Tech stack

Everything
I work with.

Tags with↗→ click to see a related project

01

Cloud & Infra

AWS ↗GCP ↗Azure ↗Terraform ↗Pulumi ↗AnsibleOIDC CI/CD ↗Managed Identities ↗Key Vault ↗IAM Least Privilege ↗VPC / VNetPrivate subnets ↗

02

Containers & Orchestration

Docker ↗KubernetesECS Fargate ↗Cloud Run ↗Podman ↗ECR ↗Container RegistryImmutable images ↗Rootless containers ↗

03

CI/CD & DevSecOps

GitHub Actions ↗GitLab CICheckov ↗Trivy ↗Bandit ↗pip-audit ↗OWASP ZAP ↗SonarCloud ↗SonarQubeCosign / Sigstore ↗OIDC ↗Security gates ↗

04

MLSecOps & AI

LangChain ↗FastAPI ↗scikit-learn ↗Temporal ↗Prompt Injection detection ↗PII masking ↗AI-powered code review ↗

05

Security

HashiCorp VaultWireGuard ↗LUKSCosign ↗WAF (AWS WAFv2) ↗Secure Boot / TPMnftablesRate limiting ↗Secrets Manager ↗Zero Trust ↗Defense-in-depth ↗

06

Observability

Prometheus ↗Grafana ↗OpenTelemetry ↗Azure Monitor ↗Application Insights ↗AWS X-Ray ↗CloudWatch ↗SLO / SLI ↗Error Budgets ↗4 Golden Signals ↗

07

Development

Python ↗Go ↗C# / ASP.NETTypeScript ↗Node.jsSQL ↗Next.js ↗AngularFastAPI ↗ReactTailwind CSS

08

Data & Streaming

Kafka (AWS MSK) ↗ClickHouse ↗PostgreSQL ↗Redis ↗SQL ServerDynamoDB ↗Azure SQLMaterialized views ↗B-Tree index ↗

09

Threat Modeling & Audit

STRIDE ↗MITRE ATT&CK ↗DFD ↗DAST ↗SAST ↗SCA ↗Attack Surface Analysis ↗Post-mortems ↗Chaos Engineering ↗Azure Chaos Studio ↗

INETUM engagements — Multi-env Ansible in prod · Docker at scale · Sovereign MFA compliance