Samir H.

Cloud Security & DevSecOps Engineer for teams running on AWS, Azure, GCP, BigQuery, ETL, and CI/CD. I help teams secure cloud infrastructure, data pipelines, and deployment workflows without slowing engineering down. That includes IAM, Entra ID, vulnerability assessment, security analysis, CI/CD hardening, DevSecOps, and information security work across the full environment. Most clients come to me when things already feel messy. Access is too open, cloud infrastructure has grown without clear security rules, CI/CD is moving fast without enough guardrails, and nobody is fully sure where the real risk is. That is exactly why they hire me. I do not just point out issues. I work on the actual infrastructure, access model, cloud setup, and delivery flow so your team can reduce risk, stay organized, and keep shipping with more confidence. 𝙎𝙚𝙧𝙫𝙞𝙘𝙚𝙨 𝙄 𝙊𝙛𝙛𝙚𝙧: 𝟭. Cloud Security Reviews: I review cloud infrastructure, identity, networking, permissions, workloads, and data flows to find real security gaps and give clear priorities. 𝟮. DevSecOps & CI/CD Security: I secure CI/CD workflows so teams can build, test, and deploy with better controls, fewer mistakes, and less production risk. 𝟯. IAM & Entra ID Hardening: I improve IAM, Entra ID, roles, permissions, least privilege, and access design so the right people get the right access without unnecessary exposure. 𝟰. Vulnerability Assessment: I run vulnerability assessment work, validate findings, remove noise, and help your team focus on what actually matters. 𝟱. Security Analysis: I break down risks in plain English so leadership, engineering, and operations can understand what is wrong, what matters most, and what to fix first. 𝟲. Cloud Infrastructure Security: I help secure infrastructure in AWS, Azure, and GCP, including compute, networking, storage, identity, and deployment patterns. 𝟳. Data Engineering & ETL Security: I support secure ETL flows, BigQuery environments, and data architecture decisions where access, movement, storage, and control of data matter. 𝟴. Information Security Support: I help teams improve their information security setup with practical controls, documentation, clearer ownership, and cleaner processes. 𝟵. Quality Assurance for Security Changes: After fixes are made, I verify that the changes actually work and that the environment is more secure, stable, and easier to manage. 𝙏𝙝𝙚 𝙠𝙞𝙣𝙙 𝙤𝙛 𝙬𝙤𝙧𝙠 𝙄 𝙝𝙚𝙡𝙥 𝙢𝙤𝙨𝙩 𝙬𝙞𝙩𝙝: 🔹 Securing AWS, Azure, and GCP environments without slowing down delivery 🔹 Hardening IAM, Entra ID, permissions, and access controls 🔹 Improving CI/CD security and building cleaner DevSecOps workflows 🔹 Running vulnerability assessment and turning findings into real fixes 🔹 Securing ETL pipelines, BigQuery environments, and data infrastructure 🔹 Helping engineering teams understand and reduce cloud security risk 🔹 Cleaning up weak infrastructure and making it easier to maintain over time 🔹 Supporting information security work with practical implementation, not theory 𝙄 𝙖𝙢 𝙚𝙭𝙥𝙚𝙧𝙩 𝙖𝙩: 𝟭. Cloud Security, CI/CD Security, CyberSecurity, Information Security, DevSecOps 𝟮. Azure, AWS, and GCP, Docker, Kubernetes 𝟯. Vulnerability Assessment, Cloud Infrastructure, Security Analysis 𝟰. Azure, AWS, and GCP, Docker, Python 𝟱. BigQuery, ETL, and Data Engineering 𝟲. IAM, Entra ID, SOC, SOC2, ICO Thanks for reading my bio, I am happy to help you, just send me a message and we can discus everything in more detail.