Justice Gideon-K

About Justice Gideon-K

As a cloud and infrastructure supply chain security & maintenance professional, Developed and implemented fully automated CI/CD pipelines using GitLab CI/CD for multiple projects, incorporating static code analysis, vulnerability scanning, and dynamic application security testing (DAST), reducing deployment times and cutting security vulnerabilities in deployed applications by 70% through early detection and remediation. Implemented a Jenkins-based CI/CD pipeline for e-commerce and web applications, reducing deployment times by 60%, integrating automated security and performance testing, and utilizing Docker for containerization of microservices. Handled web servers such as Apache HTTP Server, Microsoft IIS, and SMTP AWS SES, as well as FTP servers like Samba for IIS and Filezilla for Linux Ubuntu, utilizing Nginx as a reverse proxy for hosting and deploying front and backend web pages without domain names using express-generator, and automated alerting for EC2 and other AWS services using SNS and CloudWatch. Managed AWS IAM temporary credentials to ensure the security of AWS resources, integrating IAM with other AWS services for efficient access including least privilege access, multi-factor authentication (MFA), and Security Token Service (STS) with credential rotation policies, and used AWS KMS encryption for protecting AWS RDS databases and AWS S3. Proficient in configuring PA firewall policies, threat prevention profiles, and security zones to enforce data traffic restrictions; mitigating advanced bot traffic, SQL injection, and brute force attacks on dynamic PHP frameworks using AWS WAF; and experienced in a wide range of networking technologies, including routing and switching, LAN design, creating NAT, ACL, and DHCP. Configured and fine-tuned AWS Inspector, AWS CloudTrail, and Splunk for rule sets to detect security issues within servers, serverless architecture, and Docker container frameworks, with strong knowledge in Splunk web server and forwarder concepts, server CPU information, monitoring database and website monitoring, utilizing Splunk SFDC add-on to collect data from respective servers, and performing Splunk user ID administration. I focusing on DevOps practices with AWS, Creating a private docker registry, using a public registry, migrating docker images, accompanying docker images, and writing my docker file. Mitigating Advanced Bad Bot Traffic and Sql injection prevention on endpoints and also stopping brute force attacks on high-end traffic crypto websites and dynamic php frameworks webpages Using AWS WAF & PA.

Experience

1. Cloud Support Engineer

   Infinity Learn

   Jun 2025 — Present