Reda HANAF

- Implement Shift-Left Security in CI/CD with SAST, DAST, and vulnerability scanning (Snyk, Trivy, SonarQube). - Enforce IAM, RBAC, OPA, Vault, and security best practices in Kubernetes. - Automate compliance with ISO 27001, SOC 2, NIST, and AWS Well-Architected Framework. - Design and secure Kubernetes (EKS, AKS, GKE) clusters with RBAC, Network Policies, and Pod Security Policies. - Automate deployments with Helm, ArgoCD, and GitOps workflows. - Enhance observability with Prometheus, Grafana, ELK, and Falco for runtime security. - Build and manage CI/CD pipelines with Jenkins, GitHub Actions, GitLab CI, and ArgoCD. - Automate infrastructure provisioning with Terraform, Ansible, and Helm. - Implement blue-green, canary, and rolling deployments for zero-downtime releases. - Manage DevSecOps workflows and sprint planning in Jira. - Implement SIEM, security analytics, and real-time threat detection. - Develop disaster recovery and high-availability strategies.

-Design, deploy, and maintain scalable, secure, and high-availability cloud infrastructure on AWS, leveraging services such as EC2, S3, RDS, Lambda, and more. -Automate infrastructure provisioning, configuration management, and application deployment using Terraform, CloudFormation, and Ansible. -Implement CI/CD pipelines with GitHub Actions, Jenkins, GitLab CI/CD, or AWS CodePipeline to ensure fast, reliable, and secure software releases. -Optimize cloud performance, cost management, and security using AWS Well-Architected Framework, IAM policies, and automated monitoring tools. -Enhance system resilience and reliability with auto-scaling, load balancing, and disaster recovery strategies using AWS ELB, Route 53, and CloudFront. -Secure DevOps environments by integrating security tools like AWS WAF, GuardDuty, and security-focused CI/CD practices (DevSecOps). -Manage containerized applications using Docker and orchestrate workloads with Kubernetes (EKS) for scalable microservices architecture. -Implement observability and monitoring solutions using AWS CloudWatch, Prometheus, Grafana, and centralized logging with ELK Stack. -Develop and maintain Infrastructure as Code (IaC) templates to enable rapid, repeatable, and consistent deployments across environments. -Collaborate with cross-functional teams to drive cloud adoption, optimize workflows, and ensure seamless cloud-native development.