"Experienced DevSecOps, Multi-Cloud Solution Architect and Security Consultant passionate about integrating security into the software development lifecycle. Committed to ensuring the confidentiality, integrity, and availability of systems through the implementation of robust security measures and best practices."
- DevSecOps methodologies (CI/CD, SBOM, SCA, SAST, DAST)
- Cloud platforms (AWS, Azure)
- Infrastructure as Code (Terraform, CloudFormation, Ansible)
- Containerization and orchestration (Docker, Kubernetes)
- Security frameworks and standards (OWASP, CIS, NIST, IM8)
- Cloud Security ( CSPM, CWPP, CNAPP, ZTNA, SASE )
- Secure coding practices and vulnerability management
- Security assessment and penetration testing
- Incident response and threat modeling
"With over 9 years of experience, I have successfully led cross-functional teams to implement secure DevSecOps practices and enhance the security posture of organizations. Highlights of my achievements include:
-
Designed and implemented CI/CD pipelines that include automated security testing, resulting in improved code quality and reduced time to market.
-
Led security assessments and penetration testing to identify vulnerabilities and provided actionable recommendations to mitigate risks.
-
Implemented infrastructure as code (IaC) using Terraform, enabling the secure and consistent deployment of cloud resources.
-
Collaborated with development teams to educate and train on secure coding practices, leading to a culture of security-aware developers."
- Large Language Models (LLMs) implementation and fine-tuning
- Retrieval-Augmented Generation (RAG) architecture design and deployment
- Azure OpenAI Service integration and custom solutions
- Hugging Face models deployment and optimization
- Multi-modal AI systems development
- Prompt engineering and context optimization
- Fine-tuning models like Llama, GPT, and domain-specific LLMs
- Vector databases and efficient embedding strategies
- AI model security, guardrails, and responsible AI practices
- Machine learning operations (MLOps) and CI/CD for AI
-
Agentic LLM Web Search
An intelligent agent that combines local LLM inference with web search capabilities to provide well-researched answers with proper citations. Optimized for Python 3.12 with TinyLlama and GPU acceleration on Apple Silicon M-series chips. -
Agentic IoT Observability Project
This project implements a complete observability solution for IoT devices, collecting temperature and humidity metrics, storing them in MongoDB, visualizing them in Grafana, and enabling natural language queries through an LLM (Llama) service.
"I am deeply passionate about staying at the forefront of the ever-evolving field of DevSecOps, Machine Learning and AI. I actively engage in industry events, participate in security communities, and continuously expand my knowledge to stay ahead of emerging threats and technologies. My goal is to leverage my expertise to drive innovation, build secure systems, and contribute to the success of the organizations.
"I am always eager to connect with like-minded professionals, share experiences, and explore new opportunities in the world of DevSecOps. Feel free to reach out if you'd like to connect, discuss industry trends, or explore potential collaborations."