Jared Eitnier
Staff engineer · Platform, DevOps & Security
Platform engineer who came up through application code. I turn hand-built infrastructure into platforms that are codified, keyless, and audit-ready — and build the AI agents that work on top of them.
I like owning systems end to end, making the safe path the easy one, and leaving things better documented than I found them.
What I do
Platform & infrastructure
Cloud and Kubernetes estates as code, CI/CD people trust, environments on demand.
Security as the default path
Keyless identity, least privilege, audit-ready controls — designed so the safe way is also the easy way.
AI that does real work
Production agents built around one rule: agents propose, humans approve. Every identity, human or agent, answers to the same controls.
Selected work
From hand-built to code
Took a cloud estate that had grown by hand for years and put it under infrastructure-as-code — modules, environments, drift detection, and approval-gated applies.
Keyless by default
Retired long-lived cloud keys across every pipeline, laptop, and workload in favor of federated identity — and replaced standing admin access with just-in-time grants that need a second approver and expire within the hour.
Ephemeral environments, one per branch
A full-stack copy of the product for every pull request — sanitized data, SSO, VPN-only, torn down on its own — plus a developer CLI to launch one on demand. Started as a chat-thread idea; became how the team tests.
Delivery people trust
Moved every repository onto a shared workflow layer I wrote: merges deploy to staging, and engineers ship their own approved work to production. Releases stopped being events.
An AI scanner that refuses to be blind
Continuous review of untrusted customer code: a static pre-filter cuts model calls by most of the volume, and a known-malicious canary runs first — so a scanner that stops seeing pages someone instead of reporting all-clear.
Agents with guardrails
Agents propose, humans approve. An org-wide AI code reviewer, a read-only triage investigator, and a remediation bot that collapses thousands of findings into a short list of fixes — each can comment, file, or open a PR, and none can approve or merge.
How I work
I write things down, measure before I claim, and prefer boring technology. Lately I run a small fleet of AI coding agents alongside me — with review, not speed, as the governor.
GCP · Kubernetes · Terraform · GitHub Actions · Go · PHP · TypeScript · Claude