Skip to content
View JubethSB's full-sized avatar

Achievements

Achievement: Pair Extraordinaire

Achievements

Achievement: Pair Extraordinaire

Block or report JubethSB

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. Markdown is supported. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
JubethSb/README.md

Hi, I'm Jubeth S B 👋

Cloud & DevSecOps Engineer — Kubernetes · AWS/GCP · Terraform · Zero-Trust Security

I build and secure cloud infrastructure end to end: provisioning it as code, running workloads on Kubernetes, wiring up delivery pipelines, and hardening the whole path against real attackers. I care about least privilege, defence in depth, and proving a control works by trying to break it — not just deploying it.

Currently going deep on DevSecOps and platform/SRE work: admission control, supply-chain signing, service-mesh zero-trust, and hands-on penetration testing.

🛠️ Technical Stack

Category Skills
Containers & Orchestration Kubernetes, Istio (mTLS, AuthorizationPolicy), Argo CD, Docker, Docker Compose
Cloud AWS (EKS, EC2, VPC, S3, RDS, IAM, CloudWatch) · GCP (Compute, IAM, Firewall)
Infrastructure as Code Terraform (modules, state management, providers)
CI/CD & Supply Chain GitHub Actions, Jenkins, Cosign (keyless), SBOM / SLSA, Trivy, Semgrep, Gitleaks
Security & Policy Pod Security Standards, Kyverno, Sealed Secrets, NetworkPolicy, RBAC, CVSS, OWASP Top 10
Observability Prometheus, Grafana
Automation & OS Python (Boto3), Bash, Linux (RHEL/Ubuntu), system hardening

🚀 Featured Projects

🔐 Dodo Payments — DevSecOps Assessment

Hardening a PCI-scoped payments microservice end to end, every control verified at runtime.

  • Workload: non-root + read-only rootfs + dropped capabilities, PSS restricted + Kyverno admission, Sealed Secrets, least-privilege RBAC
  • Supply chain: GitHub Actions gating (Trivy · Semgrep · Gitleaks) → cosign keyless signing + SBOM attestation → pull-based GitOps with Argo CD
  • Zero-trust: Istio mTLS STRICT, default-deny AuthorizationPolicy on SPIFFE identity (200 vs 403), NetworkPolicy defence-in-depth
  • Offensive: passive OSINT + a pen-test (RCE 9.8, SSRF 8.6, PAN exposure, weak tokenization) with each finding mapped back to the control that stops it

☸️ AWS Enterprise EKS Platform

Production-ready Kubernetes on AWS via Terraform — custom networking, automated node provisioning.

🔁 Automated GitOps Platform (K8s & Argo CD)

Self-healing application with automated sync policies — "zero-touch" delivery.

🧰 End-to-End DevSecOps Pipeline

Full CI/CD with automated builds, security scanning, and real-time observability.

📈 GitHub Activity

📫 Connect

Open to Cloud / DevOps / SRE / DevSecOps roles — remote or relocation.

Pinned Loading

  1. aws-eks-enterprise-platform aws-eks-enterprise-platform Public

    aws-eks-enterprise-platform

    HCL

  2. k8s-platform k8s-platform Public

    A cloud-native Guestbook application deployed using GitOps principles with Argo CD, Terraform, and Kubernetes. Features automated syncing, self-healing infrastructure, and declarative configuration.

    HCL

  3. local-devops-project local-devops-project Public

    End-to-end DevSecOps platform simulating a production cloud environment. Features Jenkins for CI/CD automation, Terraform for IaC, Docker orchestration, and real-time observability with Prometheus …

    HCL

  4. aws-cost-optimizer aws-cost-optimizer Public

    Python automation to reduce EC2 costs by 60%

    Python

  5. aws-monitoring-terraform aws-monitoring-terraform Public

    Infrastructure as Code modules to deploy CloudWatch Dashboards and Alarms

    HCL

  6. docker-flask-app docker-flask-app Public

    Containerized Python application with CI/CD pipelines using GitHub Actions & Jenkins

    Python