Technical Lead - DevSecOps

Cloud Native Consultant

Key Responsibilities

● Lead DevSecOps practices for regulated enterprise platforms — building secure CI/CD pipelines with integrated code quality (SonarQube) and container scanning (Trivy, AquaSec) in restricted environments.

● End-to-end Kubernetes cluster management (AKS, EKS, TKGM, Rancher) including upgrades, autoscaling, HPA, PDB, and CIS Benchmark compliance audits.

● Trusted advisor on cloud-native architecture and DevSecOps across banking, media, and enterprise technology clients.

● Design and operate CI/CD pipelines using GitHub Actions, Azure DevOps, Jenkins, Tekton, and ArgoCD for polyglot application delivery.

● Provision and manage cloud infrastructure as code using Terraform and ARM Templates across Azure and AWS multi-environment strategies.

● Implement secret management with HashiCorp Vault, Azure Key Vault, and AWS Secrets Manager; enforce RBAC and network security policies.

● Deliver centralised observability using Prometheus, Grafana, Loki, and Dynatrace; implement data backups with Velero to S3 and Azure Blob.

● Integrate AI/ML infrastructure — Azure AI Foundry, Azure OpenAI (GPT-4o, Phi-3) — into production CI/CD pipelines.

Education & Qualifications

Certifications

● Certified Kubernetes Administrator (CKA)

● Certified Kubernetes Security Specialist (CKS)

● Certified Calico Operator: Level 1

● Microsoft Certified: Azure Fundamentals (AZ-900)

● Google Cloud Certified Associate Cloud Engineer

● Generative AI Leader

Skills & Experience

8 years of experience delivering secure, scalable, cloud-native infrastructure for enterprise clients.

Demonstrated expertise in DevSecOps, Kubernetes cluster operations, and AI/ML infrastructure integration.

Worked with enterprise clients across banking, media, theme parks, energy, and technology sectors in the UAE and globally.

Relevant Technologies

Cloud

● Azure (AKS, ACR, App Service, Web Apps, VNET hub-spoke, AI Foundry, OpenAI, Key Vault, ARM Templates)

● AWS (EKS, EC2, S3, RDS, ALB, DynamoDB, CloudWatch, Secrets Manager, CodeCommit)

Cloud Native

● Rancher, Kubernetes (AKS, EKS, RKE2, TKGM), Helm, ArgoCD, Tekton, Kustomize — Expertise and Solution Architecture

● GitHub Actions, Azure DevOps, Jenkins, Calico, Kong Gateway, WAF, App Gateway

● Prometheus, Grafana, Loki, Dynatrace, OPA / Policy Management

Storage

● SUSE Storage (Longhorn), Velero (AWS S3 Azure Blob), vSphere CPI/CSI persistent storage

Security

● SUSE Security (NeuVector), HashiCorp Vault, Azure Key Vault, SonarQube, Trivy, AquaSec, Checkmarx, CIS Benchmarks, Kubernetes RBAC

Virtualization

● VMware Tanzu (TKGM), SUSE Virtualization (Harvester), vSphere

Automation & CI/CD

● HashiCorp Terraform (AKS, ACR, PostgreSQL, VNET), ARM Templates, Ansible, Operator SDK (Go-lang)

● Docker, Helm charts, Chaos Engineering (non-prod), GitOps with ArgoCD

Monitoring & Logging

● Prometheus, Grafana, Loki, Dynatrace, AWS CloudWatch, EFK stack

Databases & Messaging

● PostgreSQL, MySQL, MongoDB, Redis, AWS DynamoDB, HashiCorp Consul

Programming

Python, Go (Operator SDK), Bash, YAML, JSON