Kubernetes
AKS, on-prem, OpenShift. Multi-tenant platform engineering.
Azure
Landing Zones, AKS, Key Vault, Policy, Backup, ML.
AWS
EC2, S3, IAM, GuardDuty, Bedrock, CloudFront.
Terraform
Multi-cloud IaC. State management, modules, drift detection.
SIEM / SOC
Elasticsearch, Splunk, Exabeam. Detection engineering, MITRE ATT&CK correlation.
Threat Modeling
STRIDE, Invariance Analysis. Framework design for multi-tenant platforms.
Ansible
Configuration management at scale. Playbooks, roles, AWX.
CI/CD
GitLab CI, GitHub Actions, Jenkins. GitOps with ArgoCD.
Observability
Prometheus, Grafana, OpenTelemetry. Full-stack monitoring.
Docker / Podman
Container builds, registries, runtime security with Falco.
Zero Trust / IAM
Entra ID, Keycloak, Vault. Conditional Access, RBAC, PKI.
Networking
BGP, SDN/NFV, IPv6 migration. Segmentation, firewalls, load balancing.
HashiCorp Vault
Cluster lifecycle, Raft, namespaces, PKI engine, audit.
Compliance
NIS2, DORA, KRITIS, ISO 27001, BSI IT-Grundschutz, PCI-DSS.
Penetration Testing
Burp Suite, Nmap, Kali Linux. Vulnerability management.
AI / ML
LLM integration, ML pipelines, Bedrock, Vertex AI. AI governance.