Mahdi Aouiti

I am a Cybersecurity Consultant and DevOps Engineer specialized in building secure, automated, and observable infrastructures across AWS and Azure. I combine a strong security mindset (threat modeling, vulnerability management, OWASP) with hands-on DevOps (CI/CD, containers, IaC) and AI-driven monitoring to reduce risk and accelerate delivery.

Over the past two years, I have delivered secure CI/CD pipelines (Jenkins, GitHub Actions, GitLab CI) with Docker/Kubernetes and infrastructure as code (Terraform/Ansible). I integrate shift-left security (SAST/DAST, dependency scanning) and policy-as-code to catch issues early and keep releases compliant. On the monitoring side, I deploy Prometheus + Grafana and the ELK stack to provide actionable observability and alerting. I also apply machine learning (Random Forest, anomaly detection) to detect unusual behavior in services and pipelines.

Highlights:

• Secure CI/CD: end-to-end pipelines with automated testing, security gates, and change tracking.  
• Containers & Orchestration: Docker, Docker Compose, Kubernetes (helm basics), image hardening.  
• Cloud & IaC: AWS and Azure foundations, Terraform modules, Ansible automation, Vault basics.  
• Security: OWASP Top 10, SAST/DAST, dependency scanning (Trivy, Snyk), hardening guides.  
• Observability: Prometheus, Grafana, Alertmanager, ELK; actionable SLO/SLA dashboards.  
• AI/ML for Ops: anomaly detection for latency, errors, and resource usage in CI/CD and services.

Sample outcomes:

• Reduced deployment failures and MTTR by embedding health checks and intelligent alerts.  

• Improved security posture with automated dependency checks and container image scanning.  

• Simplified compliance documentation with test reports and traceable CI/CD artifacts.

Certifications: AWS Cloud Practitioner (CLF-C01), Microsoft Azure Fundamentals (AZ-900).

I enjoy collaborating with engineering teams, translating risk into practical controls, and documenting clean runbooks that scale. If you need someone to secure your pipelines and cloud environment—while keeping developer velocity high—I can help. I’m available for hourly, part-time, or full-time remote engagements.