Arash Izadi

Own platform and release engineering for ~60 microservices across 100+ repositories serving five engineering teams; member of the tech-leads group that reviews architecture and pull requests platform-wide.
Re-architected a mission-critical self-managed SFTP subsystem onto AWS Transfer Family with Lambda authentication, per-partner credentials in Secrets Manager, S3 storage, and KMS encryption, provisioned with Terraform and integrated into Rails through a new AWS SDK library.
Led an account-wide cost audit that materially reduced AWS spend through ECR lifecycle policies, log-volume reduction, right-sizing, and decommissioning of idle resources.
Designed scoped, least-privilege authorization for engineers and services, including just-in-time admin access and per-resource visibility, in a SOC 2 and HIPAA environment.
Modernized the core Rails monolith: migrated its database across AWS regions, replaced legacy job systems with Solid Queue and Kubernetes-native jobs, and rewrote jQuery views as modern Rails templates.
Write RFCs and architecture proposals, including a design for AWS Bedrock-assisted on-call triage that correlates Jira incidents with Datadog signals.
Mentor engineers through weekly platform office hours attended by junior and senior engineers and project managers.

Built the release and promotion pipeline in Go on GitHub Actions, integrating the GitHub and Jira APIs: promotion time cut from hours to minutes (~95%) with a fully auditable trail; adopted as the standard release path across the platform.
Hardened EKS with IAM Roles for Service Accounts, VPC CIDR controls, and least-privilege IAM, and enforced service-to-service mTLS with Linkerd policies across all services.
Built weekly ECR image vulnerability scanning on a GitHub Actions cron with results published to Slack, so older images are patched against a refreshed CVE database and pass Wiz compliance scans.
Containerized legacy VM-based workloads and standardized Helm deployments with ArgoCD, moving manual releases onto a GitOps pipeline.
Administered GitHub for 100+ repositories: branch protection, CODEOWNERS, required checks, and secret scanning; migrated CI from Jenkins to GitHub Actions and packages from JFrog Artifactory to GitHub Packages.
Managed AWS with Terraform, expanded Datadog and CloudWatch dashboards and alerting, and served on the platform on-call rotation leading incident response and root-cause analysis.
Drove Devbox adoption across the engineering organization with a documented bootstrap and self-service onboarding.

Shipped a HIPAA-regulated B2B and B2C MVP on schedule with a 10-person team, designing and implementing Scala backend services and event-driven business logic.
Produced system diagrams and technical documentation for complex feature flows to align engineers and stakeholders.
Supported production readiness through code reviews, on-call rotations, incident response, and hotfix releases.

Joined through Optum's Technology Development Program and converted to a full-time offer after the first rotation; the team moved into RVO Health, the Optum and Red Ventures joint venture, in November 2022.
Operated and debugged 24/7 production Scala microservices for state-government healthcare clients under SLA, with Splunk and Datadog for diagnosis and operational visibility.
Built PostgreSQL-backed REST APIs and drove root-cause-analysis fixes that reduced incident recurrence.

Composed and produced music for clients, ran live A/V for a CUNY campus media-services office, and handled business development at ZenoRadio, an internet radio startup, where I launched and ran several revenue projects.
Changed careers through CUNY City Tech's Emerging Media Technology program and Optum's Technology Development Program.

Professional Timeline