Core Expertise & Technical Capabilities
Proven leadership delivering resilient cloud infrastructure, continuous DevSecOps automation, and enterprise governance across 14+ years.
Cloud Security & Compliance
Implementing FedRAMP-authorized cloud environments with NIS 2 and NIST-compliant security controls, automated continuous monitoring (ConMon), and robust risk governance.
Kubernetes & GitOps Automation
Leading GitOps-driven multi-tenant EKS cluster management with zero-downtime rolling upgrades, Pod Security Standards, dynamic secrets sync, and network micro-segmentation.
DevSecOps & CI/CD Pipelines
Eliminating static AWS secrets using OpenID Connect (OIDC), automating SAST/container security scanning, and establishing reusable hardened pipeline architectures.
Key Career Achievements & Production Deliveries
GitOps & Kubernetes Automation
Led GitOps-driven EKS cluster management with zero-downtime upgrades, horizontal auto-scaling, and security hardening.
Cloud Security & Compliance Governance
Implemented FedRAMP-authorized cloud environments with NIS 2 & NIST-compliant security controls, ensuring audit readiness and risk management.
Kubernetes Security & Auditing
Enforced RBAC, admission webhooks (OPA Gatekeeper), container vulnerability scanning, and default-deny network policies.
Technologies, Tools & Platforms
Hands-on mastery across modern cloud, container, security, and enterprise engineering ecosystems.
Cloud & Infrastructure
DevOps, GitOps & Containers
Security & Compliance
Software & Data
CI/CD & Observability
Featured Projects & Repositories
Open-source platforms, Model Context Protocol servers, reusable security pipelines, and Kubernetes architecture blueprints.
Security Hub: FedRAMP & NIS 2
Dedicated dual-standard cybersecurity platform featuring the OWASP Top 10 for LLM Applications (2025 Edition) and the EU NIS 2 Directive with CCB CyFun® 2025 self-assessment.
GitHub Actions Security Series
Reusable GitHub Actions workflows demonstrating OIDC token exchange with AWS (zero static credentials), secret injection defense, and SLSA Level 3 provenance pipelines.
Helm Charts Masterclass & Recipes
Comprehensive production Helm chart series and repository covering modular templates, subcharts, dynamic secrets delivery, and zero-downtime deployments.
AWS Serverless User Management
Production serverless user directory and authentication backend using AWS Cognito, API Gateway, Lambda, and DynamoDB.
Professional Certifications & Accreditations
Continuous commitment to technical mastery across container runtimes, cloud platforms, and cybersecurity governance.
Docker Certified Associate (DCA)
Demonstrated in-depth knowledge of container orchestration, Docker networking, image security, enterprise storage, and Docker EE clustering.
Regulatory Compliance (FedRAMP / NIS 2)
Specialized in NIST SP 800-53 controls, Belgian CCB CyFun® 2025 assessment scheme, automated compliance guardrails, and audit readiness.
Technical Blog & Case Studies
In-depth guides on Kubernetes storage, high-availability data infrastructure, and container image optimization.
Harbor High Availability Deployment on Kubernetes
Step-by-step architecture guide for deploying enterprise-grade, highly available Harbor container registry on Kubernetes.
PostgreSQL High Availability Deployment on Kubernetes
Configuring resilient PostgreSQL clustering on Kubernetes with automated failover and persistent volume management.
Dynamic Volume Provisioning NFS on Kubernetes
Setting up NFS dynamic storage provisioner for Kubernetes workloads requiring shared persistent storage.
Dive - Into Your Docker Images
Analyzing Docker image layer contents and optimizing image sizes for faster, more secure CI/CD builds.