributions

Administered Microsoft 365 and Entra ID identity and access, including user accounts, groups, roles, and permissions.
Enrolled devices in Intune and configured device policies and automations.
Built provisioning workflows and device management automations with NinjaOne RMM and PowerShell.
Set up provisioning monitoring and notifications when devices finished provisioning.

Technology

Microsoft 365 · Entra ID · Intune · NinjaOne RMM · PowerShell

Infrastructure engineer

Confidential AWS Infrastructure

Repeatable AWS infrastructure with safer state management and deployment planning.

Key contributions

Managed Terraform remote state with S3 versioning and native S3 lockfiles.
Planned GitHub Actions deployments using AWS OIDC instead of long-lived credentials.
Worked with Docker images, ECR for image storage, and ECS for container deployment.
Improved module boundaries across networking, runtime, registry, IAM, and deployment responsibilities.

Technology

AWS · Terraform · ECS · ECR · Docker · S3 · GitHub Actions · OIDC

Business application · On-prem systems

CM Data

Repair and estimate workflows for commercial trucking shops.

Key contributions

Built software around commercial trucking repair and estimate workflows.
Designed the data layer with PostgreSQL and Drizzle, with AWS S3 for file storage.
Deployed on-premises and managed application operations through Coolify.

Technology

TanStack Start · PostgreSQL · Drizzle · AWS S3 · Coolify · On-prem deployment

Production SaaS · Cloud delivery

GraniteSync

Jobs, inventory, and fabricator assignments in one workflow for granite shops.

Key contributions

Built admin workflows for inventory, job creation, project images, and fabricator profiles.
Provisioned AWS infrastructure with Terraform and managed state in versioned S3 storage.
Deployed on EC2 instances with Traefik as a reverse proxy and blue-green releases.
Set up GitHub OIDC deployments and API Gateway routing for safer releases.
Added email notifications when fabricators are assigned new jobs.

Technology

AWS · EC2 · Terraform · Traefik · API Gateway · S3 · PostgreSQL · GitHub Actions · Blue-green deployments

Production website

GD Granite

A fast business website that turns service browsing into customer inquiries.

Key contributions

Built and launched a production website for a local granite business.
Created a validated contact form for more useful customer inquiries.
Focused on fast loading, responsive layouts, and clear service information.

Technology

Astro · TypeScript · React · Responsive design

Live site

Tools & systems

Technology profile

My everyday tools, from applications to infrastructure.

Application development

TypeScript
React
Node.js
PostgreSQL
SQL
REST APIs
Go
Bash
PowerShell

Cloud & automation

AWS
Terraform
Ansible
Docker
GitHub Actions
CI/CD

Systems & networking

Linux
Proxmox
Firewalls
VPNs
Reverse proxies

Endpoint & identity

Microsoft 365 admin
Intune device management
Entra ID admin
NinjaOne RMM

Contact

Get in touch

Have a project or a systems problem? Let’s talk.

Let’s work on

Application development and APIs
Cloud infrastructure and automation
Server and workstation provisioning