Platform Engineer · DevSecOps · AI Platform
I build Kubernetes platforms with security baked in from day one, including the platform layer for LLM and RAG workloads.
- Platform Engineering: GitOps, self-service, sane defaults
- AI Platform: RAG, vector DBs, self-hosted model serving, LLM gateway, GPU-ready infra
- DevSecOps: shift-left scanning, admission control, runtime security
- Supply Chain Security: SBOMs, image signing, artifact verification
- IaC: Terraform-first, cost-conscious, reproducible
| Project | Description |
|---|---|
| ai-platform-lab | RAG platform on K3s: Argo CD, Qdrant, Vault, NetworkPolicies, CI to GHCR |
| jenkins-security-lab | Supply-chain pipeline: Kaniko, Syft, Trivy, Cosign, Kyverno, Falco |
| kafka-and-security-lab | Event-driven Kafka + KEDA on AKS with a DevSecOps pipeline |
| k8s-operator-lab | Kubernetes Operator with CRD and reconciliation loop |
| vault-cicd-lab | Vault + GitHub Actions secrets management |
| observability-lab | Prometheus, Grafana, Loki, SLI/SLO on k3s via Terraform + Ansible |
