Infrastructure & Cloud Security

I build infrastructure security in layers, assuming any single control can fail. I put the most weight on limiting blast radius, least privilege, segmentation and secrets management, because compromising one component should not automatically mean compromising the whole environment.

Linux Security, Cloud Security, AWS Security, IAM, Least Privilege, Network Security, Firewalls, Segmentation, TLS, PKI, Secrets Management, Vault, Container Security, Docker Security, Kubernetes Security, RBAC, Kyverno, Admission Control, Supply Chain Security, Sigstore, Hardening, Vulnerability Management, Zero Trust