24.10.2026 aktualisiert
100 % verfügbar
DevOps | DevSecOps | Multi-Cloud Infrastructure | Kubernetes, Docker, Jenkins | Automation | MLOps
Islambad, Pakistan
Nur Remote
BS Information Technology (expected May 2028)Über mich
I'm a DevOps & DevSecOps Engineer building CI/CD pipelines, managing Kubernetes and Docker, and securing releases with Trivy, Syft, and Cosign. Skilled in Linux, Prometheus, Grafana, Loki, and IaC. Exploring MLOps and secure AI/ML. Open to connecting!
Skills
Kubernetes-SicherheitMicrosoft AzureCloud-EngineeringConfiguration ManagementLinuxDevOpsIBM CloudVPNKali LinuxNetwork SecurityVulnerability ScanningAnsibleLinux-ContainerDataOpsServer Administration
CI/CD Pipeline Security
Expertise in securing CI/CD pipelines using SonarQube quality gates, Trivy vulnerability scanning, and Cosign image signing to prevent Docker image tampering and spoofing. Experience with Jenkins, ArgoCD, GitHub Actions, and GitLab CI/CD.
Container Orchestration and Hardening
Proficiency in Docker, Kubernetes, Helm, and kubectl for deploying and managing containerized workloads including Deployments, StatefulSets, Services, Ingress, HPA, and VPA. Hardening of container images using Chainguard base images and enforcing resource limits.
Cloud Infrastructure Management
Hands-on experience with AWS, Microsoft Azure, Google Cloud Platform (GCP), and IBM Cloud for managing deployments, infrastructure automation, and cloud security. Skilled in Terraform and Ansible for infrastructure as code.
Cloud and Network Security
Knowledge of Cloud Security, IAM, Active Directory with role-based access control, VPN setup, and network monitoring using Suricata and Zeek for anomaly detection.
Penetration Testing and Vulnerability Assessment
Familiarity with penetration testing tools including Nmap, Burp Suite, Metasploit, and Kali Linux for vulnerability assessments and threat modeling.
Monitoring and Logging
Implementation of monitoring solutions using Prometheus and Grafana, and centralized logging with Loki to ensure observability and restrict unauthorized access to servers.
Infrastructure as Code and Automation
Use of Terraform, Ansible, Bash, and Python for automating infrastructure provisioning and configuration management across cloud environments.
Linux Server Administration
Experience in Linux server administration and on-premises server setup and management, including VM deployment and App Service configuration.
DevSecOps Application Security
Application of SAST, container image security, image signing, vulnerability management, and threat modeling to integrate security into the software delivery lifecycle.
Expertise in securing CI/CD pipelines using SonarQube quality gates, Trivy vulnerability scanning, and Cosign image signing to prevent Docker image tampering and spoofing. Experience with Jenkins, ArgoCD, GitHub Actions, and GitLab CI/CD.
Container Orchestration and Hardening
Proficiency in Docker, Kubernetes, Helm, and kubectl for deploying and managing containerized workloads including Deployments, StatefulSets, Services, Ingress, HPA, and VPA. Hardening of container images using Chainguard base images and enforcing resource limits.
Cloud Infrastructure Management
Hands-on experience with AWS, Microsoft Azure, Google Cloud Platform (GCP), and IBM Cloud for managing deployments, infrastructure automation, and cloud security. Skilled in Terraform and Ansible for infrastructure as code.
Cloud and Network Security
Knowledge of Cloud Security, IAM, Active Directory with role-based access control, VPN setup, and network monitoring using Suricata and Zeek for anomaly detection.
Penetration Testing and Vulnerability Assessment
Familiarity with penetration testing tools including Nmap, Burp Suite, Metasploit, and Kali Linux for vulnerability assessments and threat modeling.
Monitoring and Logging
Implementation of monitoring solutions using Prometheus and Grafana, and centralized logging with Loki to ensure observability and restrict unauthorized access to servers.
Infrastructure as Code and Automation
Use of Terraform, Ansible, Bash, and Python for automating infrastructure provisioning and configuration management across cloud environments.
Linux Server Administration
Experience in Linux server administration and on-premises server setup and management, including VM deployment and App Service configuration.
DevSecOps Application Security
Application of SAST, container image security, image signing, vulnerability management, and threat modeling to integrate security into the software delivery lifecycle.
Erfahrung
Berufserfahrung0 - 5 Jahre
Freelancer seit2026
Sprachen
EnglishverhandlungssicherHindiverhandlungssicher
Projekthistorie
- Secured the CI/CD pipeline with SonarQube quality gates, Trivy vulnerability scanning, and Cosign image signing to prevent Docker image tampering and spoofing.
- Identified 645 code improvements, with 15% flagged as security vulnerabilities and sent for remediation.
- Hardened a containerized application by rebuilding its Docker image on Chainguard base images, removing root execution and enforcing CPU and memory limits.
- Protected an unsecured internal VPC by deploying a VPN for remote employees and monitoring traffic with Suricata and Zeek across 8 servers to detect anomalous activity.
- Configured Active Directory with role-based access control to block external users from internal servers.
- Managed release cycles and automated AWS deployments, delivering low-downtime version transitions.
- Migrated the application from cPanel hosting to AWS Lightsail in 1 day with zero downtime.
- Containerized the full-stack application with Docker, bringing application issues down to 5%.
- Deployed production-ready Kubernetes workloads (Deployments, StatefulSets, Services, Ingress, HPA, VPA) for scalability and high availability.
- Built Helm charts to standardize deployments and enable repeatable releases across environments.
- Implemented monitoring with Prometheus and Grafana, and centralized logging with Loki, restricting developer access to servers.
- Managed GCP infrastructure and deployments for external clients, keeping environments secure, reliable, and cost-efficient.
Designed CI/CD pipelines with Jenkins, Docker, and Kubernetes for automated scalable deployments. Deployed containerized applications on IBM Kubernetes Service (IKS) and managed clusters with kubectl. Built infrastructure as code on Microsoft Azure including VM deployment, VPN setup, and App Service configuration.