DevSecOps Engineer

I’m an experienced DevSecOps and Security Engineer with a strong background in cloud-native technologies, IT infrastructure, and Identity & Access Management (IAM). My work is driven by a hands-on approach to security, focusing on automation, efficiency, and scalability.

In summary, I bring a blend of technical expertise, practical experience, and a proactive approach to security and infrastructure management. I’m always looking for ways to improve processes, secure environments, and support teams in delivering secure, reliable software.

DevSecOps & Cloud-Native IT: I have a deep understanding of securing the software development lifecycle (SDLC) according to the “shift-left” principle. This includes implementing security measures early in the CI/CD pipeline, such as SAST, DAST, SCA (SBoMs), and container security. I’ve successfully enabled developers with self-service Cloud-Native IT infrastructure using tools like OpenShift, Tekton, ArgoCD/GitOps, and RedHat, ensuring faster and more secure deployments.
In my previous roles, I’ve designed and maintained multi-node Docker-based IT infrastructures, managing everything from network connectivity to DNS, SSL, and integration with organization-wide API Gateways. I’m comfortable with AWS services, including RDS Postgres databases, S3 storage, and VMs, and I’ve implemented robust security measures using tools like CyberArk, Qualys, and JFrog Xray to mitigate risks associated with passwords, code vulnerabilities, and container security.

Identity & Access Management (IAM): My expertise in IAM is comprehensive, having managed the end-to-end lifecycle of MFA solutions for tens of thousands of users, particularly within the banking sector. I’ve spearheaded the migration to modern MFA methods, such as FIDO2 and YubiKey, ensuring both ease of access and enhanced security.
I’m well-versed in integrating IAM concepts and tools, including authentication federation, SSO, MFA, Active Directory, and Privileged Identity Management. This experience extends to managing OTP and PKI/smartcard-based authentication methods, ensuring secure user access across the board. I’ve also developed and monitored MFA platforms, providing detailed insights through Splunk dashboards that track migration statistics, security events, and user trends.

Infrastructure & Automation: My approach to infrastructure is hands-on and automation-focused. I’ve led the development and implementation of CI/CD pipelines, leveraging Docker, GitLab, Ansible, and JFrog, which significantly improved team productivity and streamlined the deployment process. Additionally, I’ve set up monitoring systems using open-source tools like ELK, ensuring that potential risks are detected and addressed early.

Certification & Continuous Learning: Continuous learning is a key part of my career. I’ve set up test environments in Azure and successfully completed the AZ-204 certification. I’m currently pursuing further certifications in Kubernetes and cloud security to deepen my expertise in these critical areas.
In summary, I bring a blend of technical expertise, practical experience, and a proactive approach to security and infrastructure management. I’m always looking for ways to improve processes, secure environments, and support teams in delivering secure, reliable software.