Bood Atsatarakun

Senior DevOps Engineer

Bood Atsatarakun

About Me

Software engineer with 7+ years of experience, transitioned from game development into infrastructure, DevOps, and — most recently — security-focused platform engineering. Currently a DevOps Engineer at Bluebik, where my scope has grown from cloud infrastructure and reliability into DevSecOps: building the security controls around the platforms I run, not just the platforms themselves.

I design and manage multi-account AWS infrastructure (dev/sit/uat/prod) as code with Terraform, and build CI/CD pipelines with GitHub Actions, Jenkins, and GitLab CI/CD across those accounts. On the platform side, I run container orchestration with Docker and Kubernetes (EKS), API gateway management with Kong, and identity management with Keycloak, backed by observability through CloudWatch and Grafana.

On the security side, I own WAF rule management, GuardDuty and Security Hub findings, IAM least-privilege design, and Secrets Manager rotation — plus a cross-region disaster recovery architecture (Aurora Global Database, S3 replication, VPC endpoints) so the platform survives a regional failure, not just day-to-day load.

Skills & Expertise

Proficient

Cloud: AWS

IaC & Automation: Terraform, Ansible

Containers: Docker, Kubernetes (EKS)

CI/CD: GitHub Actions, Jenkins

Cloud Security: AWS WAF, GuardDuty, AWS Security Hub, IAM, Secrets Manager, Trivy, SonarQube, OWASP

Disaster Recovery: Aurora Global Database, S3 Cross-Region Replication, VPC Endpoints

Observability: CloudWatch, Prometheus, Grafana

Networking & Security: Kong API Gateway, Keycloak, Nginx

Backend: Node.js, NestJS

Programming Languages: TypeScript, Python, C#

Comfortable

Cloud: GCP, DigitalOcean, Firebase

Backend: FastAPI, Flask

Messaging: AWS SQS

Database: MySQL, PostgreSQL, Redis

Networking: Cloudflare, Wireguard VPN

Observability: Elastic Stack, Sentry

Tools: Uptime-Kuma

CI/CD: GitLab CI/CD, Fastlane

Data Engineering: Apache Airflow

Game Engines: Unity, Unreal Engine 4

Familiar

Cloud: Azure

Messaging: RabbitMQ

Networking: Agones, Traefik

Data Engineering: Prefect, Metabase

Observability: Zipkin

CI/CD: Fastlane

CMS: Strapi

Programming Languages: C++, PHP

Game Engines: Cocos Creator

Working Experience

Bluebik

  • Senior DevOps Engineer
    Apr 2025–Current

Bluebik is an enterprise IT consulting and technology solutions company serving large-scale enterprise clients across Thailand and the region.

Thailand Post — THP Superapp (Client Project)

  • Built multi-account AWS infrastructure for DEV, SIT, UAT, and production with Terraform and Amazon EKS
  • Managed ArgoCD GitOps applications for Kubernetes workloads across DEV, SIT, UAT, production, and disaster recovery
  • Maintained Jenkins pipelines for Terraform deployments, Trivy image scanning, and ExternalSecret synchronization
  • Operated Kubernetes platform services including Kong, Keycloak, and Karpenter
  • Secured API traffic with Kong, AWS WAF, rate limiting, and IP allowlisting
  • Implemented CloudWatch observability and cross-region disaster recovery between Bangkok and Singapore

DGA — Payment Platform (Client Project)

  • Built deployment workflows to promote Docker images from pre-production to production Amazon ECR
  • Managed Amazon ECS task definitions, service deployments, and AWS Batch job definitions for payment services
  • Developed operational tools for AWS Secrets Manager, Security Hub, and S3 inventory audits
  • Produced deployment runbooks and investigated production incidents

Orbit Digital — ORora (Client Project)

  • Managed Amazon EKS with ArgoCD and Helm-based GitOps for application and infrastructure workloads
  • Operated APISIX API gateway, GitLab Runner, External Secrets, and Karpenter
  • Maintained GitLab CI/CD pipelines with SonarQube and Trivy security scanning
  • Optimized Aurora database usage, Kubernetes node pools, and scheduled workloads for cost and performance

Infrastructure & Cloud

  • Designed and maintained enterprise-grade AWS infrastructure across multiple client projects
  • Managed multi-account environments with AWS Organizations and SCPs; used Terraform and Ansible for IaC
  • Ran Docker and Kubernetes (EKS) workloads; CI/CD with GitHub Actions and Jenkins, GitOps with ArgoCD
  • Built serverless architecture with AWS Lambda and SAM (AWS Serverless Application Model) for event-driven workloads
  • Set up monitoring and alerting with Prometheus, Grafana, and Elastic Stack

Security & Compliance

  • Owned IAM least-privilege design across multi-account AWS Organizations, including role and policy reviews
  • Applied firewall policies to protect enterprise environments
  • Managed AWS WAF rule sets to protect client-facing applications from common web exploits
  • Triaged and remediated findings from GuardDuty and AWS Security Hub across all accounts
  • Rotated and managed secrets with AWS Secrets Manager
  • Designed a cross-region disaster recovery architecture (Aurora Global Database, S3 replication, VPC endpoints) for platform resilience against regional failure

Vendor & Stakeholder Collaboration

  • Worked directly with enterprise clients and third-party vendors to design and deliver infrastructure solutions
  • Provided technical consulting and architecture guidance to client engineering teams

Learn Cloud

  • DevOps Engineer
    May 2024–Nov 2024

Infrastructure & Cloud

  • Designed multi-environment infrastructure (dev, staging, prod) across separate AWS accounts with VPC peering and transit gateway
  • IaC automation with Terraform and Ansible; AWS ECS/Fargate, Cloudflare DNS/CDN, WireGuard VPN
  • Linux server management; Nginx, Keycloak IAM, Portainer, Prometheus/Grafana/Uptime-Kuma monitoring
  • Firewall, Fail2Ban, and CrowdSec for security and intrusion prevention

Development & CI/CD

  • Maintained backend services (NestJS, FastAPI, Flask), Strapi CMS, and Next.js frontend with Sentry observability
  • Kong API Gateway, AWS Secrets Manager, Infisical for secrets management
  • GitHub Actions pipelines for all services; Flutter CI/CD via Fastlane → App Store, Google Play, Firebase App Distribution
  • ETL pipelines with Apache Airflow and Prefect; AWS SQS integration

Management

  • Mentorship and code reviews for developer team
  • Collaborated with product team on requirements and task prioritization

Nanuq Studio

  • Senior Game Programmer
    Aug 2023–Apr 2024
  • Mentorship and best practices guidance for developer team
  • Collaboration with product teams on project requirements and priorities
  • Development of internal and outsourced projects

Howitzer Studio

  • Senior Game Programmer
    Dec 2022–Jul 2023
  • Developed companion applications for NFT art collections using Unity and Unreal Engine
  • Maintained and refactored infrastructure for internal applications (Docker, Symfony, LAMP stack, Redis, Node.js, Elastic Stack)

Projects:

  • Companion Apps for NFT Project on Opensea (Unity WebGL, UE5)

GAMAX PLUS CO., LTD

  • Senior Game Programmer
    Aug 2020–Sep 2022

Projects:

  • Escape from Atlantis (Cocos Creator): Real-time multiplayer web browser game using Cocos Creator, Colyseus SDK, Agones SDK (K8S)
  • Rocket Journey (Cocos Creator): Real-time multiplayer web browser game using Cocos Creator, Colyseus SDK, Agones SDK (K8S)
  • Meow Meow Sweety (Unity Engine): IAP for iOS/Android, ad integration, login module, RESTful services
  • Destrotale (Unity Engine): Casual strategy game inspired by Clash of Clans, with an anime art style

MOTION X STUDIO

  • Game Programmer
    Apr 2020–Jul 2020

Projects:

  • Dash Dash World: Refactored car and human animation system; implemented leaderboard system and UI

MSOFT STUDIO

  • Game Programmer
    Jan 2019–Mar 2020

Projects:

  • Into The Haze: Developed AI and gameplay system; implemented Linux server for development tool pipeline

ELECTRONIC EXTREME LIMITED CO., LTD

  • Game Programmer (Unity & Unreal Engine 4)
    Jan 2018–Dec 2018
  • Mobile Developer (Xamarin)
    Oct 2017–Jan 2018

Mobile Developer Projects:

Game Programmer Projects:

  • Football Manager Mobile Game (Unity Engine): Mobile game based on football management
  • Multiplayer and Mobile Game for Ragnarok IP (Unreal Engine 4): Multiplayer/mobile game based on the Ragnarok IP

YGGDRAZIL GROUP CO., LTD

  • Game Programmer
    Jan 2017–Oct 2017

Projects:

DONUTS BANGKOK CO., LTD

  • Game Programmer
    May 2016–Dec 2016

Projects:

  • Tokyo 7th Sisters (Unity Engine):
    • Advanced game application and tool development
    • Gacha system, gameplay mechanics, and analytics system implementation
    • Bug fixing and project maintenance
    • Android and iOS platform maintenance
    • Client-side analytics improvements for user behavior analysis

Achievements

Udemy Certifications

Udemy, 2024

Education

Bachelor of Engineering, Digital Media and Game System Engineering

Dhurakij Pundit University, 2016

Graduated with a GPA of 3.94, game system and software engineering.

Hobbies & Interests

  • Board games
  • Programming
  • Watching movies
  • Running
  • Exercise