AWS Cloud Networking with Terraform
Five labs on AWS networking. I wrote each environment in Terraform, deployed it, tested it, and tore it down.
- CloudFront
- Global Accelerator
- Site-to-Site VPN
- Transit Gateway
- VPC Endpoints
I'm a technical support engineer at Global-e, investigating merchant issues across payments, shipping and customs. Since early 2026 I've built my own tooling to do that faster: an LLM gathers and cross-checks the data, and I make the calls.
When it once reported that every test had passed and one hadn't, I made the system check claims like that against the real results. I've worked through about 900 cases this way, and 236 mistakes that kept coming back are now blocked or flagged automatically.
Technical Support Engineer @ Global-e · TypeScript, MCP, MSSQL, Snowflake, Coralogix, Playwright
Global-e operates a cross-border e-commerce platform. Technical support requires investigating across 10+ disconnected systems: internal tools, payment providers, databases, observability, ticketing and documentation, email logs, and merchant stores. Investigations relied on tribal knowledge that was hard to transfer.
I built one MCP server that brings the whole investigation lifecycle behind a single interface. It began as a multi-service stack in Python and Go. I rebuilt it as a single TypeScript MCP server, which cut the number of moving parts and widened what it could do.
A single composite tool pulls the complete picture: pricing, payment transaction history, delivery timeline, refund chain, and merchant configuration, with automatic discrepancy detection. Cross-system investigation went from 2+ hours to under 60 seconds.
On any given day the cases touch pricing, payments, duties and taxes, shipping, customs documents, returns and exchanges, refunds, fraud and risk reviews, merchant settings, and the replies sent back to merchants. Each lives in a different system with its own API and data format. The tool brings them into one view. When a merchant reports an issue, I count it across every merchant before escalating, so the escalation carries the real scale.
When a mistake recurs, the system codifies it: write a feedback memory → add a YAML gate → install a pre-tool-use hook → block the failure mode at the tool boundary. Before any customer-facing response goes out, a checker validates it against those learnings: prohibited terminology, escalation-path correctness, factual accuracy, and tone per recipient.
Investigation queries run on read-only database connections. Customer name and address fields stay masked and are decrypted one record at a time, only on explicit request. Small extraction tasks on decrypted text run on a local model with no network egress, and masking uses deterministic regex.
In mid-2026 a hardware failure during a motherboard swap wiped the machine. I rebuilt the whole system from a bare repository in days. Backups came first: an encrypted archive plus a recovery rehearsal that proves the backup actually restores. I used the reset to redesign the routing layer, data-format conventions, and path handling. A golden-master harness now captures each tool's output byte-for-byte, so a refactor that changes behavior by even one byte fails the gate.
The earlier 7-service architecture was technically more impressive. The later one is the one I can still change safely, which turned out to matter more.
Giving an agent tools is half the work. The other half is codifying how it should behave: what to verify before concluding, and when to ask instead of guessing.
Technical Support Engineer · 2023 – Present
Project-based roles
Outside work
Five labs on AWS networking. I wrote each environment in Terraform, deployed it, tested it, and tore it down.

Recruiters and hiring managers, reach out on LinkedIn. My full work history is there too.