# About

I’m Matthew Mellor, Manager, Cloud Engineering at Mitek Systems. I help teams standardize platforms, automate infrastructure, and run secure cloud systems with less operational drag.

My background spans 17+ years across networking, infrastructure, and engineering, including 7+ years leading teams and cross-functional initiatives.

I’m based in Texas and focused on platform engineering work that makes delivery more repeatable, operations more predictable, and security easier to sustain.

• 17+ years across networking, infrastructure, and platform engineering
• Manager, Cloud Engineering at Mitek Systems
• 7+ years leading teams and cross-functional initiatives
• Hands-on delivery across AWS, CI/CD, infrastructure as code, and secure self-hosted platforms

I’m practical by default: less hype, more outcomes. The systems I aim to build are:

• easy for teams to understand and own
• secure and compliant by design
• automated enough to reduce repetitive toil
• resilient under real production pressure

I enjoy blending leadership with hands-on execution — setting direction, mentoring engineers, and still digging into architecture and implementation details when it counts.

# Expertise

Cloud Infrastructure

#

I design and operate cloud environments with reliability, cost awareness, and security in mind, primarily in AWS (plus Azure where it fits).

DevOps & Platform Engineering

#

I build internal platform capabilities that help application teams ship faster and safer:

• reusable infrastructure modules
• standardized deployment paths
• secure defaults for new services
• stronger operational visibility

Automation & Delivery

#

I reduce friction through modern CI/CD, infrastructure as code, and cloud-native delivery patterns.

Common tools and patterns:

• Terraform and CloudFormation
• GitHub Actions and GitLab CI pipelines
• AWS Lambda and event-driven serverless workflows
• Docker and ECS/Fargate for containerized services

Networking & Security Mindset

#

My networking background shapes how I approach cloud design: connectivity, segmentation, access controls, and secure operations from day one.

Leadership

#

I’ve led in both IC and leadership capacities, with a focus on mentoring engineers, aligning cross-functional teams, and delivering durable platform improvements.

# Projects

DevRail Featured In progress

#

• Problem: AI-assisted teams still fight toolchain drift and inconsistent standards across local dev, CI, and agent workflows.
• Outcome: Building an agent-first development standards framework with GitHub/GitLab repo templates so teams can run one consistent make check contract everywhere.
• Stack: Dockerized dev toolchain, Makefile standards, multi-language lint/test/security automation, GitHub + GitLab templates
• Status: In progress (actively evolving)

terraform-provider-opnsense Featured Alpha

#

• Problem: OPNsense changes are operationally important, but firewall, VPN, DNS, DHCP, and edge-network configuration often still lives outside reviewable infrastructure workflows.
• Outcome: Terraform provider for OPNsense with broad resource and data-source coverage, helping move appliance configuration into versioned, reviewable infrastructure as code.
• Stack: Go, Terraform Plugin Framework, OPNsense API
• Status: Alpha (provider docs, migration/import guidance, and support matrix in place)
• Last updated: unavailable

bmad-module-infrastructure-devops Featured

#

• Problem: BMAD teams need infrastructure and DevOps review workflows that fit the current module model instead of living as one-off checklists or older expansion-pack conventions.
• Outcome: Published a BMAD v6 community module that adds Alex, a DevOps Infrastructure Specialist agent, plus infrastructure review, validation, architecture, and platform implementation workflows.
• Stack: Python, BMAD module packaging, Claude skills, DevOps workflow templates
• Last updated: unavailable

bootstrap-supabase Featured

#

• Problem: Self-hosted Supabase on Ubuntu is powerful but requires careful setup across 12+ services.
• Outcome: Single idempotent install.sh that deploys the full Supabase stack via Docker Compose, covering database, auth, REST, realtime, storage, studio, and optional analytics.
• Stack: Shell, Docker Compose, PostgreSQL, Kong, Ubuntu 22.04/24.04
• Status: Active project (built with DevRail standards)
• Last updated: unavailable

bootstrap-portainer

#

• Problem: Standing up Portainer cleanly on fresh Ubuntu hosts usually means hand-installing Docker, Compose, and the surrounding host prep by hand.
• Outcome: Idempotent installer for Portainer CE that bootstraps Docker Engine, Compose v2, and a repeatable single-node management baseline for self-hosted environments.
• Stack: Shell, Docker Engine, Docker Compose, Portainer CE, Ubuntu 22.04/24.04
• Status: Active project (built with DevRail standards)
• Last updated: unavailable

bootstrap-n8n

#

• Problem: Self-hosting n8n cleanly means wiring together application setup, reverse proxying, storage, and repeatable operational defaults.
• Outcome: Repeatable bootstrap path for standing up n8n faster with less manual drift across fresh installs, including PostgreSQL, Redis, optional TLS, queue workers, and backups.
• Stack: Shell, Docker Compose, n8n, PostgreSQL, Redis, Ubuntu
• Last updated: unavailable

proxmox_create-cloud-template

#

• Problem: Building Proxmox VM cloud templates manually is repetitive and error-prone.
• Outcome: Automated Ubuntu cloud-image import and template hardening so new VMs start from a repeatable, cloud-init-ready baseline.
• Stack: Shell, Proxmox VE, Ubuntu cloud images, cloud-init
• Last updated: unavailable

proxmox-ssl-setup

#

• Problem: Replacing Proxmox self-signed certificates with trusted ACME certificates is easy to postpone and awkward to repeat across hosts.
• Outcome: Scripted setup for Proxmox VE and Proxmox Backup Server certificates using the native ACME flow with Cloudflare DNS-01 validation.
• Stack: Shell, Proxmox VE/PBS, Let’s Encrypt ACME, Cloudflare DNS
• Last updated: unavailable

bootstrap-infisical

#

• Problem: Standing up a secure self-hosted secrets manager from scratch takes too many manual steps.
• Outcome: Faster, repeatable Infisical bootstrap on fresh Ubuntu, with certificate registration built in to streamline secure setup.
• Stack: Shell, Docker Compose, Ubuntu, Infisical
• Last updated: unavailable

gitlab-env-mgr

#

• Problem: Managing GitLab environment variables at scale is tedious and easy to misconfigure manually.
• Outcome: Simplified variable management with safer, more repeatable updates.
• Stack: Python, GitLab API
• Last updated: unavailable

gitlab_config-runner

#

• Problem: Registering GitLab runners consistently on fresh VMs is fiddly and easy to get wrong by hand.
• Outcome: Interactive installer that sets up Docker-backed GitLab runners with cleaner prerequisites and a repeatable registration flow.
• Stack: Shell, GitLab Runner, Docker Engine, Ubuntu/Debian
• Last updated: unavailable

# Contact

If you want to talk cloud engineering leadership, platform strategy, DevOps modernization, infrastructure automation, or reliability work, send me a note.

Name

Email

Message

Company

Send message

Prefer LinkedIn? Connect with me at linkedin.com/in/mamellor.