Mendel
May 2026 – present
Site Reliability / Platform Engineer
Corporate spend and travel management SaaS, operating across Latin America. Moved in-house after two and a half years embedded through Nimbux911.
Lisandro Pintos
SRE / Platform Engineer — Mendel, Argentina · UTC−3
I run AWS platforms and automate the toil out of them: CI/CD for 100+ repositories, Kubernetes, observability that cannot fail silently, and AI agents in production.
22, self-taught, from Argentina. SRE / Platform Engineer at Mendel, building korz.sh on the side, and writing about all of it in English and Spanish.
Track record
Nimbux911
Nov 2023 – May 2026
DevOps Consultant
DevOps consultancy; Mendel was the client — the work below ran on their platform.
- Own CI/CD for the whole engineering org: a scheduled, fully automated release cycle across 100+ repositories, with pipelines and deployments managed in Terraform.
- Fixed Docker layer caching for the Java fleet: a commit build went from 951 s to 29 s, and a no-change rebuild to 5 s.
- Ship fleet-wide changes safely: pilot one repository, measure, then roll the same change out to 80+ repositories.
- Took a new product line’s AWS platform from zero to production: dozens of serverless and container services on ECS, Lambda, DynamoDB and Step Functions.
- Built the internal agent platform on Amazon Bedrock AgentCore, including a support-ticket triage agent running in production.
- Made monitoring unable to fail silently: retention limits, an external dead-man’s switch and cardinality budgets on every cluster.
Projects
Things I build in the open. Stars, language and last push come from GitHub on every build.
-
AWS failure-injection proxy. Protocol-aware faults (throttling, latency, resets) that exercise real SDK retry behavior, against MiniStack, moto or real AWS.
-
Requirements traceability for spec-driven development: spec-blame verifies spec-to-code coverage, spec-excavate mines code back into specs.
-
Architecture diagrams as code: a YAML spec renders to hand-quality, themeable inline SVG with official AWS/GCP/Azure/Kubernetes icons and an agent-friendly collision checker.
-
Cloud security and compliance scanner: agents that assess AWS accounts against CIS/SOC 2 controls and report only what they actually verified — evidence attached, honest about what they could not check.
-
One SQLite per tenant in your own AWS account: fenced single-writer (DynamoDB lease), write-once objects on S3, billed per work done — real SQL isolation without paying for idle. The v2 engine is stable, validated by an 8-hour live-AWS soak with zero durability violations.
Upstream contributions
Pull requests I wrote for projects I don’t own, merged first. Refreshed from GitHub every day.
ministackorg/ministack
★ 4,953 11 merged 1 open
- fix(wire): match real-AWS error envelopes — Content-Types, routing, validation order
- feat(apigateway): dispatch v1 AWS integrations to SQS targets
- fix(s3): resolve cross-account replication destinations and enforce destination policy
- feat(agentcore): emulate the Memory data plane
- feat(agentcore): add AgentCore Memory resource lifecycle
AlejandroMorgante/credit-policy-studio
★ 2 1 merged
nimbux911/terraform-aws-eks
★ 1 0 merged 1 open
Writing
Long-form stories on Medium and notes on this blog.
-
Medium
We Have a Dead Man’s Switch at Home
Eight days. Every dashboard green. Zero alerts. Not because the alerts were badly tuned — because the thing that fires alerts was the thing that was dead.
-
Blog
I Left an AI Running for 3 Days. It Found 102 Things That Could Destroy Our System.
Codebot Workflow ran a full security audit on our 14k line codebase. Here's what it found, why it matters, and why every engineering team should be doing this daily.
-
Blog
Agent-driven improvements: How I let AI optimize korz.sh's infrastructure while I sleep
Built a system that runs performance and security improvements automatically overnight. Waking up to better code every morning is real. Here's everything I learned.
-
Blog
.NET 10 for microservices: Why it beats TypeScript and Go in production
After migrating korz.sh's RBAC API from TypeScript to .NET 10, here's what I learned about why the framework makes sense for serious backend work.
-
Blog
Having a CS Degree: Degreeitis or Reality?
My real story about learning to code before college, why I paused my degree, and how AI changed everything for self-taught developers like me.
AWS Builder Center
My community profile on AWS Builder Center. Articles published there will be listed here.
No articles yet.
Open profile · @pingedbrain