DevSecOps & Kubernetes Security Engineer — CI/CD, GKE and Supply Chain

DevOps · 2025

DevSecOps CI/CD Pipeline with SAST, DAST & GKE Deployment

I built a fully automated, security-integrated CI/CD pipeline — from commit to production on GKE — with security scanning embedded at every stage, not bolted on at the end.

DevSecOps · 2025

Kubernetes Security Hardening Playbook

I built a comprehensive GKE security hardening reference implementation — RBAC design, pod security, network segmentation, admission control, and runtime threat detection, all codified in Terraform and Kubernetes manifests.

DevSecOps · 2024

Self-Hosted Trivy Scanner on GCP VM

I deployed a persistent, self-hosted Trivy vulnerability scanner on a dedicated GCP VM — running scheduled scans against all Artifact Registry images and IaC configs, with centralised reporting and CVE trend analysis in BigQuery.

DevOps · 2024

Full Enterprise CI/CD Pipeline on GCP

I designed and implemented a production-grade CI/CD pipeline — from commit through automated testing, container builds, infrastructure validation, and multi-environment progressive delivery — entirely on GCP-native tooling.

DevOps · 2024

Mobile App Publishing Pipeline: Play Store & App Store

I built and managed the complete end-to-end publishing pipeline for a mobile app — code signing, automated builds with Fastlane, store listing management, crash monitoring, and progressive rollout management for both Android and iOS simultaneously.

Cybersecurity · 2025

Security Incident Response Automation on GCP

I built an automated incident response system that contains threats, collects evidence, and notifies the right people — all within minutes of an SCC finding, before a human analyst has even opened their laptop.

DevOps · 2024

Cloud Load Testing & Performance Baseline System

I built a repeatable, infrastructure-as-code load testing system on GCP — running distributed k6 load tests from multiple regions simultaneously, capturing performance baselines, and integrating results into CI/CD to catch regressions before production.

DevOps · 2024

Ephemeral Dev Environment Provisioner

I built an on-demand ephemeral environment provisioner — developers spin up a full, isolated copy of the production stack (GKE namespace, Cloud Run, Cloud SQL clone) from a Slack command or GitHub PR label, and it auto-tears down after a configurable TTL.

Google Cloud · Jul 2026

Diagnosing Cloud Run Deployments: Build, Revision, IAM and Runtime Failures

A systematic way to isolate Cloud Run failures across source builds, image publication, revision startup, identity and request handling.

DevSecOps · Jul 2026

Securing Mobile Release Pipelines for Google Play and the App Store

Release engineering controls for signing, store credentials, policy checks, provenance and recoverable mobile deployments.

Kubernetes Security · Jul 2026

GKE and DevSecOps Supply-Chain Hardening: From Commit to Runtime

Layered controls for source review, dependency scanning, signed images, admission policy, workload identity and runtime detection on GKE.

CI/CD Pipeline Implementation

I design and implement end-to-end CI/CD pipelines that take your code from commit to production safely — with automated testing, container scanning, and progressive delivery built in from the start.

DevSecOps Integration

I embed security into every stage of your development pipeline — SAST, dependency scanning, container signing, DAST against staging, and infrastructure-as-code validation — so security is never a blocker.

Kubernetes Security Hardening

I harden your GKE environment for production and audit readiness — RBAC least-privilege design, OPA Gatekeeper admission policies, Kyverno enforcement, Falco runtime threat detection, and default-deny network segmentation.

Infrastructure as Code (Terraform)

I convert manually-created cloud infrastructure into reproducible Terraform code — or build your IaC foundation from scratch — with reusable modules, remote state, and a drift-detection system so your infra never surprises you.