Engineering reliable paths to production

Backend & Platform Engineer | DevSecOps and Cloud Security

I build reliable backend systems and apply software-engineering practices to delivery, infrastructure, and security controls. My current direction is platform engineering, DevSecOps, and cloud security.

Trajectory

From application code to the systems around it

Backend foundations

Go services, APIs, data stores, identity, and distributed-system concerns.

Platform practice

Containers, Kubernetes, CI/CD, infrastructure automation, and observability.

Secure delivery

Versioned controls, policy checks, artifact scanning, and auditable evidence.

DevSecOps pillars

Security across the delivery lifecycle

Secure delivery

Shift repeatable checks into versioned pipelines, set explainable gates, and retain evidence about what was shipped.

Secure infrastructure

Review configuration before deployment and enforce context-specific policy alongside broad misconfiguration checks.

Runtime assurance

Connect runtime detections to useful telemetry, actionable alerts, and a documented human response.

Selected work

Case studies built around evidence

These initial studies are plans, not claims of completed implementation. Evidence and measurements will be added only after the labs run.

Planned

Secure CI/CD Pipeline

A planned reference pipeline that turns source changes into scanned, traceable artifacts with explicit and explainable release gates.

  • GitHub Actions
  • Gitleaks
  • Trivy
  • CycloneDX
  • Sigstore
Planned

Policy-Enforced Infrastructure

A planned Kubernetes infrastructure lab combining broad IaC checks with narrowly defined organizational policy before deployment.

  • OpenTofu
  • Helm
  • Checkov
  • OPA
  • Rego
  • Kubernetes
Planned

Runtime Detection and Observability

A planned lab connecting Kubernetes runtime detections and audit evidence to searchable telemetry, actionable alerts, and a documented response.

  • Falco
  • Kubernetes
  • Prometheus
  • Grafana
  • Loki
  • Alertmanager

Technology

Grouped by engineering purpose

Backend systems

  • Go
  • PostgreSQL
  • Hasura GraphQL
  • Redis
  • Keycloak

Delivery & platform

  • Docker
  • Kubernetes / k3s
  • GitLab CI/CD
  • AWS

Operations

  • Grafana
  • CloudWatch
  • Proxmox
  • OPNsense
  • WireGuard

Security direction

  • DevSecOps
  • Cloud security
  • Policy as code
  • Security automation

Technical writing

Build logs and engineering notes

Collaborate

Interested in reliable delivery and secure platforms?

See the implementation work, review the decisions, or get in touch through an available professional channel.