I'm a DevSecOps Engineer passionate about secure automation, cloud-native technologies, and scalable infrastructure.
I build systems where development, operations, and security work together smoothly.

• Secure & automate the SDLC
• Engineer optimized and production grade Docker images
• Build & manage Kubernetes clusters and Virtual Machines deployments
• Create CI/CD pipelines with GitHub Actions, GitLab CI and Jenkins
• Monitor systems using OpenTelemetry, Prometheus, Loki and Grafana
• Work with Spring Boot, Node.js, TypeScript, Python and Golang

• Optimized Dockerfiles — Production-ready Dockerfiles for popular frameworks, libraries, and tools. Clean, optimized, and DevOps-approved.
• Jenkins MCP — A comprehensive MCP server for Jenkins CI/CD with 25+ tools and dual transport support (TypeScript).
• EnvGuard — Validate .env files against a declarative YAML schema (Go).
• Release Note Generator — GitHub Action that drafts release notes from Conventional Commit PR titles when you push a tag.
• Kustomize Kubeconform Action — GitHub Action to validate Kubernetes manifests with Kubeconform.
• Task Board — Full-stack demo app (Go + React) with CI/CD, Docker Compose, and full observability (OpenTelemetry, Prometheus, Loki, Tempo, Grafana).
• Z-Wallet — Web3 wallet application built with React, Ethers.js, and Truffle.
• VR Tourism — Immersive tourism experience using Next.js, Three.js, and 360° photo viewers.

I write about DevSecOps, automation, and cloud-native technologies on my personal blog:

👉 mosbehi.firas.im

✨ Always learning, always automating.