DevSecOps Engineer
Full-timeSecuring CI/CD pipelines, hardening containerized applications, and managing cloud infrastructure at an enterprise scale.
- Secured CI/CD pipeline by implementing SonarQube quality gates, Trivy vulnerability scanning, and Cosign image signing to prevent Docker image tampering; identified 645 code improvements and flagged 15% of findings as security vulnerabilities.
- Hardened containerized AIIT application by rebuilding Docker images on Chainguard base images, eliminating root privilege execution and enforcing CPU/memory resource limits.
- Protected an unsecured internal VPC by deploying a VPN for remote employees and monitoring network traffic with Suricata and Zeek across 8 servers, enabling detection of anomalous activity.
- Configured Active Directory (AD) with role-based access controls to restrict external company users from accessing AIIT internal servers, enforcing least privilege access.
- Managed product release cycles and automated deployments on AWS, ensuring smooth, low-downtime transitions between versions.
