Engineering resilient cloud systems & verifiable delivery

I build multi-cloud infrastructure, declarative GitOps workflows, and automated security controls. My focus is on making security an active and verifiable property of software delivery, from active security gates at every stage of build step, code commit checks and cryptographic container signing to runtime cluster policies and threat detection.

Currently focused on:

• Cloud Infrastructure & GitOps: Provisioning immutable AWS and Azure environments with Terraform and Ansible, automated through GitHub Actions/GitLab CI, continuously reconciled through Argo CD and Kubernetes.
• Supply Chain & Pipeline Security: Engineering SLSA-aligned CI/CD gates using Cosign image signing, Syft SBOMs, Trivy/Checkov scanning and Kyverno admission controls.
• Detection & Observability: Engineering SIEM telemetry pipelines and MITRE ATT&CK detection rules with Microsoft Sentinel, KQL, and Prometheus.

Explore my selected public projects and technical writing below ...