Tian Putra Nuhcahya

$ Hi, I'm

Tian Putra Nuhcahya

DevOps Engineer Lead @ iFortepay

Technical lead with 5+ years in DevOps/platform engineering, currently leading DevOps strategy and governance for a PCI DSS-regulated fintech payment platform, with a strong DevSecOps focus (shift-left security, SAST/SCA, SIEM). Own cross-team architecture review, FinOps adoption, and PCI-DSS/ISO 27001 audit engagements, on top of hands-on ownership of multi-cluster Kubernetes (GKE) infrastructure, GitOps, and observability. Experienced mentoring engineers and standardizing SOPs/governance guardrails to balance delivery speed against production-access risk.

Follow Me

$ cat skills.json

# Skills

5+

Years Experience

50+

Projects Shipped

4

Companies

30+

Skills

Google Cloud PlatformGoogle Cloud Platform
AWSAWS
Alibaba CloudAlibaba Cloud
DigitalOceanDigitalOcean
DockerDocker
KubernetesKubernetes
KafkaKafka
RedisRedis
RedpandaRedpanda
JenkinsJenkins
ArgoCDArgoCD
KustomizeKustomize
AnsibleAnsible
HorusecHorusec
TrivyTrivy
SonarQubeSonarQube
SIEM (Wazuh)SIEM (Wazuh)
HashiCorp VaultHashiCorp Vault
KyvernoKyverno
cert-managercert-manager
Cloudflare WAFCloudflare WAF
SnykSnyk
KubecostKubecost
GrafanaGrafana
PrometheusPrometheus
DatadogDatadog
ELK StackELK Stack
Linux ServerLinux Server
GitOpsGitOps
OPNsenseOPNsense

Soft Skills

Communication90%
Team Work85%
Mentoring / Leadership80%
Stakeholder Management85%
Profesional85%
Responsible80%

$ log --oneline --graph --author="me"

# Experiences

  1. DevOps Engineer Lead

    Apr 2026 — Present

    iForte Payment Infrastructure · Jakarta Selatan

    • Lead cross-team architecture review for infrastructure changes, evaluating PCI-DSS payload exposure and sequencing against the platform roadmap.
    • Serve as DevOps/security technical point of contact for PCI-DSS and ISO 27001 audits — reviewing evidence and assigning remediation actions ahead of auditor presentation.
    • Own post-incident RCA process as escalation point for major incidents; drive platform reliability (SRE) roadmap across disaster-recovery and tooling clusters, reporting to leadership.
    • Drive FinOps adoption for cloud workloads via a cost visibility framework, including team-led tooling POCs surfaced to management.
    • Standardize SOPs/governance guardrails balancing delivery velocity against production-access risk in a PCI-DSS-regulated environment.
    • Mentor and technically direct DevOps engineers, including onboarding of new hires and participation in technical interviews.
  2. Senior DevOps Engineer

    Okt 2022 — Apr 2026

    iForte Payment Infrastructure · Jakarta Selatan

    • Designed and operated a multi-cluster managed Kubernetes platform spanning disaster-recovery and tooling environments, with secure private networking.
    • Built a secure CI/CD and GitOps ecosystem for controlled and auditable deployments.
    • Implemented shift-left security in CI/CD — static application security testing, dependency/image scanning, and centralized code-quality checks; enforced TLS and SIEM monitoring.
    • Architected cloud networking, VPC segmentation, and internal load-balancer routing with firewall integration for secure traffic flows.
    • Established a comprehensive observability stack covering metrics, dashboards, SIEM, and centralized log streaming.
    • Collaborated closely with Backend and Compliance teams; informally mentored junior & middle DevOps engineers.

    Key Achievement

    • Migrated critical payment microservices to a managed Kubernetes platform with a zero-downtime, rollback-safe strategy.
    • Designed and deployed a multi-cluster Kubernetes platform with private networking, firewall integration, PCI-aligned segmentation, and secure internal load-balancer routing.
    • Built and standardized CI/CD pipeline infrastructure with resilient backend storage to improve delivery speed and audit readiness.
    • Implemented a full GitOps delivery lifecycle, ensuring governance, traceability, and deployment consistency.
    • Strengthened security posture via SIEM correlation, TLS hardening, and continuous vulnerability scanning.
    • Built end-to-end observability stack, significantly improving incident visibility and recovery time.
    • Standardized Kubernetes onboarding templates, reducing provisioning time from hours to minutes.
  3. Senior DevOps Engineer

    July 2021 — Okt 2022

    PT Jaya Agung Teknologi · Jakarta Utara

    • Design and implement infrastructure clustering system using Google Kubernetes Engine, Jenkins pipeline for Continuous Integration and ArgoCD.
    • Monitoring log and network performance application using Datadog, Prometheus and GCP Log Management.
    • Manage infrastructure team in critical tasks such as production deployment, application patching, and hotfixes in the production environment by develop implement planning.
  4. DevOps Engineer

    Feb 2021 — July 2021

    PT Meteor Inovasi Digital · Tangerang Selatan

    • Working with developers to ensure the development process works as intended and running properly, building and config infrastructure for any application.
    • Ensuring microservices cluster or Cloud Server is safe and protected from security threats or disasters.
  5. TechOps Engineer

    Apr 2020 — Feb 2021

    Freelance · Tangerang

    • Writing Dockerfile, Ansible Playbook, Jenkinsfile, Kubernetes Manifest, etc.
    • Create CICD Pipeline, monitoring tools like Prometheus & Grafana.
    • Configuration instance Server at many Clouds Provider or on-premises servers.

$ ls -la ./projects/

# All About Projects

iFortepay

iFortepay

DevSecOps · October 2022 - Present

iFortePay is an Indonesian payment gateway that lets businesses accept payments through 30+ local and international methods, along with fund disbursement, payment links, and e-signing services.

dockerkubernetesgcpjenkinsargocdkustomizeprometheusgrafana& more tools
Instapay

Instapay

DevSecOps · April 2023 - Present

InstaPay is iFortePay's mobile app for businesses to bill customers over WhatsApp, Telegram, email, or social media and get paid through 20+ methods including QRIS and credit cards.

dockerkubernetesgcpjenkinsargocdkustomizeprometheusgrafana& more tools

Government Payment Infra (NDA)

DevSecOps

Confidential payment infrastructure project for a government client, under NDA.

dockerkubernetesgcpjenkinsargocdkustomizeprometheusgrafana& more tools
CloudBoz

CloudBoz

DevOps · Januari 2022

CloudBoz is a platform that makes it easy for users to manage servers and applications.

dockerkubernetesansible
dumbflix

dumbflix

DevOps · Nov 2020

Inspired by Netflix is a subcription-based streaming service that offers a wide variety of TV shows, movies, anime, documentaries, and more on thousands of internet-connected devices.

dockerredisawscertmanagerjenkinsprometheusgrafana
dumbsound

dumbsound

DevOps · Oct 2020

Dumbsound is a music streaming service, providing music from various countries, artists and record labels.

dockerawsansiblecertmanagerjenkinsprometheusgrafana
FastVid

FastVid

DevOps · April 2021

FastVid is a video sharing and streaming platform for uploading, hosting, and watching videos online.

dockerkubernetesdigitaloceanjenkinsprometheusgrafana
Roar

Roar

DevOps · Mei 2021

Roar is an event and community platform for discovering and connecting around Jakarta's local scene.

dockerdigitaloceanjenkinsprometheusgrafana
Alfamind

Alfamind

DevOps · March 2021

Alfamind is Alfamart's online reselling platform, letting anyone open their own store and earn income by selling products from Alfamart's retail network.

dockerkubernetesalibabacloudjenkinsprometheusgrafana
+

Many more projects along the way