Production agentic systems with deterministic guardrails.
Kevin
Bayter
I build AI systems that survive production.
AI Engineer and tech lead. I modernize critical payments and high-traffic platforms at Mercado Libre and WOM Colombia, and design agents with deterministic guardrails where failure is not an option.
Skills
From agent design with deterministic guardrails to resilient payment platforms: depth across the whole stack.
High-traffic reactive and transactional flows.
Polyglot with focus on JVM, Go, and TypeScript.
Infrastructure as code, on-premise and multi-cloud.
Fast diagnosis and hardened applications.
Automated quality from UI to database.
Infrastructure
I built the team's on-premise platform from scratch: a declaratively managed Kubernetes cluster with an API gateway, automatic TLS, highly available data stores, and full observability. Everything animated below runs in production.
- API gateway with authentication, rate limiting, and automatic TLS issued by cert-manager.
- Highly available Postgres with an operator, Redis for cache and queues, and a private registry of signed images.
- Prometheus and Grafana with metrics, dashboards, and alerts for every service in the cluster.
The deployment platform
I designed and built the internal platform the whole team deploys with: from a push to production with ephemeral environments, managed secrets, a chat bot, and an audit trail for every step.
End-to-end deploys
A push triggers the whole pipeline: build with tests, signed image in the private registry, deploy to an isolated ephemeral namespace, automated smoke tests, and promotion to production.
- Every feature gets its own ephemeral environment with its own URL, created and destroyed automatically.
- Nothing reaches production without passing the smoke tests in the ephemeral environment.
- One-click rollback to the previous version, with full history.
Secrets management
Secrets live encrypted in a central store with role-based access and are injected into pods at deploy time. They never touch a repository and are masked in every log.
- Credential rotation without touching code or redeploying by hand.
- Each service only sees the secrets it owns.
- Audit trail of who accessed what and when.
The deploy bot
A bot embedded in the team chat runs deploys, rollbacks, and status checks with one command. It validates permissions against the platform and replies with the rollout result in real time.
- Deploying from chat removes friction: no consoles or dashboards to open.
- Role-based permissions: everyone can only operate their own services.
- Proactively reports deployment health incidents.
Internal architecture
The web UI and the bot talk to a central API; heavy jobs (builds, rollouts, smoke tests) run on async workers coordinated with Redis queues, deploying to both the on-premise cluster and cloud EKS.
- Multi-target: the same flow deploys to on-premise and to the cloud.
- Async workers: the UI never blocks waiting for a rollout.
- Every event lands in an immutable audit log.
How I built it
Spec-driven development with AI agent orchestration: every feature starts as an executable spec that several agents implement in parallel, with deterministic quality gates before anything reaches production.
- The spec defines the goal and acceptance criteria before any code is written.
- Several AI agents work in parallel, each owning one part of the spec.
- Nothing merges without passing tests, architecture linting, and human review.
Quality & delivery
How I test and ship software: Playwright E2E against the real build and CI/CD pipelines with parallel quality, from commit to deploy.
E2E with Playwright
Smoke E2E tests run against the real production build served locally, with the backend mocked inside the browser itself: fast, deterministic, and independent of external environments. The full critical flow is verified in a real browser before every merge.
- A separate layer from unit tests: it exercises the packaged build, not the source code.
- Traces and screenshots are kept only on failure — light artifacts, full debugging.
- The same tests gate the merge in CI: if the critical flow breaks, nothing lands.
CI/CD pipelines
Frontend and backend share the same philosophy: quality in parallel (lint, unit, e2e, static analysis, and a coverage gate), unprivileged image builds, and deployment through the shared platform template — which also provides the rollback job.
- Parallel quality jobs with per-branch caching: feedback in minutes, not hours.
- Nothing deploys without passing the full quality stage.
- Shared platform template: deploy and rollback are identical across every repository.
Goals achieved
Measurable results of the infrastructure and the platform, verified in production.
Journey
My story as a git log: the main branch is experience, learn is education. Click each commit for details.
I lead the modernization of the payments layer and integrations with core business services (APISIX, secrets management, observability), using Redis for caching and idempotency in critical transactional flows.
- Built the internal deployment platform adopted by the whole dev team: orchestrates on-premise Kubernetes and AWS/EKS, IaC, secrets, and change traceability across environments.
- Standardized software delivery for multiple teams with end-to-end auditable rollouts, reducing friction and manual errors in production.
- Drive AI adoption across the engineering cycle: assisted code review, alert analysis, and automation of repetitive ops tasks.
- Support the evolution of the BSS and payments ecosystem with focus on resilience, scalability, and operational continuity.
Cloud computing certification with AWS and Azure: architecture, managed services, and multi-cloud best practices.
- Cloud architecture design and multi-cloud deployment strategies.
Built backend and front-end solutions with Go, Node.js, TypeScript, and Next.js to automate internal flows and improve the experience of users and ops teams.
- Integrated observability and incident tooling (Datadog, New Relic, Grafana, Opsgenie), cutting diagnosis and response times.
- Worked on high-traffic services using Redis as distributed cache, session storage, and rate limiting to protect critical APIs.
- Collaborated on AI automations for alert analysis and ticket generation, improving team productivity.
- Applied security practices across the dev cycle: validations, reviews, and testing for sensitive applications.
Systems engineering degree pursued in parallel with my professional career, with real software projects.
- Ticket management system for airport operations.
- Gym membership management app with payments and tracking.
- Dynamic library using the ChatGPT API to automate SEO generation for websites.
Intensive full-stack bootcamp with modern technologies and agile methodologies.
- Multiple full-stack projects with React, Node.js, and PostgreSQL; REST APIs and agile teamwork.
Software and hardware technical support, partner-company tickets, and remote-connection solutions.
- Reduced system downtime through proactive maintenance and monitoring; documented technical procedures.
Projects
Real production systems that demonstrate architecture, applied AI, and engineering judgment.
TuRenta AI
turenta.tax ↗Open-source platform that automates income tax filing in Colombia (form 210): AI agents extract data from tax reports and certificates, interview the user, and a 100% deterministic tax engine computes the return — in a domain where a hallucination is a legal problem.
- Hexagonal architecture with boundaries enforced by ESLint and architecture tests.
- Golden test that reproduces a real tax return line by line as an accuracy guarantee.
- Async workers with Redis for queues, rate limiting, and sessions.
Deployment platform
Internal platform adopted by the entire dev team: orchestrates deployments to on-premise Kubernetes and AWS/EKS, manages infrastructure as code, secrets, and change traceability across environments, with end-to-end auditable rollouts.
Feedback360
Complete professional feedback platform: teams with visibility levels (public, private, corporate), real-time notifications, Google login and OTP auth, goal management, and an admin dashboard.
Let's talk
Looking for an AI Engineer who can also run payments, Kubernetes, and observability in production? Reach out.