Skip to content
View nrobertio's full-sized avatar
🎯
Focusing
🎯
Focusing
4 followers · 20 following

Achievements

Achievement: Pull SharkAchievement: YOLO

Achievements

Achievement: Pull SharkAchievement: YOLO

Block or report nrobertio

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Content in all repositories owned by your account will be closed.
Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. Markdown is supported. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
nrobertio/README.md

Engineer with 5+ years running production environments end to end, across cloud and on-prem. I run multi-account AWS (deepest), work across Azure, Google Cloud and Oracle Cloud, and design and operate on-prem and hybrid infrastructure. My work spans platform engineering, DevOps, security and DevSecOps, networking, and GenAI, from Infrastructure as Code through CI/CD, Kubernetes, detection and response, and cost.

I build platforms other engineers ship on: Terraform modules, GitOps delivery, secure-by-default guardrails, and cost discipline.

Focus areas

  • Security and DevSecOps: least-privilege IAM, GuardDuty, Security Hub, Config, detection and response, SAST/DAST/SCA, threat modelling, next-gen firewalls, incident response
  • Cloud at scale: AWS Organizations, Control Tower, multi-account landing zones, plus Azure, GCP and Oracle Cloud
  • DevOps and platform: Terraform, Ansible, CI/CD (GitLab, GitHub Actions, Jenkins), self-service tooling
  • Kubernetes and GitOps: EKS, Helm, Kustomize, Argo CD, Kyverno
  • Networking: Transit Gateway, Route 53, VPN/BGP, SD-WAN, hybrid connectivity
  • On-prem and hybrid: datacenter migration, Windows Server and Active Directory, storage gateway
  • FinOps: tagging standards, rightsizing, budgets, anomaly detection
  • GenAI: production RAG and agents on Amazon Bedrock

Featured projects

Project What it is
aws-security-guardrails Detection baseline plus event-driven auto-remediation (GuardDuty, Config, Lambda)
secure-sdlc-pipeline DevSecOps pipeline: SAST/DAST/SCA/SBOM on GitLab CI and Jenkins, STRIDE threat model
observability-stack Prometheus, Grafana (as code), Alertmanager, Loki and k6 load tests with alerts you can trigger
queue-workers-platform Async jobs: API enqueue, Redis queue, workers with retries, backoff, dead-letter queue and idempotency
aws-landing-zone Multi-account AWS: Organizations, OUs, SCP guardrails, security baseline, OIDC CI
aws-hybrid-networking Transit Gateway hub-and-spoke, hybrid DNS, VPC flow-log analysis
eks-gitops-platform EKS plus Argo CD (app-of-apps), Helm, Kustomize, Kyverno, Flux
aws-finops-automation CUR Athena analysis, tagging enforcement, budgets, rightsizing report
bedrock-rag-platform RAG on Amazon Bedrock: Knowledge Base, API, least-privilege IAM, budget guardrail
internal-developer-platform Self-service platform: golden-path Terraform module, observability by default, scaffolding CLI
agent-runtime-platform Durable-execution, sandboxed runtime for coding agents: TypeScript, PostgreSQL, Docker, self-hostable

Each repo includes a docs/PROJECT.md explaining the design decisions, trade-offs and benefits.

Certifications

Earned: AWS Solutions Architect Professional, Google Cloud Professional Cloud Architect, Google Cloud Associate Cloud Engineer, HashiCorp Terraform Associate, CCNA, Nozomi Networks Certified Engineer

In progress: AWS Advanced Networking Specialty, AWS Security Specialty, AWS Certified Generative AI Developer Professional, CKA, CKS

Tech

AWS Azure GCP OCI Security IAM GuardDuty On-prem Active Directory Terraform Ansible Kubernetes EKS Helm Argo CD Kyverno TypeScript PostgreSQL Docker GitLab CI GitHub Actions Jenkins Python Bash Go Bedrock

Pinned Loading

  1. aws-finops-automation aws-finops-automation Public

    FinOps as code: CUR Athena queries, tagging enforcement via AWS Config, Budgets and Cost Anomaly Detection, and a Python rightsizing/idle-resource report.

    Python

  2. aws-hybrid-networking aws-hybrid-networking Public

    Transit Gateway hub-and-spoke in Terraform: centralized egress, Route 53 Resolver hybrid DNS, VPC segmentation, and VPC Flow Logs with Athena analysis.

    HCL

  3. aws-landing-zone aws-landing-zone Public

    Multi-account AWS landing zone in Terraform: Organizations, OUs, SCP guardrails, org security baseline (CloudTrail, Config, GuardDuty), and OIDC CI deploy roles.

    HCL

  4. aws-security-guardrails aws-security-guardrails Public

    AWS detection baseline (GuardDuty, Security Hub CIS, Config, Access Analyzer) with event-driven auto-remediation via a least-privilege Lambda and SNS alerts.

    HCL

  5. eks-gitops-platform eks-gitops-platform Public

    Production-style GitOps platform on Amazon EKS: Terraform, Argo CD app-of-apps, Helm, Kustomize, Kyverno, Flux, and CI on GitLab and GitHub.

    HCL

  6. secure-sdlc-pipeline secure-sdlc-pipeline Public

    DevSecOps shift-left pipeline: SAST, SCA, secret scanning, container scanning, SBOM and DAST on GitLab CI and Jenkins, with a STRIDE threat model.

    Python