Syed Amjad Ali
Cloud Native Security Engineer
I build security controls that enforce themselves.
I automate security policy across Linux fleets and cloud platforms — firewall governance at scale, CIS hardening, Kubernetes admission control, service mesh zero-trust, and signed software supply chains. Four years building and running this in production on AWS and Azure.
Selected work
Firewall Automation & Governance Platform
Centralised, database-driven network access control across a production Linux fleet — policy compiled per host, applied safely, and revoked automatically.
- Python
- iptables / IPSets
- MySQL
- Ansible
GitOps Delivery Platform with Service Mesh
A Kubernetes platform where a git commit is the only deployment mechanism, and releases roll out as canaries under service mesh traffic control.
- Kubernetes
- ArgoCD
- Istio
- Helm
Zero-Trust Secure Supply Chain Platform
Seven independent enforcement layers on Kubernetes — from signed images in CI down to runtime detection — each one verified by attempting to bypass it.
- Kubernetes
- Kyverno
- Cosign
- Istio
The through-line
Default-deny with an explicit, reviewable allowlist — whether that's an iptables chain, a Kubernetes admission webhook, or a service mesh authorization policy. Same discipline, different layer of the stack.
I care about controls that can be verified, not just asserted. If I say something is blocked, I can show you it being blocked.