Ilhaam Ghiffari

What I work with

• Cloud

  Microsoft Azure — AKS, Key Vault, VNet, remote state

• IaC

  Terraform with remote state and plan-gated CI

• Containerization

  Multi-stage Docker builds, non-root, hardened nginx

• Kubernetes

  AKS, HPA, network policies, Pod Security Admission

• CI/CD

  GitHub Actions with OIDC — no static secrets

• GitOps

  ArgoCD — declarative sync, self-healing deploys

• Security

  Trivy scanning, zero static secrets, security headers

• Observability

  Prometheus, Grafana dashboards-as-code, Blackbox probes