About

Work Experience

• DevOps, Cloud & Security Consultant, Freelance / Projects

  Jan, 2022 - Present

  Consulting and implementing high-availability cloud infrastructure, DevSecOps pipelines, and threat monitoring platforms.

  • Architected highly available AWS EKS environments using modular Terraform and Terragrunt. Integrated Multi-AZ AWS RDS/Aurora instances with automated Route 53 health-check DNS failover to ensure zero downtime during region or availability-zone degradation.

  • Deployed HashiCorp Vault integrated with External Secrets Operator and AWS KMS to dynamically inject lease-based database credentials and API secrets directly into EKS pods, eliminating static credentials across git repositories.

  • Engineered automated stateful container disaster recovery pipelines using Kasten K10, creating custom Kanister blueprints for database snapshot lifecycles and offsite S3 object locking.

  • Deployed Wazuh SIEM agents across cloud hosts and integrated Falco into EKS clusters for real-time kernel-level anomaly detection including unauthorized privilege escalations and interactive shell spawns.

  • Built custom SOAR automation workflows using Python (Boto3) and webhooks to trigger dynamic AWS Security Group isolations and instant Slack alerts upon high-severity Wazuh and Falco alerts.

  • Deployed Istio Service Mesh to enforce mTLS service-to-service encryption, combined with Kyverno policies for strict admission control and Pod Security Standards enforcement.

• Technical Support Engineer & Network Specialist, Teleperformance

  Jan, 2010 - Present

  Providing L2 network infrastructure support and building internal operational automation tools.

  • Delivers L2 infrastructure support for enterprise-grade broadband, fiber, and cloud connectivity services under strict SLAs.

  • Diagnoses complex high-priority network routing, BGP/DNS resolution, and core infrastructure availability issues.

  • Built a Python-based SOAR script utilizing Boto3 and the ELK Stack to parse operational logs, automatically correlation-matching alerts and reducing manual incident handling time by 70%.

Projects Experience

• Enterprise AWS EKS Resilient Platform & Disaster Recovery

  - Present

  Multi-environment AWS EKS cluster orchestrated using modular Terragrunt infrastructure code.

  • Configured automated Multi-AZ database replication for AWS RDS alongside Route 53 health-checked DNS failover routing.

  • Deployed Kasten K10 to execute declarative, volume-consistent backups of stateful Kubernetes workloads to encrypted AWS S3 buckets.

  • Integrated HashiCorp Vault with AWS IAM Roles for Service Accounts (IRSA) to achieve dynamic credential rotation and RBAC isolation.

• Cloud SOC Engine & Threat Detection System (SIEM / SOAR / Runtime)

  - Present

  Integrated Security Operations Center (SOC) ecosystem monitoring AWS EC2 instances, EKS nodes, and container workloads.

  • Configured Wazuh SIEM rules to correlate audit logs, host system changes, and Network Intrusion Detection System (NIDS) events.

  • Deployed Falco kernel probes on Kubernetes worker nodes to catch container escape attempts and unauthorized runtime execution.

  • Developed automated response lambdas/scripts to quarantine compromised pods, block malicious IP ranges, and alert SRE/SecOps teams instantly.

Skills

Education

Certificates