27.10.2026 aktualisiert
Premiumkunde
100 % verfügbarSenior DevOps & DevSecOps Engineer | Kubernetes (CKA/CKAD) · AWS · Azure · OCI · GCP
Rabat, Marokko
Nur Remote
Engineering degree (Bac+5), Networks & Systems, ENSA Marrakesh. PhD research MLSecOps (ongoing)Über mich
Senior DevOps and DevSecOps Engineer, 7+ years building and securing AWS, Azure, OCI and GCP platforms. Secure CI/CD, hardened Kubernetes, Terraform. 99.9% uptime, 70% faster provisioning, up to 35% cost savings. CKS; CKA, CKAD, KCSA, AWS DevOps Pro, Terraform Associate. Remote, any time zone.
Skills
OAuth 2.0SREArgo CDCiliumGitHub ActionsHelmTrivyZero TrustMLOpsAzure DevOpsIAMLokiAmazon Web ServicesMicrosoft AzureBash Shell
CI/CD Pipeline Engineering & DevSecOps
Design and operation of secure CI/CD pipelines with integrated SAST, DAST, SCA, and secrets scanning gates. Expertise in GitHub Actions, GitLab CI/CD, Azure Pipelines, AWS CodePipeline, ArgoCD, and Jenkins, improving deployment frequency by up to 60% while enforcing security policies at every stage.
Cloud Infrastructure & Multi-Cloud Architecture
Architecture and management of secure, high-availability cloud platforms across AWS, Azure, OCI, GCP, and VMware. Proven track record in designing resilient cluster architectures, enterprise-grade storage, and hybrid/multi-cloud environments for regulated industries including banking and fintech.
Kubernetes Orchestration & Container Security
Implementation of containerized workload orchestration on Kubernetes (EKS, AKS, OKE, OpenShift, Rancher) with image scanning, admission control, network policies, and RBAC. Governance controls for regulated financial workloads maintaining 99.9% service availability.
Infrastructure as Code & Automation
Automation of cloud infrastructure provisioning using Terraform (modules, remote state, multi-env), Ansible, AWS CloudFormation, AWS CDK, and OCI Resource Manager. Reduction of deployment time by 70% and elimination of configuration drift in financial systems.
Security & DevSecOps Practices
Implementation of Zero Trust Architecture, microsegmentation, IAM & Least Privilege, HashiCorp Vault, OPA Gatekeeper, Falco, Trivy, SonarQube, and compliance automation aligned with ISO 27001, NIST, CIS Benchmarks, and MITRE ATT&CK frameworks.
Monitoring, Observability & Incident Response
Building of monitoring, logging, and security observability stacks using Prometheus, Grafana, Loki, ELK Stack, AWS CloudWatch, Azure Monitor, and Microsoft Sentinel. Enabling proactive threat detection, SLO/SLI/SLA management, and MTTR optimization while maintaining 99.9% platform uptime.
Programming & Scripting
Development and maintenance of full-stack applications and automation scripts using Python, Bash/Shell, Go, PowerShell, JavaScript, Node.js, Java, React, and Next.js with cloud-native architecture.
Networking & Cloud Connectivity
Design and management of AWS VPC, Transit Gateway, Direct Connect, ALB/NLB, Route 53, Security Groups, NACLs, NAT/Internet Gateways, NGINX, HAProxy, Network Segmentation, and Service Mesh (Istio) for secure and scalable cloud networking.
Databases & Storage
Management of Amazon RDS (MySQL, PostgreSQL), Aurora, DynamoDB, ElastiCache (Redis), S3, MongoDB, Oracle Autonomous DB, and Azure Blob with a focus on scalability, security, and high availability.
Design and operation of secure CI/CD pipelines with integrated SAST, DAST, SCA, and secrets scanning gates. Expertise in GitHub Actions, GitLab CI/CD, Azure Pipelines, AWS CodePipeline, ArgoCD, and Jenkins, improving deployment frequency by up to 60% while enforcing security policies at every stage.
Cloud Infrastructure & Multi-Cloud Architecture
Architecture and management of secure, high-availability cloud platforms across AWS, Azure, OCI, GCP, and VMware. Proven track record in designing resilient cluster architectures, enterprise-grade storage, and hybrid/multi-cloud environments for regulated industries including banking and fintech.
Kubernetes Orchestration & Container Security
Implementation of containerized workload orchestration on Kubernetes (EKS, AKS, OKE, OpenShift, Rancher) with image scanning, admission control, network policies, and RBAC. Governance controls for regulated financial workloads maintaining 99.9% service availability.
Infrastructure as Code & Automation
Automation of cloud infrastructure provisioning using Terraform (modules, remote state, multi-env), Ansible, AWS CloudFormation, AWS CDK, and OCI Resource Manager. Reduction of deployment time by 70% and elimination of configuration drift in financial systems.
Security & DevSecOps Practices
Implementation of Zero Trust Architecture, microsegmentation, IAM & Least Privilege, HashiCorp Vault, OPA Gatekeeper, Falco, Trivy, SonarQube, and compliance automation aligned with ISO 27001, NIST, CIS Benchmarks, and MITRE ATT&CK frameworks.
Monitoring, Observability & Incident Response
Building of monitoring, logging, and security observability stacks using Prometheus, Grafana, Loki, ELK Stack, AWS CloudWatch, Azure Monitor, and Microsoft Sentinel. Enabling proactive threat detection, SLO/SLI/SLA management, and MTTR optimization while maintaining 99.9% platform uptime.
Programming & Scripting
Development and maintenance of full-stack applications and automation scripts using Python, Bash/Shell, Go, PowerShell, JavaScript, Node.js, Java, React, and Next.js with cloud-native architecture.
Networking & Cloud Connectivity
Design and management of AWS VPC, Transit Gateway, Direct Connect, ALB/NLB, Route 53, Security Groups, NACLs, NAT/Internet Gateways, NGINX, HAProxy, Network Segmentation, and Service Mesh (Istio) for secure and scalable cloud networking.
Databases & Storage
Management of Amazon RDS (MySQL, PostgreSQL), Aurora, DynamoDB, ElastiCache (Redis), S3, MongoDB, Oracle Autonomous DB, and Azure Blob with a focus on scalability, security, and high availability.
Erfahrung
Berufserfahrung5 - 10 Jahre
Freelancer seit2021
Sprachen
ArabicMutterspracheEnglishverhandlungssicherFrenchverhandlungssicher
Projekthistorie
- Implement and strengthen Identity and Access Management (IAM) controls, covering authentication, authorization, and role-based access management.
- Support the adoption of strong authentication mechanisms, including X.509 certificates, OAuth 2.0, Bearer tokens, and mutual TLS (mTLS), replacing weaker authentication methods where applicable.
- Perform security hardening and remediation across cloud-native and containerized environments, including Kubernetes, Gardener, and Kyma.
- Apply application security best practices to address injection vulnerabilities, cross-site scripting (XSS), cross-site request forgery (CSRF), and authentication and authorization weaknesses.
- Support cryptographic controls, encryption, secrets management, certificate lifecycle management, vault integration, and cryptographic key rotation.
- Contribute to access management activities involving SAP Access Request Management (ARM), CIS, CAM, and role management in SAP BTP HANA Cloud.
- Conduct security reviews, identify vulnerabilities, coordinate remediation activities, and promote compliance with established security best practices.
- Support Central Observability and FinOps Insights initiatives through incident handling, troubleshooting, operational support, and continuous improvement.
- Prepare technical documentation, share knowledge, and collaborate with cross-functional engineering teams to improve security and operational reliability.
- Architecting and maintaining secure CI/CD pipelines with integrated SAST, SCA, and secrets scanning gates, improving deployment frequency by 60%.
- Designing and hardening cloud infrastructure as code with Terraform and Ansible, embedding CIS benchmarks and least-privilege IAM.
- Implementing containerized workload orchestration on Kubernetes with image scanning, admission control, network policies, and RBAC.
- Building monitoring, logging, and security observability stacks using Prometheus, Grafana, and ELK.
- Driving DevSecOps adoption across development teams through shift-left security practices and cross-functional remediation workflows.
Designed and implemented a centralized CI/CD platform serving multiple development teams, standardizing build, test, and deployment workflows across 30+ microservices. Established automated quality gates integrating SAST, DAST, container scanning, and infrastructure validation, reducing production incidents by 45%. Drove DevOps culture adoption through internal tooling documentation, team workshops, and self-service deployment templates, cutting onboarding time for new engineers by 50%. Technologies: GitHub Actions, ArgoCD, Openshift, Kubernetes, Helm, Terraform, SonarQube, Trivy, Prometheus, Grafana, ELK Stack.
Zertifikate
Certified Kubernetes Administrator (CKA)
The Linux Foundation2025