Paved-Road DevSecOps Pipeline
Every PR passes five blocking security gates; every merged image is signed, SBOM-attested, and verifiable.
10 CI jobs · 25 custom Semgrep rules · 8 ADRs · $0 to run
- GitHub Actions
- Cosign
- Trivy
- Checkov
- Semgrep
- Gitleaks
Security-minded backend & platform engineer.
I focus on backend development, distributed systems, cloud platforms, and security engineering. I work with Python, Go, AWS, Kubernetes, and Terraform to build and understand systems end to end. Currently developing hands-on engineering projects spanning secure software delivery, backend architecture, infrastructure automation, and cloud security.

Open to full-time roles — Toronto / remote Canada.
API design, databases, concurrency, asynchronous processing, distributed systems, and testing.
Kubernetes, developer platforms, CI/CD, infrastructure automation, and observability.
AWS architecture, multi-account environments, networking, identity, and Terraform.
Application security, secure software supply chains, cloud detection, and automated controls.
Every PR passes five blocking security gates; every merged image is signed, SBOM-attested, and verifiable.
10 CI jobs · 25 custom Semgrep rules · 8 ADRs · $0 to run
A Terraform-built AWS foundation: multi-account structure, preventive guardrails, and centralized security logging.
Multi-account · preventive + detective controls · fully teardown-able
A Go-based backend platform for reliable order and payment processing, featuring concurrency control, transactional consistency, event-driven workflows, idempotency, and failure recovery.
Flagship backend build · distributed systems · PostgreSQL internals · performance engineering
A production-grade Kubernetes platform on EKS with GitOps delivery, policy enforcement, and runtime security.
Flagship build · doubles as CKA/CKS hands-on prep
Cloud detection engineering: GuardDuty findings routed through EventBridge to Lambda remediations and Slack alerts.
Detection-as-code · automated response · full finding lifecycle