Sajid Ali

Led DevSecOps initiatives, enforcing secure development gates, GitLab CI/CD policy enforcement, and pre-commit/security checks. Implemented secure GitOps via GitLab-Agent to Kubernetes, guided automated code review, dependency scanning, vulnerability analysis, container scanning, and penetration testing. Triaged SAST/DAST results, validated false positives, and produced audit-ready evidence for SOC 2, PCI DSS, SAMA, and NCA. Conducted regulatory gap analyses (SAMA/NCA) and aligned cloud security with KSA requirements. Built GCP infrastructure with data sovereignty, created Terraform modules for cross-project reuse, applied CIS benchmarks, and automated security tooling integrations.

Automated DevSecOps functions through custom scripts; integrated SAST/DAST into CI/CD pipelines; implemented environment monitoring with Trivy, SonarQube, ArcherySec, DefectDojo, and OpenVAS. Performed IaC scanning (Hadolint, Ansible-lint, TFlint) and managed database migrations with Liquibase within CI/CD. Built anomaly detection (SQL) and security visibility via Grafana/Prometheus/Elastic-Security/Logstash/Kibana/Fluent Bit. Coordinated incident detection/response (AlertOps, PagerDuty) and SSO (Okta) across GitLab and Grafana. Administered CoreDNS across Demo/Staging/UAT/Prod, integrated with IBM-APIC/DataPower, and deployed Kubernetes with Rancher and ArgoCD, plus Helm-based deployments. Secured RabbitMQ/Redis with HashiCorp Vault, enforced whitelist-based security, and integrated F5-WAF/modsecurity. Led a DevSecOps team, applying SRE principles for resilience and ensuring PCI-DSS, SOC2, HIPAA, and GDPR compliance.

Built cloud architectures across AWS, Azure, and GCP using Terraform and GitLab CI/CD for security, serverless, and microservices workloads. Onboarded ZipErase data security to AWS, designed infrastructure and apps, integrated CI/CD across dev/prod, and supported developers with cloud configurations. Implemented serverless deployments (S3, CloudFront, IAM, Lambda, API Gateway, WAF, SSO, Vault, Okta) with DR/failover strategies. Created monitoring dashboards in Sumo Logic and managed access controls including Atlas DB IP/NACL whitelisting and cross-account IAM. Conducted quarterly DR drills, migrated ACLs/NACLs to UAT Atlas DB, and decommissioned completed AWS accounts. Delivered pre-sales input for IoT/EV projects and developed Python tooling for software integrity verification.