Skip to content
View ibrahim-2010's full-sized avatar
1 follower · 2 following

Block or report ibrahim-2010

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Content in all repositories owned by your account will be closed.
Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. Markdown is supported. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
ibrahim-2010/README.md

About Me

I'm currently working on: Building production-grade DevSecOps platforms on AWS EKS – including an AI-powered SRE incident response agent (Operator Copilot) that connects to live Kubernetes clusters via the Model Context Protocol, diagnoses production incidents, and executes remediations only after a human approves.

I'm looking to collaborate on:

  • Cloud-native infrastructure projects – EKS, Terraform, ArgoCD GitOps patterns
  • DevSecOps pipelines – supply chain security, policy-as-code, compliance automation
  • Platform engineering – internal developer platforms, self-service infrastructure, SRE tooling
  • AI + infrastructure – AIOps, LLM-powered operational tooling, MCP integrations

I'm currently learning:

  • AegisPipeline – multi-account AWS landing zone with Cosign/Sigstore image signing, Falco runtime security, and compliance-as-code (SOC 2 / CIS / NIST)
  • Advanced Kyverno policy authoring for enterprise admission control
  • OpenTelemetry instrumentation across distributed microservices

Ask me about:

  • AWS EKS platform engineering – cluster bootstrapping, IRSA, OIDC, node group management
  • GitOps with ArgoCD – App-of-Apps pattern, multi-environment rollouts, drift detection
  • Secrets management – External Secrets Operator + AWS Secrets Manager via IRSA (zero plaintext in Git)
  • DevSecOps pipelines – Jenkins JCasC, SonarQube quality gates, Trivy CVE scanning
  • Observability stacks – Prometheus, Grafana, Loki, Tempo, PrometheusRule alerts
  • FinOps on AWS – cost audit automation, budget anomaly detection, tag governance

Fun fact: I documented every real production issue I hit while building – 19 in nimbus-retail-platform, 17 in cloud-native-eks, 16 in DevSecOps-Three-Tier-EKS. The troubleshooting logs are in the repos. Real infrastructure breaks in real ways.

🔧 Tech Stack

AWS Terraform Kubernetes Docker Jenkins GitHub Actions ArgoCD Prometheus Grafana Python Bash Script SonarQube Apache Kafka Redis Postgres MongoDB Nginx NodeJS FastAPI Git Linux Ollama Anthropic Claude MCP NodeJS Bash Script FastAPI Loki Tempo OpenTelemetry Trivy Kyverno External Secrets Git Helm Amazon EKS Amazon RDS Amazon ECR Amazon ElastiCache Route 53 Terraform Linux

🏅 Certifications

  • AWS Certified Solutions Architect – Associate
  • AWS Certified Cloud Practitioner

📌 Featured Projects

Project What it does Stack
nimbus-retail-platform Production EKS platform – 5 microservices, Strimzi Kafka, ESO + IRSA secrets, Kyverno policies, full observability Terraform · ArgoCD · Kafka · Kyverno · Prometheus/Loki/Tempo
operator-copilot-starter AI SRE agent – diagnoses Kafka lag, CrashLoopBackOff, TLS expiry on live EKS via MCP. Human approval gate enforced in server code Python · Anthropic API · MCP · Kubernetes client
cloud-native-eks Three-tier app on EKS with Jenkins JCasC (zero UI), ExternalDNS, 9-stage DevSecOps pipeline Terraform · Jenkins JCasC · ArgoCD · SonarQube · Trivy
DevSecOps-Three-Tier-EKS End-to-end DevSecOps pipeline to EKS 1.34 – built with 2026 tooling, CVSS v4 workaround documented Terraform · Jenkins · ArgoCD · Trivy · Prometheus
aws-cost-optimization FinOps framework – automated audit surfaced EC2 at 0.18% CPU, orphaned EIPs. Budget alerts, tag enforcement, Lambda scheduled shutdown Terraform · Python boto3 · AWS Budgets · EventBridge
cicd_jenkins Jenkins CI/CD to EKS – commit to live deployment in ~25 seconds Jenkins · Maven · Docker · EKS · Prometheus

📫 Connect

LinkedIn GitHub

Pinned Loading

  1. operator-copilot-starter operator-copilot-starter Public

    AI-powered SRE incident response agent using Claude (Anthropic) + MCP – auto-diagnoses Kafka lag, CrashLoopBackOff, and TLS expiry on live EKS clusters | 12 operational tools, approval-gated mutati…

    Python

  2. nimbus-retail-platform nimbus-retail-platform Public

    Production-grade AWS EKS platform – Terraform IaC, 6 microservices, GitOps (ArgoCD), DevSecOps (Jenkins/SonarQube/Trivy), full observability, Kafka, Kyverno, ESO, and Phase 3 AI operator copilot (O…

    Shell 1

  3. cloud-native-eks cloud-native-eks Public

    Three-tier app on AWS EKS: React + Node.js + PostgreSQL - full IaC with Terraform, GitOps via ArgoCD, Jenkins JCasC, SonarQube, Trivy security scanning, and Prometheus/Grafana monitoring | 17 produ…

    Shell 2

  4. DevSecOps-Three-Tier-EKS DevSecOps-Three-Tier-EKS Public

    "End-to-end DevSecOps pipeline deploying a three-tier app to AWS EKS with Jenkins, ArgoCD, and Prometheus/Grafana"

    JavaScript

  5. aws-cost-optimization aws-cost-optimization Public

    AWS cost optimization framework that cuts cloud spend by 25-35% for SaaS platforms. Terraform modules for automated budget alerts with anomaly detection, tag enforcement via AWS Config, and Lambda-…

    HCL

  6. cicd_jenkins cicd_jenkins Public

    Jenkins CI/CD pipeline that takes a Java app from commit to EKS in ~25 seconds - Maven build, Docker containerize, push to DockerHub, deploy to Kubernetes, monitored with Prometheus & Grafana

    HTML