Three projects, one complete cloud cycle on Azure. Phase 1: production-ready infrastructure with Zero Trust from the ground up — managed identities, zero static credentials. Phase 2: DevSecOps pipeline with security gates at every stage (SAST, SCA, DAST, signing). Phase 3: SRE layer with 4 golden signals monitoring, SLO/SLI, and deliberate chaos testing to validate resilience.
Phase 1 — Terraform · Azure Key Vault · Managed Identities · OIDC CI/CD · Application Insights. Phase 2 — Commit → SonarCloud (SAST) → Trivy (SCA) → Checkov (IaC) → Docker Build → Cosign/Sigstore → Terraform Deploy → OWASP ZAP (DAST). Audit trail per release. Phase 3 — Prometheus · Grafana v11 · OpenTelemetry → Azure Monitor · SLO/SLI + Error Budgets · Azure Chaos Studio.
3
Phases
5
Security gates
0
Static credentials