I'm currently working as an IT Security Officer and building a hands-on engineering path toward DevSecOps, Cloud Security, DevOps and SRE.

My goal is to connect security knowledge with practical engineering skills:
CI/CD, Infrastructure as Code, cloud security, containers, Kubernetes, automation and observability.

I believe that good security is not only about policies and audits.
It is also about understanding how systems are built, how they fail, and how to automate controls that reduce real risk.

• Building hands-on DevSecOps projects
• Learning Terraform and Infrastructure as Code
• Practicing CI/CD security with GitHub Actions
• Improving Docker, Kubernetes and cloud fundamentals
• Moving from security governance into technical security engineering
• Documenting my learning through real projects instead of only collecting certificates

A hands-on DevSecOps project focused on building a secure CI/CD pipeline for a containerized FastAPI application.

What it demonstrates:

• Automated testing in GitHub Actions
• Docker image build
• Secret scanning with Gitleaks
• SAST with Semgrep
• Container vulnerability scanning with Trivy
• Security gates that fail the pipeline on risky findings
• Controlled security validation through intentional test failures

Repository:
github.com/RoadBlack/secure-ci-cd-python-api

Status: Planned / In progress

A cloud security and Infrastructure as Code lab focused on building a small secure Azure environment using Terraform and GitHub Actions.

Planned scope:

• Azure Resource Group
• Virtual Network and Network Security Group
• Secure Storage Account
• Azure Key Vault
• Log Analytics Workspace
• Terraform modules
• GitHub Actions validation
• Checkov IaC security scanning
• Secret scanning with Gitleaks
• Security controls documentation

Goal:
Practice cloud security, Infrastructure as Code, CI/CD validation and DevSecOps controls for Azure infrastructure.

• Secure Kubernetes GitOps Platform with Argo CD, Helm and Kyverno
• SRE Observability & Incident Response Lab with Prometheus, Grafana and Loki
• Security Findings Automation Bot using Python and GitHub Issues