My expertise and certifications
Kubernetes may be my favorite technology. I've had the opportunity to manage large clients' Kubernetes clusters in previous projects. It's a powerful tool with numerous security challenges, from RBAC management to container security. Recently, I implemented network policies on an existing cluster for production.
I greatly enjoy working with AWS and have completed many projects using this cloud provider. I've secured several client infrastructures using AWS WAF and Security Hub. Setting up IAM can be more complex than on other cloud providers, in my opinion. AWS is also the cloud provider I use for my personal projects.
While Azure is my least favorite cloud provider, it's the one in which I have the most expertise. I've encountered several issues and bugs with this provider and I feel Microsoft's response to them is not always adequate, considering their market share. One positive aspect of Azure is the managed identities, which greatly simplify setting up applications without credentials.
In various missions, I've worked on multiple Git integrations, primarily focusing on securing CI/CD pipelines for clients. My preferred integration for self-hosted runners is GitLab. I've also worked with GitHub, Bitbucket, and Azure DevOps. I've found Bitbucket's CI/CD functionality to be lacking, with many unresolved issues lingering for years.
I use Linux on both my work PC and main PC. Despite its critics, I enjoy scripting in Bash. My preferred distribution is Ubuntu with Mate desktop environment 🐧 (not arch linux btw).
I frequently do pentesting missions, mostly black box and grey box. In my spare time, I enjoy participating in CTFs or exploring challenges on platforms like Root-Me. While my ranking may not be high, I'm actively working on improving my skills (1725 points right now).