Infrastructure System Engineer | Cloud & Backend Specialist
๐ Tokyo, Japan
Cloud and Backend Engineer with extensive experience in administering and optimizing customer systems, ensuring reliability through preventive maintenance, and providing proactive issue resolution. Currently working as an Infrastructure System Engineer in Tokyo, Japan.
Skilled in system installation, configuration, and implementation, with a strong focus on supporting new projects. Experienced in migrating applications from virtual machines to containers, enhancing scalability and efficiency. Proficient in backend development with expertise in Golang, Node.js, Python, and Bash scripting.
Experienced in setting up monitoring tools such as Grafana, Prometheus, and Alertmanager for enhanced system observability and alerting. Adept at working collaboratively with teams to maintain seamless operations and prevent future system issues.
Backend & Programming:
- ๐น Golang - Primary backend development
- ๐ Python - Automation and scripting
- ๐ข Node.js - API development
- ๏ฟฝ Bash Scripting - Automation and DevOps
Cloud & Infrastructure:
- โ๏ธ Cloud Infrastructure - AWS, GCP migration expertise
- โ Kubernetes - Container orchestration and management
- ๏ฟฝ Docker - Containerization and deployment
- ๐๏ธ Terragrunt - Infrastructure as Code
DevOps & Monitoring:
- ๐ Grafana - System monitoring and visualization
- ๐ Prometheus - Metrics collection and alerting
- ๏ฟฝ Alertmanager - Alert routing and management
- ๐ GitLab CI/CD - Continuous integration and deployment
Frontend & Web:
- โ๏ธ React / Next.js
- ๐ Astro
- ๏ฟฝ TypeScript
- ๐จ Tailwind CSS
Databases & Storage:
- ๐๏ธ Elasticsearch - Search and analytics
- ๐ PostgreSQL
- ๐ SQLite, D1
April 2025 - Present | Tokyo, Japan
- Lead design and development of system architecture for new services
- Develop software solutions and maintain high-quality, secure code
- Create and maintain technical documentation
- Collaborate with teams to deliver features with quality and speed
September 2024 - March 2025 | Semarang, Indonesia
- Administered customer systems with regular checks and maintenance
- Led migration of applications from VMs to containers
- Set up monitoring tools: Grafana, Prometheus, and Alertmanager
- Provided technical support for new project implementations
July 2022 - July 2024 | Indonesia
- Led AWS to GCP migration using Terragrunt for scalable infrastructure
- Implemented robust Kubernetes monitoring tools
- Optimized deployment workflows reducing complexity and improving reliability
- Conducted cost monitoring and optimization for K8s clusters
- Automated operational tasks using Bash and Python scripts
July 2021 - April 2022 | Surakarta, Indonesia
- Set up and managed Kubernetes clusters for dev/prod environments
- Configured GitLab CI/CD pipelines improving delivery speed
- Implemented cost-efficient cloud resource strategies
This repository contains my personal website and production-ready URL shortener service built with modern technologies and deployed on Cloudflare Workers.
- ๐ Custom URL Shortener - Create branded short links with analytics and metadata
- ๐ Analytics Dashboard - Track clicks and manage URLs with comprehensive stats
- ๐ท๏ธ Category System - Organize links with public category pages
- ๐ Blog System - Full-featured blog with categories and tags
- ๐ Secure Admin Panel - JWT-based authentication with HTTP-only cookies
- ๐ Dark Mode - Modern UI with theme switching
- โก Edge Performance - Deployed on Cloudflare Workers for sub-50ms latency
- ๐ก๏ธ Security Hardened - SSRF protection, rate limiting, CSP, and comprehensive security measures
- ๐ผ๏ธ Image Optimization - Cloudflare Image Resizing with automatic WebP/AVIF conversion
- ๐งช 90.95% Test Coverage - Comprehensive testing with Vitest
Frontend & Framework:
- โก Astro 5.15.1 - Modern SSR web framework
- ๐ TypeScript 5.9.3 - Type-safe development (strict mode)
- โ๏ธ React 19.2.0 - Interactive admin components
- ๐จ Tailwind CSS 3.4.18 - Utility-first styling
Backend & Infrastructure:
- ๐๏ธ Cloudflare D1 - Serverless SQLite database
- ๐พ Cloudflare KV - Multi-tier caching with 5 specialized instances
- โ๏ธ Cloudflare Workers - Global edge deployment
- ๐ JWT Authentication - Secure session management
Security & Quality:
- ๐ก๏ธ SSRF Protection - Blocks private IPs and metadata endpoints
- ๐ฆ Rate Limiting - Sliding window algorithm
- ๐ Content Security Policy - Hardened CSP without unsafe-eval
- ๐งช Vitest 2.1.8 - 95 tests passing, 90.95% coverage
- โ ESLint & Prettier - Zero errors, clean codebase
Visit heri.life to see it in action!
Layered Architecture (3-Tier):
- Presentation Layer: Astro SSR pages + React components + RESTful API routes
- Business Logic Layer: Repository pattern with decorator-based caching
- Data Layer: D1 database + multi-tier KV cache (5 specialized instances)
Performance:
-
95% cache hit rate expected
- ~50ms P50 latency on cache hits
- Edge-optimized with Cloudflare Workers
- Automatic image optimization at edge
Security Features:
- SSRF protection in URL metadata fetcher
- SQL injection prevention with prepared statements
- Host header validation against trusted domains
- Rate limiting on all critical endpoints
- Honeypot detection for suspicious activity
- No CORS (secure default for SSR app)
- SECURITY.md - Security policy and vulnerability reporting
- schema.sql - Database schema with indexes
- ๐ฏ DevOps Foundation Certification
- โก LFEL1014: Scaling Cloud Native Applications with KEDA
- ๐ EF SET English Certificate 74/100 (C2 Proficient)
- ๐บ๐ธ English - Professional Working Proficiency
- ๐ฎ๐ฉ Indonesian - Native/Bilingual
- ๐ฏ๐ต Japanese - Elementary
Building modern web applications | DevOps & Backend Engineering
๐ Always learning โข ๐ Creating useful tools โข ๐ Sharing knowledge ๐๏ธ System Architecture โข โ๏ธ Cloud Infrastructure โข โ Kubernetes โข ๐ง Automation
I'm always interested in new opportunities and collaborations. Feel free to reach out!
- ๐ Website: heri.life
- ๐ง Email: mail@heri.life
- ๐ผ LinkedIn: heri.life/li
"Code is poetry written in logic" โจ
Thanks for visiting my profile! Feel free to explore my repositories and don't hesitate to get in touch.





