Lyubomira Valcheva

Acted as a trusted technical advisor to stakeholders and senior leadership, aligning security architectures and secrets management strategies with business goals, risk mitigation, and ISO compliance initiatives. Designed and operated enterprise-grade security platforms using HashiCorp Vault and Azure Key Vault; automated end-to-end provisioning of secure cloud-native environments with Terraform and Ansible; implemented network isolation in Azure with Private Links, NSGs, and Service Endpoints; designed RBAC models and Managed Identities; led security audits with automated reporting and continuous policy enforcement. Operated Kubernetes security components with Vault-agent and OPA Gatekeeper, established zero-trust networking, and built centralized security logging to Azure Monitor/Sentinel. Automated dynamic credential generation and secret delivery across backend, frontend, and mobile services; integrated Vault-to-Azure Key Vault bridging for cross-stack automation. Implemented harden

Led observability and platform initiatives, deliveringElastic Stack and monitoring capabilities for mission-critical environments. Designed dashboards with Kibana and Grafana, integrated Elastic Stack with Prometheus and PowerBI, and automated ingestion pipelines. Integrated ArgoCD for auditable cluster upgrades and workload deployments, and supported Gardener-based Kubernetes clusters on OpenStack. Implemented DevSecOps practices across CI/CD pipelines, including security scanning and secrets management; defined standardized infrastructure blueprints to enable repeatable deployments.

Architected scalable cloud infrastructure across AWS and Azure, enabling production-grade SaaS apps with robust observability. Built automation frameworks for provisioning, configuration, and deployment, and integrated security baselines and governance into CI/CD. Coordinated platform components and standardized patterns to accelerate delivery while maintaining compliance and traceability; led the adoption of GitOps practices and automated upgrades in Kubernetes calendars.