Azure-certified DevSecOps engineer with 8+ years across government, finance and consultancy — pairing SOC practice with SRE discipline, and increasingly putting AI agents to work across the SDLC so teams ship faster with security built in.
Shift-left security — SAST/DAST, IaC & dependency scanning and policy-as-code in every pipeline.
Azure & Kubernetes platforms designed, secured and run end to end — resilient, scalable workloads.
AI agents and copilots that review code, remediate drift and cut toil — guardrails and human sign-off.
Automating Azure + on-prem with Terraform, Bicep & PowerShell; GitLab CI/CD with built-in security scanning; automated remediation to cut MTTR; compliance via Azure Policy & Defender for Cloud.
Stood up & led a new SOC team. Threat hunting in Microsoft Sentinel with advanced KQL, full-lifecycle incident response, malware analysis and automated response playbooks.
Infrastructure automation & Kubernetes orchestration; hardened with Defender, Sentinel & Splunk; observability via Log Analytics, Grafana & Elastic; B2C SSO architecture.
Security, logging & troubleshooting across a Kubernetes microservice platform on AWS.
Designed secure deployment procedures with architects & InfoSec officers, minimising downtime and addressing risk through shared-responsibility on Azure.
Build/release pipelines to Azure App Service & Dynamics 365; introduced DevOps best practice & SonarQube into Azure DevOps CI/CD; GitHub repository management.
Cloud · Azure, AKS, AWS · IaC · Terraform, Bicep, Ansible · CI/CD · GitLab, GitHub Actions, Jenkins · Security · Sentinel, Defender, KQL, Splunk · Observability · Azure Monitor, Grafana, Prometheus · Langs · PowerShell, Python, Bash, C#
Certified: AZ-400 Azure DevOps Expert · AWS Cloud Practitioner
Open to remote DevSecOps, platform & SRE roles — and AI-enablement of your delivery pipeline.