Platform / DevOps engineer — cloud infrastructure, IaC, and full-stack delivery. I work across AWS, GCP, and DigitalOcean; reach for Terraform + Ansible when I'm provisioning and React or Astro when I'm shipping a frontend. Five years of shipping things that hold up in production, now doing it independently.
Available for freelance engagements → brett-buskirk.dev
- Cloud infrastructure — VPC design, compute provisioning, firewall rules, zero-trust access via Tailscale (heimdall)
- Observability stacks — Prometheus · Grafana · Loki · Alertmanager, deployed via Ansible and Docker Compose
- IaC & automation — Terraform modules, Ansible roles published on Galaxy, Bash/Python tooling
- CI/CD pipelines — GitHub Actions from typecheck through build to cloud deploy (day-one)
- Agentic tooling — guardrails and CI integration that keep AI coding agents shipping safe, reviewable work (AgentGate · the story)
- Web apps — React · TypeScript · Astro · Vite, from single-page tools to full GitOps deployments (rc-journey-blog)
Infrastructure: Terraform · Ansible · Docker · Linux · Nginx
Cloud: AWS · GCP · DigitalOcean
Languages: TypeScript · JavaScript · Python · Bash · HCL
Web: React · Astro · Vite · Node.js
Observability: Prometheus · Grafana · Loki · Alertmanager · Tailscale
| Project | What it is | Stack |
|---|---|---|
| AgentGate | CI guardrails for AI-agent pull requests — secrets, scope, missing tests, plus an opt-in LLM intent check. Listed on the GitHub Marketplace. | TypeScript · GitHub Action · npm |
| heimdall | Drop-in observability for DigitalOcean — Prometheus · Grafana · Loki · Alertmanager on a Tailscale-secured VPC, provisioned with Terraform + Ansible. | Terraform · Ansible · Docker |
| huginn + muninn | A terminal toolkit that runs my whole GitHub estate — huginn audits every repo against one standard and scaffolds new ones to it; muninn reports what shipped. | Bash · gh CLI |
| claude-ticket-gen | AI CLI that parses roadmap docs and turns them into well-formed GitHub issues. | TypeScript · Claude API · npm |
| Python network toolkit | Packet sniffer, netcat, TCP/UDP clients & servers, SSH client/server — the wire, up close. | Python |
| Ansible Galaxy roles | Reusable roles for DigitalOcean networking, routing, and secure-user setup. | Ansible |
| Day One | Reentry simulator PWA: live the first 90 days after release, one week at a time. | React · TypeScript · PWA |
I build with AI coding agents — openly, and inside a system designed to keep it safe: no direct commits to main, every change gated by an automated review (AgentGate) plus a human sign-off, secret scanning, and signed, verified commits. The full policy → AI-DEVELOPMENT.md. For work in repos I don't own, I bring the portable subset of these guardrails → AI Agent Working Agreement, and the working method underneath it → Agentic Engineering Practices.
That discipline runs estate-wide: I built a small pack of terminal CLIs that hold every repo to one standard — huginn and muninn audit conventions and report what shipped, while geri and freki sweep for security and staleness and clear out cruft. I wrote up how I run a team of coding agents with a chain of command in I Built an Org Chart for My AI Agents.
Usually coding from somewhere off the grid — remote wilderness, good coffee, reliable internet. ☕