Open to SRE, platform and security engineering roles

Loveth Oballe

I keep production up and access tight.

Site reliability, DevSecOps and identity engineering. I build the guardrails that let teams ship daily without handing everyone admin.

Four jobs, one on-call rotation

Reliability and security fail together. I work across all four so the fixes don't fight each other.

SRE

SLOs that page on user pain, runbooks people follow at 3 a.m., and postmortems that change something.

  • Prometheus
  • Grafana
  • OpenTelemetry
  • PagerDuty
  • Kubernetes

DevOps

Infrastructure as code from the first commit, pipelines that finish in minutes, environments anyone can recreate.

  • Terraform
  • GitHub Actions
  • Argo CD
  • Helm
  • AWS

DevSecOps

Signed builds, scanned images and policy checks in CI, so security review happens before merge.

  • Sigstore
  • Trivy
  • Kyverno
  • OPA
  • Snyk

IAM

Least privilege people can live with: SSO everywhere, short-lived credentials, access that expires on its own.

  • Okta
  • AWS IAM Identity Center
  • Entra ID
  • SCIM
  • Vault

Selected work

All projects →

IAM · DevSecOps

Fintech · 2024 · 4 months

Just-in-time AWS access

Replaced standing admin roles with time-boxed, approved access requested from Slack and logged end to end.

  • Okta
  • AWS IAM Identity Center
  • SCIM
  • Slack
  • AWS Step Functions
  • Lambda (Go)
standing admin assignments
42 → 0
default elevation window
1 h

SRE

Fintech · 2023 · 3 months

SLO burn-rate alerting

Rebuilt paging around error budgets so on-call wakes up for customer pain, not CPU graphs.

  • Prometheus
  • Thanos
  • OpenTelemetry
  • Alertmanager
  • PagerDuty
  • Sloth
pages per week
60 → 11
customer-reported outages since launch
0

DevSecOps · DevOps

Healthcare SaaS · 2022 · 5 months

Signed software supply chain

Every container that reaches production is built in CI, scanned, signed and checked at admission. Nothing else gets scheduled.

  • GitHub Actions
  • Docker Buildx
  • SLSA provenance
  • Trivy
  • Syft (SBOM)
  • Sigstore cosign (keyless)
production images signed with provenance
100%
median pipeline time
38 → 9 min

1:30 · Pitch

Who I am and what I work on

Ninety seconds on my background, the problems I like, and the roles I'm looking for.

Walkthroughs and deep dives →
Recording in progressAdd a youtubeId to publish this video.

For recruiters

The answers to the first-call questions, so we can spend that call on the role.

Target roles
Senior SRE · Platform engineer · Cloud security / IAM engineer
Experience
6 years in production operations
Location
Remote, US Eastern (UTC−5)
Work authorization
Authorized to work in the US
Certifications
CKA · AWS Security Specialty · Okta Certified Professional
Notice period
Two weeks
Contact
[email protected]
Sample content (6)

Replace these, then set sample: false: