"Experienced Platform Engineer/SRE and Cloud-Native Security Engineer, with a strong focus on building scalable, compliant, and secure cloud platforms.Proficient in designing and securing Kubernetes environments by enforcing Pod Security Standards (PSS), leveraging Cilium for Layer 7 network segmentation, and implementing Istio mTLS and authorization policies. Deep knowledge of Security Posture Management (CSPM) and applying the Principle of Least Privilege (PoLP) across multi-cloud environments.Skilled in implementing DevSecOps and GitOps workflows using Argo CD, integrating vulnerability scanning (Trivy) and IaC security scanning (Checkov) to shift security left. Expert in Infrastructure as Code (IaC) with Terraform, Pulumi, and Crossplane, and securing application secrets using HashiCorp Vault.Strong background in security logging, threat detection, and centralized observability, including routing critical events to SIEM platforms. Strong programming background in Go and Python, committed to driving innovation through modern security and cloud-native technologies."
