Robel Alem

I've built automated DevSecOps security pipelines for DOE, NIH, USPTO, Census Bureau, CMS, and Commerce Department systems, turning federal compliance requirements into enforceable controls.

At ARL, I own a GitOps security automation pipeline that runs NIST SP 800-53 validation on every DOE infrastructure commit and generates auditor-ready evidence packages. I also deployed OPA/Gatekeeper, Trivy, Bandit, HashiCorp Vault, and Splunk dashboards to block insecure deployments, protect secrets, and improve M-21-31 logging visibility.

Across TG Federal, LDR Security Solutions, Iron Vine Security, and EMAGINE IT, I've embedded SAST, DAST, secrets detection, infrastructure-as-code review, threat modeling, and policy-as-code into CI/CD workflows. My Python and Bash automation has accelerated POA&M, SAR, scan-analysis, and compliance-artifact delivery from days to hours.

I'm an active Public Trust clearance holder and hold ISC2 CAP, ISC2 CGRC, AWS Certified DevOps Engineer – Professional, and CompTIA Security+ credentials. I bring hands-on experience with NIST, FedRAMP, FISMA, CMMC, Kubernetes, Terraform, GitHub Actions, and cloud security authorization.