Seifeddine Lamrimed

Cloud & DevSecOps Engineer

Helping companies build secure and scalable cloud infrastructure across AWS, Azure and GCP.

View My WorkGet In Touch
Seifeddine Lamrimed

About Me

Cloud and DevSecOps engineer with experience delivering secure infrastructure for enterprise clients across fintech, energy, automotive and telecom sectors.

Cloud Infrastructure

Designed and delivered end-to-end cloud environments across AWS, Azure and GCP from networking and access control to compute and storage across enterprise clients.

Security & Compliance

Embedded security across the full stack from access control and encryption to runtime protection and audit readiness. Delivered ISO 27001 compliance for production environments.

CI/CD & GitOps

Built secure delivery pipelines with security controls baked in from the start. Implemented GitOps workflows enabling automated, auditable deployments across multi-environment setups.

Monitoring & FinOps

Built observability stacks enabling proactive alerting and reduced detection time across production environments. Optimized cloud spend through rightsizing, commitment-based pricing and architectural improvements.

Selected Work

ISO 27001 Readiness: Platform & Pipeline Security
Fintech

ISO 27001 Readiness: Platform & Pipeline Security

Platform and pipeline security for a B2B payments platform

Key Achievements

—Enforced security gates in the delivery pipeline covering SAST results, container image scanning and dependency analysis, blocking on agreed severity thresholds
—Deployed OPA Gatekeeper for policy enforcement across Kubernetes workloads
—Migrated secrets management to HashiCorp Vault with dynamic credentials and rotation policies
AWSKubernetesTerraformGitLab CIFluxCDTrivyOPA GatekeeperVault
Case Study →
Data Lake Terraform Module Library
Telecommunications

Data Lake Terraform Module Library

Standardizing security and compliance across a telecommunications data platform

Key Achievements

—Replaced independently defined, independently reviewed Lambda, S3 and Glue resources with one centrally maintained standard
—Established a model where a single fix or hardening improvement updates every team's infrastructure at once
—Reduced the organization's security review surface for these resource types from N implementations to one
AWSTerraformLambdaS3GlueStep Functions
Case Study →
Infrastructure Drift Detection & Remediation
Energy

Infrastructure Drift Detection & Remediation

Restoring infrastructure consistency for an energy sector client

Key Achievements

—Recovered more than 30 applications containing multiple instances of drift
—Documented a maintenance process now used as the team's standard approach to drift remediation
—Built automated alerting so new drift is caught immediately instead of resurfacing as an incident
AWSTerraform
Case Study →
ECS Infrastructure & DevSecOps Pipeline for an Event-Driven Platform
Energy

ECS Infrastructure & DevSecOps Pipeline for an Event-Driven Platform

Infrastructure, pipeline and security hardening for a Kafka-based vehicle event processing platform

Key Achievements

—Delivered a fully Terraform-provisioned ECS cluster and task definition setup for the platform, built from the ground up
—Built and operated the DevSecOps pipeline used for ongoing deployments
—Integrated Security Hub, giving the team centralized visibility into findings from day one
KafkaAWS ECSTerraformAWS Security HubAWS WAF
Case Study →

Tools & Technologies

Cloud Platforms

AWSAzureGCPAWS Secrets Manager

Container Orchestration

KubernetesDockerHelmArgoCDFlux CDDocker SwarmECS

Infrastructure as Code

TerraformAtlantisCloudFormationARM TemplatesAnsible

CI/CD & Automation

GitLab CI/CDGitHub ActionsJenkinsAzure DevOps

Monitoring & Observability

PrometheusGrafanaDatadogELK StackCloudWatch

Security & Compliance

HashiCorp VaultOPA GatekeeperKyvernoGuardDutyWAFTrivySnykSemgrepGitleaksISO 27001SOC 2PCI DSS

Programming & Scripting

PythonBashPowerShell

Databases

PostgreSQLMySQLDynamoDBMongoDBRedis

Contact

Get In Touch

Open to discussing cloud infrastructure, DevSecOps challenges and compliance engagements.

LinkedIn

Connect on LinkedIn

Email

Send me an email

Or email directly at contact@seiflamrimed.com