Kristoforus David

David, S.Kom., CSCU, CEH

Tangerang, Banten - Indonesia Contact David

Welcome, you can call me David, Over 9 years of experience in IT Infrastructure, DevOps, and Cloud Engineering. Proven track record of leading IT teams and implementing scalable cloud solutions across multiple industries. Expert in cloud-native architecture, infrastructure automation, and DevOps practices. Strong leadership skills with a focus on driving digital transformation and operational excellence.

Proven IT Leadership with extensive experience in Construction Industry, Corporate Retail, Banking, Health Tech, and Cloud Services. Expertise in building and leading high-performing IT teams, implementing enterprise-grade cloud solutions, and driving digital transformation initiatives. Strong strategic planning and execution capabilities, combined with hands-on technical expertise in DevOps, Cloud Infrastructure, and Security. Consistently deliver business value through innovative technical solutions and process improvements. Recognized for building collaborative teams and fostering a culture of continuous improvement and technical excellence.


Professional Experience

SENIOR DEVOPS & CLOUD ENGINEER

BCI Central BCI CENTRAL
Hubexo HUBEXO

Business: Hubexo (formerly BCI Central) is a leading technology company specializing in construction management software and digital transformation solutions for the construction industry.

• Lead technical strategy and architecture for Hubexo's cloud-native platform, overseeing multi-cloud infrastructure across AWS and Azure regions in APAC and Nordic regions

• Drive digital transformation initiatives, modernizing legacy systems and implementing scalable microservices architecture

• Manage a team of DevOps engineers, implementing CI/CD pipelines, infrastructure automation, and cloud-native practices

• Design and implement robust security frameworks, ensuring compliance with industry standards and best practices

• Optimize cloud infrastructure costs through capacity planning, resource optimization, and automation

• Lead cross-functional teams in implementing DevOps practices and improving operational efficiency

• Implement monitoring and observability solutions using Prometheus, Grafana, and NewRelic APM

• Manage Kubernetes clusters for microservices orchestration and load balancing

• Develop and maintain disaster recovery and business continuity plans

• Collaborate with product teams to ensure technical alignment and successful project delivery

Key Projects

Multi-Region Application Deployment

• Currently leading the deployment of Archify and ArchifySpec products across multiple regions in APAC and Nordic countries

• Implementing geo-redundancy and latency optimization for improved global user experience

• Designing region-specific compliance frameworks to meet local regulatory requirements

• Creating automated multi-region deployment pipelines with region-specific configuration management

October 2024 - Present
(Hubexo)
September 2023 - October 2024
(BCI Central)

DevSecOps Engineer

Business: Health Tech, Medical, and Telemedicine | IT Consultant

Apply technical knowledge to create a modernization roadmap. Solution Architect to meet business and IT needs, ensuring technical viability of new projects and successful deployments while orchestrating key resources and infusing key Infrastructure technologies (Linux IaaS, Security, Networking, etc.), and Application Development and DevOps technologies (e.g. App Service, containers, serverless, microservices, cloud-native, etc.) as appropriate.

• Capacity Planning (analyze EC2 instances usage and convert to reserve instance model).

• Monitor 30+ servers and also systems performance via NewRelic APM, Prometheus, and Grafana Dashboard.

• Setup Cloud automation with AWS CLI, Bash, and python Boto.

• Manage Identity Management to unify diverse cloud and third-party providers.

• Manage Amazon AWS Cloud infrastructure, particularly interested in scalability, high availability, and testable infrastructure.

• Manage all of AWS United States, Singapore, and Indonesia workloads in AWS VPC and achieve high availability— Implement AutoScale as part of a high availability solution.

• Cost-efficient implementation of private networking, and the latest EC2 instance type for all application services.

• Apply security best practices to AWS infrastructure and harden security findings.

• Support the development team in building and designing highly fail-safe applications and infrastructure.

• Develop automation tools to ensure scalability and high availability of our services.

• Drive continues enhancement of software development infrastructure and security: CI/CD, WAF inside cloud services with AWS.

• Define convention and documentation towards the concept of automation.

• Run monitoring and alerting system on webhook Slack Channel.

• Troubleshoot complex infrastructure-related issues which may span across infrastructure and application integrations.

• Provide deliverables of solutions and hotfix.

• Implement Elastic Kubernetes Service and Dashboard for Microservices and Load Balancer.

• Implement Security in the Cloud for Kubernetes API, EC2, S3, VPC, DNS, RDS, Container.

• Managing, supervising, and delegating jobs to other teams to deliver the best solution.

• Improve and monitor hardware, software, and network for the whole company.

• Propose new projects to increase the company's performance, reduce cost, and revenue.

• Manage and involve the project timeline ISO 27001:2013 process and team to deliver the best achievement.

• Collaborate with cross-function teams in tech, design, product, and operations support.

• Interact, coordinate, and negotiate with third-party vendors and partners to learn and gather requirements in order to create new or enhance the existing architecture.

March 2021 - August 2023

Cyber Security Analyst

Business: IT Consultant (Total IT Managed Services)

• IT security management and maintaining the best practice for information security standards and compliance in both internal organizations and external customers/ clients.

• Periodical evaluation of security breaches for internal and external network infrastructure and application environment.

• Frequent combating with the latest threats from APT, zero-day attacks, malware outbreaks.

• Perform vulnerability assessment and penetration testing.

• Monitoring, managing, analyst, detecting, and responding to infrastructure system and application system incidents in SIEM Administrator.

• Monitors network security events, received from monitored servers, and take appropriate action based on security policy and reviewing alert SIEM tools dashboard security appliance hardware.

• Perform analysis of suspicious offense, cyber threat hunting, and logs activity file.

• Coordinate with the across team both internal and external inside the security perimeter with the relevant section if there are any suspicious events and potential vulnerabilities.

• Assist customers with security-related issues.

• Operates SIEM and updates the ticket for any feedback from the resolver group.

• Apply the remediation action regarding any SOC policy and rules with threat intelligent tools

• Carrying out all activities regarding the Security Operation Center Daily Reports to the CISO.

March 2020 - March 2021

iOS Junior Developer

Experience in many roles as a UI/UX Designer, Project Manager, and iOS Developer. As a developer student driven by a passion for being a creative and analytical thinker with demonstrated ability to solve and prevent problems, successful team player, determine strategies, and consistently implement effective solutions with the best-practice method.

In here we can brainstorm using the Challenge Based Learning (CBL) method. Starting from exploring ideas, finding the problem and creating the solution with an application, until the application is published to the App Store.

March 2019 - January 2020

Freelance IT Consultant

Provide Consulting IT solutions and manage architecture for the E-Commerce Product Website for the end-users and transforming the current business process through digital marketing to meet business requirements.

July 2019

IT Technical Support Supervisor

Business: Fashion Retail

• Overall responsibility for IT infrastructure for all PT. Matahari Department Store, Tbk Head Office, DC Warehouse, Branch Stores across Indonesia.

• Maintain all critical information systems and related components including hardware and software, both internally hosted on our own network (i.e. file servers, data storage, and software, etc.), as well as reliable internet access to externally hosted solutions, so that mission-critical tools and data access for users are not interrupted during office hours (8.30 am- 5.30 pm).

• Provide excellent office support to field personnel for all office branch technology, including back-office computer systems, Microsoft Office & Outlook, reliable internet service, and security systems.

• Maintain and configure all branch workstations, printers, etc.

• Negotiate and build relationships with outside vendors for phone and internet service contracts, network support and consulting services, hardware and related software maintenance and replacement as applicable.

• Support user requests for new tools/applications, and integrate such tools with existing systems.

• Maintain consistent, reliable, and secure information by establishing policies, procedures, methods, and standards; including system access and disaster recovery systems.

• Monitor and manage compliance with technology provisions of applicable Company contracts and agreements (software license requirements etc.) as well as data security and integrity.

• Effectively communicate any project or system issues with Senior Management including remediation plans as required.

• Responsible for coordination and completion of all new office systems.

June 2016 - March 2019

Education

University Education

Bina Nusantara University Logo

Bina Nusantara University

Bachelor of Information System

Major in Strategic Information System

GPA: 3.10 / 4.00

System Analysis Solution Architecture IT Strategy Infrastructure & Security Analyst

High School Education

Fons Vitae 1 Logo

Fons Vitae 1 Senior High School

Major in Social Science

Foundation for critical thinking and analytical skills in social contexts

2009 - 2012

Notable Projects

MULTI-REGION CLOUD DEPLOYMENT

Archify & ArchifySpec Global Deployment

  • Led the architecture and deployment of construction management software across APAC and Nordic regions
  • Implemented geo-redundancy and latency optimization strategies using AWS and Azure multi-region configurations
  • Designed region-specific compliance frameworks to meet local data protection regulations
  • Created automated CI/CD pipelines for consistent multi-region deployments with region-specific configurations
AWS Azure Kubernetes Terraform

LEGACY TO CLOUD MIGRATION

Enterprise Infrastructure Modernization

  • Led migration of legacy on-premises systems to cloud-native microservices architecture
  • Reduced infrastructure costs by 40% while improving system reliability and performance
  • Implemented containerization strategy using Docker and Kubernetes for application portability
  • Designed and implemented CI/CD pipelines for automated testing and deployment
Docker Kubernetes CI/CD Microservices

CLOUD SECURITY FRAMEWORK

Enterprise Security Compliance Implementation

  • Designed and implemented comprehensive cloud security framework across multi-cloud environment
  • Established security standards and compliance controls aligned with ISO 27001 and GDPR requirements
  • Implemented automated security scanning and remediation using infrastructure as code
  • Created secure CI/CD pipelines with integrated security testing and validation
IAM WAF CloudTrail GuardDuty

OBSERVABILITY PLATFORM

Enterprise Monitoring & Alerting System

  • Designed and implemented comprehensive monitoring solution using Prometheus, Grafana, and NewRelic
  • Created custom dashboards for real-time performance monitoring across 30+ production servers
  • Implemented automated alerting system with escalation policies and on-call rotations
  • Reduced incident response time by 60% through improved visibility and automated remediation
Prometheus Grafana NewRelic AlertManager

MUSICABLE APP

App for Hearing-Impaired People

  • Founder and Lead Product Designer of innovative iOS application at Apple Developer Academy
  • Developed solution that helps hearing-impaired people enjoy music through vibration and wave form
  • Created new sensory experience allowing users to experience music in alternative ways
  • Led cross-functional team through product design, development, and deployment
iOS Swift UI/UX Accessibility
About Musicable (Work in Progress)

Technical & Leadership Skills

IT Infrastructure Management 95%
DevSecOps Engineer 80%
Solution Architect 70%
Cybersecurity & Compliance 90%
Agile Product Management 60%
Mobile UI/UX Designer 75%
Business Solution 70%
iOS Development 30%

IT Leadership & Management 95%
Problem Solving 80%
DevOps & Cloud Engineering 95%
Communication 70%
Multi-Cloud Architecture 90%