I’m Youssef Kefi, a DevOps and cloud engineer focused on AWS, Kubernetes, and DevSecOps. I build and operate cloud-native platforms using GitOps workflows, infrastructure-as-code (Terraform), and secure CI/CD pipelines with automated scanning for code, secrets, dependencies, containers, and web applications. I’ve supported production-grade EKS environments for an AI startup—migrating services across multiple clouds, improving reliability through monitoring and incident response, and optimizing costs significantly. I also enjoy turning security into a practical engineering advantage by integrating tools like Semgrep, Gitleaks, Trivy, and OWASP ZAP into repeatable workflows that teams can adopt across repositories.…

Youssef Kefi

I’m Youssef Kefi, a DevOps and cloud engineer focused on AWS, Kubernetes, and DevSecOps. I build and operate cloud-native platforms using GitOps workflows, infrastructure-as-code (Terraform), and secure CI/CD pipelines with automated scanning for code, secrets, dependencies, containers, and web applications. I’ve supported production-grade EKS environments for an AI startup—migrating services across multiple clouds, improving reliability through monitoring and incident response, and optimizing costs significantly. I also enjoy turning security into a practical engineering advantage by integrating tools like Semgrep, Gitleaks, Trivy, and OWASP ZAP into repeatable workflows that teams can adopt across repositories.…

Available to hire

I’m Youssef Kefi, a DevOps and cloud engineer focused on AWS, Kubernetes, and DevSecOps. I build and operate cloud-native platforms using GitOps workflows, infrastructure-as-code (Terraform), and secure CI/CD pipelines with automated scanning for code, secrets, dependencies, containers, and web applications.

I’ve supported production-grade EKS environments for an AI startup—migrating services across multiple clouds, improving reliability through monitoring and incident response, and optimizing costs significantly. I also enjoy turning security into a practical engineering advantage by integrating tools like Semgrep, Gitleaks, Trivy, and OWASP ZAP into repeatable workflows that teams can adopt across repositories.

See more

Experience Level

Expert
Expert
Expert
Expert

Language

Arabic
Fluent
English
Advanced
French
Advanced

Work Experience

DevOps & Cloud Engineering Intern at Navoy
February 1, 2026 - August 31, 2026
Built a GitOps CI/CD workflow on Kubernetes (AWS EKS) with ArgoCD for 7 microservices, replacing manual SSH/Docker Compose deployments with git-based rollouts and one-command rollbacks. Provisioned AWS infrastructure (EKS, VPC networking, S3) with Terraform across two environments. Embedded DevSecOps in GitLab CI using a reusable template across all repositories: Semgrep SAST, Gitleaks secret scanning, Trivy SCA/container scanning, and OWASP ZAP DAST. Migrated application secrets from .env files to AWS Secrets Manager and synced them to Kubernetes via External Secrets Operator. Implemented monitoring with CloudWatch, Uptime Kuma checks, Netdata metrics, and supported incident response with root cause analysis. Led a multi-cloud migration (GKE, Nebius, AWS EKS, OVH) and moved stateful workloads to OVH VPS, cutting hosting costs by 72%. Troubleshot a production AWS Bedrock incident caused by a LiteLLM fallback proxy, restoring multi-turn tool calls across 4 AI providers without applicati
DevOps Project Contributor at Tritux
July 1, 2025 - August 31, 2025
Designed a reusable, language-agnostic CI/CD pipeline for Node.js, Java, and Python projects using Jenkins and GitHub Actions, including SonarQube quality gates and Nexus artifact management. Reduced onboarding time from 1 hour to 30 minutes by introducing a metadata.yaml configuration system enabling near zero-code pipeline setup for new projects.
Cybersecurity Intern at Tekru
June 1, 2024 - July 31, 2024
Performed penetration testing and vulnerability assessments on three web applications using Burp Suite, Metasploit, and Nmap. Identified 10+ vulnerabilities including SQL injection and XML-based exploits. Collaborated with developers to remediate issues by applying secure coding practices such as parameterized queries and input validation.

Education

IT Engineering Degree (Bac+5), DevOps & Cloud Infrastructure at ESPRIT School of Engineering
January 1, 2022 - December 31, 2026
Private OpenStack cloud (team project) at ESPRIT School of Engineering
January 1, 2023 - December 31, 2024

Qualifications

AWS Academy Cloud Security Foundations
January 1, 2023 - October 14, 2026
AWS Academy Cloud Operations
January 1, 2023 - October 14, 2026
CCNA: Switching, Routing, and Wireless Essentials
January 1, 2023 - October 14, 2026
Cisco: Introduction to Cybersecurity
January 1, 2023 - October 14, 2026

Industry Experience

Software & Internet, Computers & Electronics, Professional Services, Education, Other