Hi, I'm Adeyinka Fajobi

DevSecOps & Cloud Security Engineer

7+ years securing cloud-native environments, automating secure infrastructure, and embedding security in CI/CD workflows

500+ Workloads Secured

99.9% Uptime Achieved

90% Compliance Automation

View My Projects Download Resume

afajobi@securedbyfajobi.com LinkedIn GitHub GitLabUnited Kingdom

About Me

Dynamic and results-driven DevSecOps/Cloud Security Engineer with over 7 years of experience securing cloud-native environments, automating secure infrastructure provisioning, and embedding security in CI/CD workflows. AWS Security Specialty certified professional with proven expertise across AWS security services, Kubernetes, GitLab, Terraform, and Argo CD.

Cloud Security

AWS Security Hub
GuardDuty
Inspector
KMS
Wiz
Prisma Cloud

DevSecOps

GitLab CI/CD
Jenkins
Argo CD
GitHub Actions
SAST/DAST
SonarQube

Kubernetes Security

RBAC
Pod Security Policies
Network Policies
Falco
Sysdig
Istio
Kubescan
OPA/Conftest

Infrastructure as Code

Terraform
CloudFormation
Ansible
GitOps
OPA/Gatekeeper

DevOps Tools & Practices

Docker
Helm
Maven
Gradle
Blue-Green Deployment
Canary Deployment
ELK Stack
OpenTelemetry
Nexus
Artifactory

Monitoring & Observability

Prometheus
Grafana
CloudWatch
Splunk
Datadog
Jaeger
Zipkin
Nagios

Operating Systems

Linux (Ubuntu, CentOS, Red Hat)
Windows Server

Version Control

Git
GitHub
GitLab

Certifications

CompTIA Security+ CE

AWS Certified DevOps Engineer – Professional

AWS Certified Security Specialty

Certified Kubernetes Administrator (CKA)

HashiCorp Certified: Terraform Associate

AWS Certified Solutions Architect – Associate

Professional Experience

DevSecOps Engineer

Sargent-Disc LTD UK

Mar 2025 – Present

•Integrated GitLab SAST/DAST and Snyk into CI/CD pipelines, detecting 95% of vulnerabilities pre-deployment
•Hardened Kubernetes workloads achieving CIS Kubernetes Benchmark compliance
•Architected secure AWS environments with automated threat detection using GuardDuty and Inspector
•Implemented Wiz Cloud Security Platform identifying 200+ cloud misconfigurations
•Achieved 99.9% infrastructure uptime while maintaining strict security controls

Cloud Security Engineer (DevSecOps)

Gibraltar Technologies UK

Mar 2022 – March 2025

•Delivered secure cloud-native solutions with comprehensive security scanning in CI/CD pipelines
•Hardened multi-tenant Kubernetes environments using Pod Security Standards and runtime protection
•Built secure AWS environments with Infrastructure as Code using Terraform
•Automated compliance reporting for ISO 27001 and GDPR reducing manual effort by 70%
•Reduced security incident response time by 50% through automation

DevOps Engineer

MBL Technologies

May 2019 – Mar 2022

•Enhanced CI/CD security achieving 95% vulnerability detection rate pre-production
•Hardened multi-tenant Kubernetes environments reducing container vulnerabilities by 40%
•Automated secure cloud provisioning reducing manual provisioning time by 30%
•Achieved PCI-DSS Level 1 compliance through comprehensive security controls

Cloud/DevOps Engineer

Deloitte & Touché LLP

Nov 2018 – May 2019

•Migrated legacy applications to secure microservices architecture on AWS
•Automated cloud resource provisioning cutting costs by 15%
•Maintained 99.9% service availability through proactive monitoring
•Improved deployment efficiency reducing service downtime by 25%

Notable Projects

🔒

Enterprise CI/CD Security Automation

Designed end-to-end CI/CD pipelines with GitLab CI/CD and Argo CD, integrating Snyk, Trivy, GitLab SAST/DAST, and custom security gates

Key Achievements:

✓Reduced deployment time by 60%
✓Embedded automated security scanning
✓Implemented security feedback loops for developers

GitLab CI/CDArgo CDSnykTrivySAST/DAST

⚓

Kubernetes Security Hardening Initiative

Secured high-traffic Kubernetes deployment serving 1M+ daily requests using comprehensive security controls and monitoring

Key Achievements:

✓Reduced runtime vulnerabilities by 40%
✓Achieved CIS Kubernetes Benchmark compliance
✓Implemented proactive threat detection

KubernetesFalcoAqua SecurityPod Security StandardsNetwork Policies

🌐

Zero-Trust Service Mesh Implementation

Deployed Istio service mesh across 3 Kubernetes clusters to enforce zero-trust networking principles

Key Achievements:

✓Reduced lateral movement risk by 80%
✓Implemented mTLS encryption
✓Enhanced service observability

IstioKubernetesmTLSPrometheusGrafana

☁️

Hybrid Cloud Security Architecture

Configured AWS Direct Connect with redundant VPN tunnels for secure hybrid connectivity

Key Achievements:

✓Achieved seamless secure connectivity
✓Maintained compliance with data residency
✓Unified identity management across environments

AWS Direct ConnectVPNAWS SSOActive DirectoryIPSec

🛡️

Advanced Web Application Firewall Implementation

Deployed AWS WAF for 20+ Kubernetes-based applications with comprehensive security rules

Key Achievements:

✓Reduced false positives by 50%
✓Implemented OWASP Top 10 protection
✓Automated threat intelligence integration

AWS WAFCloudFrontALBSIEMOWASP

🔍

Cloud Security Posture Management

Implemented Wiz Cloud Security Platform for continuous security assessment across AWS and Kubernetes

Key Achievements:

✓Identified and remediated 200+ misconfigurations
✓Reduced risk exposure by 45%
✓Prioritized vulnerabilities by business impact

WizAWSKubernetesCSPMAttack Path Analysis

Open Source Contributions

Production-tested security tools and frameworks that have secured 500+ workloads across enterprise environments. All repositories include comprehensive documentation and real-world implementation examples.

📋