Hi there! 👋 I’m O Jegede, a passionate and hands-on DevOps & DevSecOps Engineer and Cybersecurity Analyst with a growing portfolio of real-world projects focused on secure cloud infrastructure, CI/CD automation, identity and access management (IAM), and threat detection.

With a background in both cloud engineering and cybersecurity, I build systems that are not only scalable and automated — but also secure by design.

From automating pipelines to hardening infrastructure, I approach DevOps with a cybersecurity lens. Whether it’s integrating static code analysis into a Jenkins pipeline or deploying an intrusion detection system (IDS) alongside a Kubernetes cluster — I ensure that security is baked into every layer.

• DevOps & CI/CD Pipelines: Jenkins, GitHub Actions, Docker, Terraform, Kubernetes (EKS), AWS
• DevSecOps: SAST/DAST, container scanning, compliance-as-code, shift-left security
• Identity & Access Management: Role-based access control, SSO, MFA, policies using Okta, AWS IAM, and OAuth 2.0
• Cybersecurity Operations: Vulnerability management, SIEM, IDS/IPS, malware analysis, threat detection
• Monitoring & Logging: Prometheus, Grafana, Wazuh, Elastic Stack

Here's a curated list of projects I’ve completed as part of my DevOps and DevSecOps professional journey. Each project is built to replicate enterprise environments and solve real-world infrastructure, security, and automation challenges — using cutting-edge tools and best practices.

Automated provisioning and configuration of cloud-native resources using reusable, version-controlled IaC templates.

• Terraform Modules – Modularized VPCs, EC2s, IAM policies, ALBs, RDS, and S3 across environments
• CloudFormation Templates – Scalable infrastructure stacks using YAML and cross-stack references
• Secure IaC Pipelines – Policy-as-code integration with tools like OPA and Checkov for early IaC scanning

Cloud-native development and infrastructure orchestration for high availability, scalability, and resilience.

• 3-Tier Architecture – Web/App/DB stack deployed on AWS using Terraform and EC2/RDS/ALB
• IAM & Role-Based Access – Secure IAM roles, policies, and MFA enforcement
• Secrets Management – Using AWS Secrets Manager + environment-specific configurations

End-to-end pipelines for automated builds, testing, security checks, and multi-env deployments.

• Declarative multi-stage pipelines for container builds, vulnerability scanning, and multi-environment deployments
• Integrated SonarQube for SAST, Snyk for SCA, and Trivy for container scans
• Slack and email notifications on pipeline events and failures

• Secure GitLab runners executing IaC validation, container builds, and Helm/Kustomize-based Kubernetes rollouts
• Integrated Vault secrets injection and DAST testing for web applications
• GitOps-style workflows for merging changes into staging → production via protected branches

Hands-on experience deploying secure, production-grade workloads on Kubernetes using GitOps and IaC strategies.

• Helm Charts – Package, version, and release microservices with dynamic configuration
• Kustomize Overlays – Managed multi-environment deployments (dev, stage, prod) using overlays and patching
• EKS Clusters – Deployed and managed AWS EKS clusters using Terraform
• RBAC Policies – Controlled access per namespace and role using Kubernetes RoleBindings

Security-first automation ensuring security is not an afterthought.

• Pre-Commit Hooks – Enforced secret detection and linting before PRs are merged
• Container Security – Docker image scanning with Trivy, Grype, and Clair
• Policy-as-Code – OPA & Rego used to define and enforce deployment and RBAC policies in CI
• Audit Logging – Kubernetes audit logs and AWS CloudTrail for traceability and compliance

Built full-stack observability pipelines to monitor applications and infrastructure health.

• Prometheus + Grafana – Monitored Kubernetes pods, node health, and custom app metrics
• ELK Stack – Centralized log analysis from EKS, Lambda, and EC2
• AlertManager – Real-time alerts on resource exhaustion, failed deployments, or SLA violations

Here's a curated list of projects I’ve completed as part of my cybersecurity learning journey. Each project is designed to replicate real-world scenarios, using industry tools and best practices.

• ✅ Setting Up a Virtual Home Lab (on macOS and Windows)
• ☁️ Cloud Home Lab Setup (for scalable, remote testing)
• 🖥 Active Directory Deployment (user/privilege simulation)

• 🌐 Footprinting – Passive and active info gathering
• 🐟 Phishing Email Analysis – Identifying spoofed domains, headers, and payloads
• 🧫 Vulnerability Assessment – Using OpenVAS, Nessus, Nmap

• 📊 SIEM Setup with Wazuh – Centralized log analysis and alerting
• 🔎 Elastic SIEM – Kibana dashboards and threat hunting
• 🛡 Suricata IDS Setup – Intrusion detection using signature-based rules
• 🧲 Honeypot Deployment – Detecting and analyzing attacker behavior

• 🧾 Malicious PDF Analysis – Dissecting payloads and embedded scripts
• 🧟 Malware Analysis – Using Ghidra, VirusTotal, and sandboxes

• 🔒 Setting Up a Personal VPN Server – Secure remote connections using WireGuard/OpenVPN

• 🖥 VirtualBox, VMware, AWS Free Tier
• 🧪 Wireshark, Nmap, Metasploit
• 🔐 Wazuh, Suricata, Elastic Stack
• 🐧 Linux, macOS, Windows
• 📄 Markdown, Git, GitHub

Thanks for stopping by my GitHub!
Feel free to ⭐ star any repo that helps you, and connect if you’d like to collaborate or chat about DevOps x Security 💻🔥