Kyeongmun Eom

Cloud-Native Engineer Who Builds Services and Owns the Infrastructure

2002.03.21

AWS / CloudDocker / DevOpsInfra Architecture

GitHub Velogeomkyeongmun@naver.com010-4716-6629

// about

I build end-to-end — from Spring Boot backends to Terraform-managed cloud infrastructure. Through CJ OliveNetworks Cloud Wave and hands-on experience, I have developed practical skills in AWS architecture, CI/CD pipelines, and container orchestration, with a growing focus on AI/LLM-powered operational automation.

// education

Dongguk University

Department of Information and Communication Engineering

Mar 2021 – Feb 2027 (Expected)

GPA 4.06 / 4.5

Major GPA 4.20 / 4.50

// bootcamp

Cloud Wave 7th Cohort

CJ OliveNetworks

Dec 2025 – Feb 2026

// experience

Rock Korea (Intern)

Software Engineer Intern

·Developed an LLM- and RAG-based automotive cybersecurity Q&A automation tool.
·Built AI-native CI/CD error handling — GitHub Actions captures build/test failure logs, summarizes root cause via LLM, and sends actionable fix guidance to Slack in real time.
·Authored a research paper on SDV OTA security for the Korean Society of Automotive Engineers (KSAE).
·Gained practical experience in connecting AI-based systems with real engineering workflows.

paper

Race Conditions and a Hierarchical Safe-Transition Protocol in SDV OTA Wave Switching

Quantified the race conditions and security holes that arise during wave switching of a Kubernetes + Istio OTA backend (auth→campaign→package→deploy), and designed and validated a Hierarchical Safe-Transition Protocol (HSTP) to eliminate them. Deactivation order alone shifted the security hole from ~52s to 0s, and HSTP + microsegmentation achieved a 99.1% lateral-movement blocking rate and an 85.6% request success rate.

SDV / OTAKubernetesIstioZero TrustmTLS

View paper Download

Mar 2026 – Aug 2026

// activities

FC TOTO (University Soccer Club)

Mar 2022 – Aug 2025

LINKERS (Career Exploration Club)

Sep 2024 – Dec 2024

TAVE (Developer Club)

Mar 2025 – Jul 2025

FC Jeongtong (Soccer Club, Captain)

Mar 2025 – Feb 2026

// military service

Republic of Korea Army (Sergeant)

Honorably Discharged

May 30, 2022 – Nov 29, 2023

// certifications

Advanced Data Analytics Semi-Professional (ADsP)

Korea Data Industry Promotion Agency

Mar 2025

Linux Master Level 2

Korea Association for ICT Promotion (KAIT)

Oct 2025

SQL Developer (SQLD)

Korea Data Industry Promotion Agency

Dec 2025

AWS Certified Solutions Architect – Associate

Amazon Web Services

Mar 2026

// awards

Dongguk Tutoring (Industry-Academia Project 2) · Encouragement Award

Dongguk University

Mentor-mentee tutoring program on cloud computing

2025.12

// skills

Backend

Spring Boot★★★

REST API design and implementation with Spring Security, OAuth2, JWT-based auth, and layered architecture

Java★★★

OOP-based dependency injection and interface segregation to minimize module coupling

Python / FastAPI★★★

Lightweight async REST API server implementation

JPA / MySQL★★★

Relational mapping with N+1 analysis and Fetch Join for query optimization

AI / LLM

RAG★★★

Grounded RAG pipeline: hybrid retrieval, reranking, local LLM

Vector Search (FAISS)★★★

Dense + sparse hybrid retrieval with SHA-256 incremental indexing

Ollama / LLM★★★

In-house local LLM serving for Korean answers without sending sensitive data externally

Infra / Platform

AWS EKS★★★

Validated 2,000 RPS / 120K requests with zero downtime using KEDA + Karpenter autoscaling

Terraform★★★

Full infrastructure-as-code across all environments, ensuring reproducibility and DR readiness

AWS (CloudFront · S3)★★★

CDN caching and serverless static asset serving to minimize origin load and improve global latency

AWS (ALB)★★★

Path/host-based routing with listener rules for per-service traffic distribution and health checks

Docker / ECR★★★

Standardized container images and ECR-based version management for consistent deployments

CI/CD & GitOps

GitHub Actions★★★

Full pipeline automation covering build, test, and deploy — eliminating manual deployments

Argo CD★★★

Declarative GitOps deployments with Git as the single source of truth for operational state

Observability

Prometheus / Grafana★★★

Metrics collection and visualization dashboards; used as KEDA scaling decision inputs

CloudWatch★★★

Log metric filters, alarms, SNS, and Lambda chain for automated DNS security event detection

OpenTelemetry / X-Ray★★★

Distributed tracing for inter-service latency bottleneck analysis and request flow visibility

Security

IRSA★★★

Per-ServiceAccount IAM permission isolation enforcing the principle of least privilege

AWS WAF★★★

L7 security policy in front of CloudFront to defend against common web attacks

Secrets Manager★★★

Centralized secret management to eliminate hardcoded credentials in code and env vars

// projects

backend

CrossView

Jun 2026 –

A study platform where people preparing for career transitions share resumes and practice mock interviews together. It started as a simple idea — 'online interview study groups would be convenient' — but once I actually deployed and started running it, I found myself facing a completely different kind of problem: 'how do I keep the costs under control to sustain a personal project long-term?'

Automotive Cybersecurity RAG System

Mar 2026 – Jun 2026

Built to eliminate the inefficiency of cybersecurity engineers manually searching through ISO/SAE 21434, UN R155, and internal TARA tables for every query. The TARA automation tool (tAIRA) calls this system at each analysis step to pull in grounding context.

infrastructure

EKS · Central VPC Infrastructure

Feb 2026 – Mar 2026

Started from the desire to design a Kubernetes platform that could actually handle production-level traffic. Built an EKS-based application platform and Central VPC centralized operations network, then validated the architecture with 2,000 RPS and 120K total requests in QA.

devops

Personal Portfolio Website

Mar 2026 –

Every request for a portfolio PDF meant reworking a document by hand, so for the convenience of everyone involved I decided to build a site that serves the portfolio on the web and auto-generates the PDF. Since I was building it anyway, I set a goal of handling everything solo — frontend to infrastructure to CI/CD.

// highlights

Traffic

Multi-Layer EKS Autoscaling for 2,000 RPS

Problem: CPU-based HPA was too slow to reflect traffic spikes, causing unready Pods to receive requests and repeated Pending states.
Action: Separated startup/readiness/liveness probes and aligned ALB health check paths to block unready Pods. Supplemented with KEDA pre-scaling and Karpenter for a multi-layer autoscaling architecture.
Result: Sustained 2,000 RPS for 60 seconds and handled 120,000 total requests in QA — validating the multi-layer autoscaling design.

Cost Optimization

Centralized NAT via Central VPC & Transit Gateway

Problem: Per-environment NAT Gateways duplicated fixed costs, while distributed security and observability points increased operational overhead.
Action: Redesigned egress routing around a Central VPC and connected each VPC via Transit Gateway to centralize shared services and observability.
Result: Consolidated NAT Gateways across Dev, QA, and Prod into a single Central VPC — reducing fixed costs and establishing a unified observability layer.

CI/CD

Multi-Stage Docker Build for Leaner Images

Problem: Single-stage images bundled JDK, Gradle, and source code together, bloating image size and increasing both CI/CD time and ECR costs.
Action: Restructured the Dockerfile into separate build and runtime stages, ensuring only the final JAR is included in the runtime image.
Result: Reduced image size, shortened ECR push time, and improved both deployment reliability and storage cost efficiency.