All work
US marketing agencyClient name confidential
Client name confidential
Governed and hardened 50+ production GCP environments
Owned the delivery and security of a multi-tenant Google Cloud estate for a US marketing agency, from GitOps pipelines to runtime security.
Overview
The agency ran client workloads across more than fifty Google Cloud production environments. I provisioned, governed and hardened them, introduced reproducible GitOps delivery to Google Kubernetes Engine, secured the software supply chain, and built the APIs and monitoring around it.
- 50+multi-tenant GCP production environments governed
- GitOpsdelivery to GKE with GitHub Actions and ArgoCD
- Signedimages, scanned dependencies and generated SBOMs
What I did
- Provisioned, governed and hardened 50+ GCP multi-tenant production environments, including Linux security patching, firewall configuration, backups and disaster-recovery procedures.
- Engineered CI/CD and GitOps pipelines with GitHub Actions and ArgoCD, delivering containerized services to Google Kubernetes Engine through Helm and Kustomize.
- Strengthened the software supply chain with automated vulnerability scanning using Trivy and Clair, container signing with Cosign, and SBOM generation.
- Designed secure REST APIs with Laravel and Symfony, incorporating OAuth2, JWT, MFA, fine-grained RBAC/ABAC, rate limiting and audit logging.
- Implemented GCP IAM, HashiCorp Vault, GCP Secret Manager, Cloud KMS encryption and Falco runtime security.
- Built production monitoring and log aggregation with Prometheus, Grafana and Loki.
