Soufiane Chahid

- Transformed manual AKS infrastructure into a modular, Terraform-based deployment supporting both dev and prod environments. - Built a reusable Makefile structure (deploy, test, help) to automate and streamline Terraform workflows and CI/CD integration. - Automated Kong Gateway (CP/DP), PostgreSQL, and OpenAppSec deployment using Terraform and Helm in hybrid mode. - Implemented custom Azure Disk + PersistentVolume setup to ensure reliable data storage and prevent Kubernetes finalizer issues. - Secured Kong Control Plane communication with automated TLS certificate generation using the Terraform TLS provider. - Integrated Azure Key Vault for secure storage and retrieval of AKS credentials and kubeconfig, enabling seamless authentication. - Developed a CI/CD-ready SQL Injection test framework using Terraform, Bash, and Makefile logic to validate OpenAppSec functionality. - Deployed Prometheus to scrape AKS metrics and integrated KEDA for workload-based autoscaling. - Applied advanced Terraform techniques (e.g., null_resource, local-exec, controlled parallelism) to overcome tooling limitations. - Performed threat modeling for AKS and Kubernetes workloads, identifying risks across Cloud infrastructure.

- Built secure CI/CD pipelines for mobile applications using GitLab CI, integrating security testing and continuous monitoring. - Managed build tools like npm and Gradle for mobile app development and packaging. - Automated application deployments across multiple environments using Ansible for configuration management. - Configured and maintained GitLab runners for seamless CI/CD execution and optimized platform performance. - Developed open-source security tools, contributing to OSV-scan and creating a CLI tool for DefectDojo for CI/CD integration. - Implemented robust monitoring and alerting systems for infrastructure, ensuring uptime and fast incident response.