I'm a Platform & DevSecOps Engineer focused on building secure, scalable and standardized cloud-native platforms for enterprise environments.
Experienced in Kubernetes, Azure and GitOps, working with AKS, Infrastructure as Code, secure CI/CD pipelines and cloud governance in highly restricted and enterprise-grade environments.
My work is focused on:
- Platform Engineering
- Enterprise Kubernetes Platforms
- DevSecOps Automation
- GitOps Workflows
- Cloud Security
- Supply Chain Security
- Infrastructure Standardization
- Cloud-Native Architecture
- Build and operate enterprise Kubernetes platforms
- Design GitOps-based deployment workflows
- Standardize CI/CD and DevSecOps pipelines
- Implement cloud-native security practices
- Automate infrastructure provisioning using Terraform
- Integrate security scanning into software delivery pipelines
- Improve reliability, governance and operational scalability
- Support cloud modernization and workload migration initiatives
flowchart TD
subgraph SOURCE["Source Control"]
Developer[Developer]
GitHub[GitHub Repository]
end
subgraph CI["CI/CD Pipelines"]
GitHubActions[GitHub Actions]
AzurePipelines[Azure DevOps Pipelines]
end
subgraph SECURITY["Security & Compliance"]
Semgrep[Semgrep - SAST]
Gitleaks[Gitleaks - Secrets]
KICS[KICS - IaC Security]
Trivy[Trivy / Grype - SCA]
Sonar[SonarQube - Code Quality]
SBOM[Syft - SBOM Generation]
end
subgraph BUILD["Container Build"]
DockerBuild[Docker Build / BuildKit]
Registry[(Container Registry)]
end
subgraph SUPPLYCHAIN["Supply Chain Security"]
DepTrack[Dependency Track]
DefectDojo[DefectDojo]
end
subgraph GITOPS["GitOps Platform"]
GitOpsRepo[GitOps Repository]
ImageUpdater[ArgoCD Image Updater]
ArgoCD[ArgoCD]
Helm[Helm]
Kustomize[Kustomize]
end
subgraph K8S["Kubernetes Platform"]
Cluster[Kubernetes Cluster]
end
subgraph OBS["Observability"]
Prometheus[Prometheus]
Grafana[Grafana]
Loki[Loki]
end
Developer --> GitHub
GitHub --> GitHubActions
GitHub --> AzurePipelines
GitHubActions --> Semgrep
GitHubActions --> Gitleaks
GitHubActions --> KICS
GitHubActions --> Trivy
GitHubActions --> Sonar
AzurePipelines --> Semgrep
AzurePipelines --> Gitleaks
AzurePipelines --> KICS
AzurePipelines --> Trivy
AzurePipelines --> Sonar
GitHubActions --> DockerBuild
AzurePipelines --> DockerBuild
DockerBuild --> Registry
DockerBuild --> SBOM
SBOM --> DepTrack
Semgrep --> DefectDojo
Gitleaks --> DefectDojo
KICS --> DefectDojo
Trivy --> DefectDojo
GitHubActions --> GitOpsRepo
AzurePipelines --> GitOpsRepo
Registry --> ImageUpdater
ImageUpdater --> GitOpsRepo
GitOpsRepo --> ArgoCD
ArgoCD --> Helm
ArgoCD --> Kustomize
Helm --> Cluster
Kustomize --> Cluster
Cluster --> Prometheus
Cluster --> Grafana
Cluster --> Loki
- Platform Engineering
- Enterprise Kubernetes Platforms
- GitOps at Scale
- DevSecOps Automation
- Secure Software Supply Chain
- Internal Developer Platforms (IDP)
- Cloud Governance
- Cloud-Native Security