DevSecOps Pipeline — SAST, SCA, IaC Scanning & Keyless AWS Auth
Built a security-first CI/CD pipeline with GitHub Actions — security scanning at every stage, zero stored AWS credentials, and automated vulnerability detection before anything reaches production.
Security layers included:
Semgrep SAST for source code vulnerability scanning SonarQube quality gates with custom rule sets npm audit SCA for dependency vulnerabilities Checkov for Terraform and Kubernetes manifest scanning Dockerfile hardening with non-root user enforcement Kubernetes NetworkPolicy for pod-level traffic isolation GitHub Actions OIDC — zero stored AWS access keys Sealed Secrets for encrypted Kubernetes secret management
0
18
Deployed a full GitOps workflow using ArgoCD + Kustomize on AWS EKS — zero manual kubectl, fully automated.
What's inside:
✅ ArgoCD App of Apps pattern for multi-service management
✅ Kustomize overlays for dev/staging/prod environments
✅ Sealed Secrets for secure secret management
✅ Helm charts for third-party tools
✅ Grafana + Prometheus monitoring with alerting
Every deployment is a Git commit — no SSH, no manual steps, no surprises in production.
Open for freelance DevOps work
1
86
Built a Production-Grade DevOps Platform on AWS from scratch — fully automated, GitOps-driven, and production-ready.
What's inside:
✅ GitHub Actions CI/CD with OIDC (no stored credentials)
✅ Terraform for VPC, EKS, ECR, IAM, S3 remote state
✅ ArgoCD + Kustomize for multi-environment GitOps
✅ Cluster Autoscaler + AWS Load Balancer Controller
✅ Multi-service architecture (backend, frontend, auth, payments)
This is exactly what I build for clients — end to end, no manual steps.
Open for freelance DevOps work
0
30
Built production AWS infrastructure using Terraform covering VPC, subnets, EKS cluster, ECR repositories, IAM roles with OIDC authentication, and S3 remote state with DynamoDB locking. Fully modular, multi-environment ready, and ArgoCD integrated for GitOps deployments.