Cloud Security Engineer · DevSecOps
Azure cloud security engineer focused on Zero Trust architecture, Defender for Cloud, and baking security into CI/CD pipelines. Based in Lagos, Nigeria — open to remote opportunities.
About
I specialize in Azure cloud security — designing and implementing Zero Trust architectures, Defender for Cloud posture management, Microsoft Sentinel SIEM/SOAR, and identity governance with Microsoft Entra ID.
On the DevSecOps side, I embed security controls directly into CI/CD pipelines: secrets scanning, IaC security with Checkov and Bicep, container image scanning, and policy-as-code with Azure Policy and OPA. I use Terraform and Bicep to provision hardened, least-privilege infrastructure at scale.
With seven Microsoft certifications and hands-on experience across the full Azure security stack, I bridge the gap between security policy, platform engineering, and developer workflows.
Introduction video
Expertise
Credentials
B.Sc, Chemistry
University of Ibadan, Nigeria · 2019–2024
Portfolio
End-to-end Zero Trust implementation on Azure — Entra ID conditional access, Defender for Cloud CSPM, Microsoft Sentinel SIEM with custom KQL detection rules, and Privileged Identity Management for just-in-time access.
Security-first CI/CD pipeline integrating Checkov for IaC scanning, Trivy for container image scanning, OWASP ZAP for DAST, and GitHub Advanced Security for secrets detection — all gating deployments in Azure DevOps.
Bicep-based IaC provisioning Key Vault, storage, and AKS under Zero Trust principles — no hardcoded secrets, managed identity auth, least-privilege RBAC, and Azure Policy guardrails enforced at the subscription level.
Contact
Open to cloud security roles, consulting engagements, and collaboration on identity and Zero Trust projects. Reach out and I'll get back to you promptly.