DevOps Tech Lead β’ DevSecOps β’ Platform Engineering β’ GitOps β’ CI/CD Security β’ Observability
The core repos are now connected as one production-like narrative:
secure-gitops-platform
GitOps governance, policy-as-code, SBOM/scan/sign/attest supply chain, and Argo Rollouts canary gates.java-api-with-otlp-sdk
Instrumented Java workload (OTel + Prometheus metrics) deployed by GitOps with progressive rollout analysis.postgres-ha-chaos-lab
HA Postgres backend (Patroni/etcd/HAProxy + chaos scenarios) consumed by the Java workload.
Flow: code -> secure CI/release -> signed digest deploy -> canary analysis/rollback -> HA database evidence.
- π DevOps Tech Lead (Public Sector | CearΓ‘, BR) β Platform Engineering, GitOps, and CI/CD Security (SAST/SCA/DAST/IAST).
- π Hands-on DevSecOps β quality gates, supply chain security (SBOM + signing), secrets management, and hardening.
- π Release engineering β blue/green, canary, and fast rollback (Kubernetes / Docker / Swarm).
- π Observability β OpenTelemetry + metrics/logs/traces with actionable dashboards and alerts.
- βοΈ IaC & automation β Terraform/OpenTofu, Ansible, and Bash for reproducible and secure infrastructure.
- π¬ Let's talk about DevOps/DevSecOps/GitOps/Full Cycle.
- βοΈ I write on Medium about technology, DevSecOps, and security.
SAST - SonarQube
SCA - Snyk
SCA - Dependabot
SCA - OWASP Dependency-Check
Container Scan - Trivy
DAST - OWASP ZAP
IAST - Burp Suite
SBOM - CycloneDX
SBOM - Syft
Signing - Cosign
Secrets - Vault
Runtime - Falco
AWS Azure DigitalOcean Ansible Terraform Vagrant Jenkins ArgoCD GitHub Actions GitLab CI/CD Kubernetes Docker Podman Prometheus Grafana Python Go Java JavaScript Bash PostgreSQL MySQL MongoDB Redis Apache Kafka Linux Debian Ubuntu Nginx Git
