James Kariuki

I’m a Cloud, DevOps/DevSecOps Engineer and Full-Stack Developer with hands-on experience (4 years +) designing and automating scalable, secure, and highly available infrastructures. I specialize in CI/CD pipelines, container orchestration, and infrastructure as code, with a strong emphasis on monitoring, logging, and compliance.

In my DevSecOps role, I designed and maintained secure CI/CD pipelines using GitHub Actions and Jenkins, embedding SAST, DAST, and IaC security scanning (tfsec + OPA policies for Terraform) to catch issues early in the SDLC. I built and deployed Dockerized microservices on Kubernetes (AWS EKS) using hardened images and production-grade security controls through image scanning with trivy.

I’m proud of implementing policy-as-code with Kyverno (Kubernetes) and OPA (Terraform) to enforce security, compliance, and governance consistently across infrastructure and workloads. I also applied Zero Trust architecture across AWS and Kubernetes—using least-privilege IAM, secure service-to-service communication, and network segmentation with istio, Cillium, Falco, and RBAC.

I improve outcomes through observability and operational excellence: I implemented end-to-end observability using OpenTelemetry and Tempo for unified metrics, logs, and traces, and strengthened monitoring with Prometheus, Grafana, and ELK/EFK to reduce MTTR. I’ve automated provisioning with Terraform and Ansible for multi-environment deployments (dev, staging, prod), reduced cloud costs by ~30% via Kubernetes optimization, and supported secure, auditable GitOps deployments with Argo CD.