DevSecOps Engineer with hands-on experience building automated, secure, and observable infrastructure across on-premise and cloud environments. Skilled in Kubernetes, Docker, Ansible, GCP, and observability stacks (Grafana, Loki, Prometheus). Experienced with Wazuh SIEM, Zero Trust (Authentik), and ISO 27001 readiness. Strong foundation in virtualization (Proxmox, Ceph), Linux administration, and modern platform engineering practices.
Deploy and maintain Kubernetes clusters and microservices.
Set up and maintain monitoring systems using Prometheus, Grafana, ELK/EFK.
Build alerting, log management, and tracing pipelines.
Work with Huawei Cloud and On premise.
Ensure reliable and repeatable CI/CD pipelines.
Perform SCA, SAST, DAST, and container image scanning.
Optimise system performance and scalability.
Optimized production infrastructure through container workload tuning, automated provisioning with Ansible, and consistent configuration enforcement.
Enhanced observability using Prometheus, Grafana, and Loki, cutting troubleshooting time significantly through refined dashboards and alerts.
Strengthened security operations by deploying Wazuh SIEM, integrating threat detection workflows, and supporting ISO 27001 audit evidence preparation.
Implemented platform capabilities including secure network access, Zero Trust/SSO with Authentik, and internal developer self-service tools.
Achieved improved deployment reliability and supported compliance readiness across multiple environments.
Supported infrastructure automation by writing basic Ansible playbooks and assisting in early Kubernetes environment testing.
Helped build initial observability components using Prometheus/Grafana/Loki for internal service monitoring.
Assisted in ISO 27001 preparation through documentation collection, Wazuh agent deployment, and vulnerability tracking.
Performed network support tasks including firewall adjustments, bandwidth checks, and evaluating VPN options.
Graduated from Bangkit with distinction (top 10% in Cloud Computing)
Developed backend services for an AI-powered Android app using Express.js, Docker, and GCP. Built Python inference endpoint, deployed APIs on VM, integrated Cloud Storage, and implemented automated CI/CD via GitHub Actions.
Informatics Engineering
July 2021 - June 2025
Network and Computer Engineering
July 2016 - June 2019