ELLIOT MORALES SOLE
VP of Engineering - Real-time video, Kubernetes and AI-assisted engineering

CONTACT
Email: hiring@elliotmoso.com
Website: https://elliotmoso.com
LinkedIn: https://www.linkedin.com/in/elliotmoso
GitHub: https://github.com/elliotmoso
Location: Almeria, Spain. 100% remote, available to travel.

SUMMARY
Twelve years building and running high-traffic platforms, the last ten on the same
live-streaming platform, with promotion from PHP developer to VP of Engineering.
Designs and writes the full stack: on-premises Kubernetes, BGP networking, databases,
CI/CD, the video pipeline (WebRTC, LiveKit, HLS, DRM) and PCI DSS payment software.
Previously co-founder and CTO of a hosting and systems company. Codes daily in Go,
PHP, TypeScript and Python.

EXPERIENCE

Teamsquad - VP of Engineering
11/2022 - Present, Remote
- End-to-end owner of a high-traffic live-streaming platform with payments, real-time
  chat and WebRTC/HLS video, from hardware in five data centres to the player.
- Architect and lead developer of a-stream: multi-tenant streaming platform with
  0.3-0.8 s latency and full DRM (Widevine, PlayReady, FairPlay). WHIP/RTMP/SRT ingest,
  zero-transcode origin-to-edge cascade, encryption once at the origin. Pilot to 25% of
  production streams in three weeks.
- Built an in-house Widevine license server in Go over the official C++ SDK via cgo.
- Production on-premises Kubernetes: five k3s clusters of 10-20 nodes, Cilium with
  BGP/BFD, ECMP load balancing, HAProxy ingress, Ceph RBD, Longhorn, NFS, Proxmox with
  Terraform and Ansible.
- Migrated Percona 5.7 to 8.4 in two months: logical multi-threaded dump and restore,
  GTID replication across versions, replica promotion, over six servers with rollback.
- PCI DSS SAQ-D card gateway designed and maintained personally, audit renewed three
  times a year. Over 2,000 transactions per day across nine payment providers.
- DevEnv: Go platform provisioning per-developer Kubernetes environments, 15+ services
  per namespace, over REST and MCP.
- Migrated CI/CD from Jenkins to GitHub Actions with ephemeral Kubernetes runners:
  backend build from 17 minutes to 41 seconds warm, 12,000+ tests across 7 parallel jobs.
- Designed an engineering organisation assisted by AI agents on Claude Code.
- Team of up to 4 people. Engineering budget around 300,000 USD per year.

VTS Media - PHP Developer, then DevOps, then Senior DevOps
04/2016 - 09/2022, Barcelona, Spain
- Same platform, before the company moved to the United States.
- Six full production migrations: Docker Cloud to Rancher (2018) to Kubernetes
  (2019-2020), and between in-house data centres, deployed with Ansible.
- hls-edge: HLS edge server written entirely in Go, single-handedly. Active-active high
  availability on etcd, gRPC with mutual TLS, distributed cache, ffmpeg remuxer with
  watchdog, early LL-HLS, HTTP/3, cross-cluster replication.
- Streaming system built in house: Wowza with Java modules, HLS and LL-HLS, WebRTC,
  CMAF over WebSockets with in-browser remuxing, SRT, DASH, RTMP tokens, CloudFront.
- PHP (Yii) backend evolved to DDD/CQRS over RabbitMQ. Go services since 2017.
- Varnish with custom VCL, React SSR frontend with Jenkins pipeline and auth gateway.

Brutal Systems - CTO and Co-founder
02/2014 - 11/2016, Barcelona, Spain
- Systems, cloud and DevOps company: colocation, dedicated servers, VPS, domains,
  hosting. Built complete infrastructures from scratch. DDoS mitigation with BGP.
- Exited through acquisition of shares by VTS Media.

Universitat Politecnica de Catalunya - Researcher, WikiSat project
01/2012 - 09/2012, Castelldefels, Spain
- Designed the convergent-divergent nozzle of a second-stage rocket engine, validated
  in static laboratory firings.

SKILLS
Programming languages: Go, PHP, TypeScript, JavaScript, Python, Java, C, C++, Bash, SQL
Video and streaming: WebRTC, LiveKit, WHIP, SRT, RTMP, HLS, LL-HLS, DASH, CMAF, MSE,
  EME, FFmpeg, GStreamer, VAAPI, Wowza
DRM: Widevine, PlayReady, FairPlay
Infrastructure: Kubernetes, k3s, Helm, Cilium, BGP, BFD, ECMP, HAProxy, Traefik, nginx,
  Varnish, Ceph, Longhorn, NFS, Proxmox, Terraform, Ansible, WireGuard, Docker
Databases and messaging: MySQL, Percona, RabbitMQ, Redis, MongoDB, Elasticsearch,
  PostgreSQL, Patroni, Aerospike
Cloud: AWS (Lambda, ECS, Aurora, S3, CloudFront, IAM, SAM, Secrets Manager), Cloudflare,
  OVH
CI/CD and observability: GitHub Actions, Jenkins, GitLab CI, Harbor, Prometheus,
  Alertmanager, OpenTelemetry, Grafana, Loki, Sentry
Security and compliance: PCI DSS SAQ-D, OIDC, OAuth2, 2FA, WAF, GDPR, age verification
Applied AI: Claude Code, multi-agent workflows, MCP servers, RAG, cost telemetry

EDUCATION
Universitat Politecnica de Catalunya - Aeronautical Navigation Engineering, 2011-2016
  Coursework completed, final thesis pending. Three distinctions.
ITaerea Business School - Airport and Aviation Management, 2012-2013
  Programme completed.

CERTIFICATIONS
Certified Widevine Implementation Partner (CWIP), Modular DRM & License SDK
  Google, 3 October 2025. Certificate number 01398MDLS.
Software as a Service I and II - BerkeleyX (edX), 2013
Foundations of Computer Graphics - BerkeleyX (edX), 2013

OPEN SOURCE
Home Assistant - merged fix to the Alexa integration, 2021
FastNetMon - merged next-hop handling on ExaBGP withdrawals, 2016
LiveKit - in-house fork in production, upstream contribution in preparation

LANGUAGES
Spanish: native. Catalan: native. English: full professional proficiency.