Aboubacar K.

Designed and deployed Infrastructure-as-Code (IaC) using Terraform, Packer, and CloudFormation to provision scalable, secure infrastructure across AWS, Azure, and GCP, accelerating provisioning time and reducing manual errors. Built multi-branch CI/CD pipelines using GitHub Actions, Jenkins, and GitLab CI, integrating security gates like SAST, DAST, container image scanning, and secrets detection. Developed GitOps pipelines with ArgoCD to ensure real-time synchronization, version control, and audit-ready deployment trails for Kubernetes (EKS/AKS) clusters. Deployed Docker and Kubernetes clusters with Helm, enforcing PodSecurityPolicies, RBAC, and network segmentation. Integrated CrowdStrike Falcon, Microsoft Defender for Endpoint, and Carbon Black for EDR, automating containment via Microsoft Sentinel and QRadar playbooks. Centralized logs and telemetry via Sentinel, Splunk, and QRadar, supporting SOC operations and incident detection aligned with NIST 800-53 and ISO 27001. Implemented automated backup policies for RDS, EBS, and S3, aligned with HIPAA and ISO standards to ensure robust disaster recovery. Managed the vulnerability lifecycle using Tenable.io and Nessus, automating remediation workflows into CI/CD and ticketing systems. Created dashboards in Datadog, Grafana, and Prometheus to track SLA compliance, system health, and detect anomalies. Hardened Office 365 and Azure AD using conditional access, MFA, and secure provisioning scripts. Participated in incident response, threat hunting, and RCA documentation, using MITRE ATT&CK, KQL, and ELK Stack for analysis.

Engineered cloud-agnostic infrastructure using Terraform and Packer, accelerating deployment speeds across AWS, Azure, and GCP with reusable modules Built and managed GitOps pipelines with ArgoCD, enabling real-time synchronization and secure release trails for Kubernetes (EKS) clusters Automated snapshot and backup policies for RDS, EBS, and S3, aligning with compliance frameworks like NIST and HIPAA Developed Lambda functions for tagging enforcement, stale resource cleanup, and S3 event-driven automation Deployed and tuned AWS-native solutions: ELB/ALB, ASGs, CloudWatch Logs/Insights, and Metric Filters for high availability and observability Integrated SonarQube, Checkmarx, and Trivy into build pipelines to enforce code quality, detect secrets, and scan for container vulnerabilities Managed access control using IAM roles, SSO/SAML, and secure credential rotation with Secrets Manager and SSM Parameter Store Supported secure hybrid cloud connectivity via AWS Site-to-Site VPN and Direct Connect for legacy systems Collaborated with finance and compliance teams on cloud cost governance using AWS Cost Explorer, Trusted Advisor, and tag-based budgeting Participated in continuous compliance and security readiness efforts through vulnerability remediation, automation, and patch management workflows

Resolved Tier 1 and Tier 2 technical issues involving Active Directory, Windows Server, and Office 365, including password resets, GPO enforcement, and access provisioning Monitored and maintained endpoint protection using Microsoft Defender for Endpoint, conducting manual triage and threat investigation Supported the infrastructure team in patch management efforts using Nessus, identifying vulnerabilities and contributing to NIST-based remediation workflows Participated in the initial setup of cloud services like AWS WorkSpaces and AWS Directory Service, assisting in secure provisioning and onboarding Deployed and upgraded antivirus and EDR tools from legacy AV to Carbon Black and CrowdStrike, significantly enhancing endpoint visibility and response capabilities Improved PowerShell automation for Active Directory and O365 user lifecycle management, reducing ticket resolution time and manual errors Supported internal audits and enforced access controls aligned with ISO 27001, NIST 800-53, and corporate compliance standards Collaborated on asset management, hardware/software tracking, and security hardening efforts for sensitive systems Assisted in developing incident response procedures and security awareness materials across teams