Senior DevSecOps | SRE | Cloud Security Engineer | Terraform • AWS/Azure • Kubernetes • Check Point

I’m a seasoned DevSecOps and Cloud Security Engineer with over 12 years of hands-on experience in designing, securing, and automating infrastructure at scale. I help organizations modernize their environments, improve resilience, and embed security across the entire software delivery lifecycle.

My career spans enterprise-grade deployments across cloud (AWS, Azure), hybrid environments, and secure networks. I specialize in Infrastructure-as-Code using Terraform and Terragrunt, containerization with Docker and Kubernetes, and CI/CD automation tailored for both greenfield and brownfield projects.

Security is baked into everything I build. I’ve architected secure bastion access, network segmentation, IAM boundaries, VPN integrations, zero-trust access gateways (e.g. F5 APM, Authelia), and end-to-end encryption policies - all codified and auditable. My firewall experience includes deep operational knowledge of Check Point, Palo Alto, and Fortinet, and I’ve recently extended that skillset to automate them via Ansible and API integrations.

My site reliability focus ensures every solution I design is observable, reproducible, and fault-tolerant. I regularly deploy Prometheus/Grafana, centralize logs using Loki or ELK, and use self-healing patterns like VMSS, ASGs, or k8s probes. I’m comfortable managing state, drift, and compliance in large Terraform deployments, integrating tfsec, OPA, and GitHub workflows to ensure infrastructure changes are secure and repeatable.

In addition, I bring strong experience deploying secure, scalable platforms using enterprise-grade tooling. I’ve implemented identity-aware access using Azure AD, Okta, and SAML-based SSO integrations to control privileged access to internal services and administrative portals. I’ve designed hardened ingress and access layers using F5 BIG-IP APM, Azure Application Gateway WAF, and NGINX with centralized authentication. My infrastructure designs routinely include private networking, certificate management (ACME, internal PKI), and automated policy enforcement via Azure Policy and AWS SCPs.

Whether enabling self-service via ServiceNow-integrated workflows or enforcing infrastructure compliance with tools like Sentinel or OPA/Gatekeeper, I focus on delivering platforms that are not only operationally efficient but secure by default. My work philosophy emphasizes clean, DRY, maintainable code, strict IAM boundaries, and a "security as code" approach across the stack.

Having worked across both enterprise and startup environments in Europe and North America, I bring a rare blend of security-first thinking, cloud-native agility, and infrastructure engineering depth.