Senior Cloud DevSecOps Engineer

I provide cloud security engineering for SAP enterprise cloud environments. I strengthen IAM controls across authentication, authorization, and role-based access management, while promoting stronger authentication through X.509 certificates, OAuth 2.0, bearer tokens, and mutual TLS.

I harden cloud-native and containerized platforms including Kubernetes, Gardener, and Kyma. My work includes application-security reviews, vulnerability remediation, cryptographic controls, Vault integration, certificate lifecycle management, SAP BTP HANA Cloud access management, incident support, and technical documentation.

I architect and maintain secure CI/CD pipelines with SAST, SCA, secrets scanning, and automated quality gates, increasing deployment frequency by 60%. I design hardened Terraform and Ansible infrastructure with CIS benchmarks, least-privilege IAM, drift detection, and misconfiguration remediation.

I operate Kubernetes production workloads with image scanning, admission controls, network policies, and RBAC. I built observability using Prometheus, Grafana, and ELK, led Azure DevOps to GitHub Actions and AWS CodePipeline migration, implemented OIDC federation, standardized cloud delivery practices, and drove shift-left security adoption.

I delivered and operated secure high-availability OCI, AWS, and VMware platforms for regulated banking and fintech customers. I automated compliant infrastructure with Terraform and Ansible, reducing deployment time by 70%, and designed OCI networking with segmented subnets, gateways, DRG connectivity, load balancers, and NSG microsegmentation.

I led multi-cloud migrations of core banking workloads, achieving up to 35% cost optimization while maintaining 99.9% availability. I deployed and secured OpenShift clusters, implemented observability with Prometheus, Grafana, and Loki, delivered Morocco's first OCI Compute Cloud@Customer deployment, and built OCI NVIDIA GPU clusters for LLM inference.

I developed and maintained cloud-native full-stack applications using Java, Node.js, React, and Next.js. I implemented CI/CD pipelines using GitLab CI/CD and AWS services including EC2, S3, and RDS.

I managed AWS infrastructure, databases, and Salesforce integrations with a focus on scalability and security. I also supported system restructuring and performance optimization that improved application performance by 25%.

I developed and deployed a full-stack IoT monitoring application built as microservices for more than 5,000 devices. The platform used Python, Node.js, Next.js, React, MongoDB, and PostgreSQL.

I built an AWS device-data pipeline using Lambda, Kinesis, SQS, and SNS, and operated the platform on EKS, ECR, RDS, and S3. I secured the application with Auth0, JWT authentication, AWS WAF, and application-security tooling.

Studies focused on network security, cloud computing, software-defined networking, DevOps, distributed systems, and infrastructure automation. Capstone project: Multi-Cloud Security and Automation Platform.