~/loveth-oballe/projects

Projects

Each one is written up like a design review: what was broken, why it mattered, what I built and what changed afterwards.

IAM · DevSecOps

Fintech · 2024 · 4 months

Just-in-time AWS access

Replaced standing admin roles with time-boxed, approved access requested from Slack and logged end to end.

  • Okta
  • AWS IAM Identity Center
  • SCIM
  • Slack
  • AWS Step Functions
  • Lambda (Go)
standing admin assignments
42 → 0
default elevation window
1 h

SRE

Fintech · 2023 · 3 months

SLO burn-rate alerting

Rebuilt paging around error budgets so on-call wakes up for customer pain, not CPU graphs.

  • Prometheus
  • Thanos
  • OpenTelemetry
  • Alertmanager
  • PagerDuty
  • Sloth
pages per week
60 → 11
customer-reported outages since launch
0

DevSecOps · DevOps

Healthcare SaaS · 2022 · 5 months

Signed software supply chain

Every container that reaches production is built in CI, scanned, signed and checked at admission. Nothing else gets scheduled.

  • GitHub Actions
  • Docker Buildx
  • SLSA provenance
  • Trivy
  • Syft (SBOM)
  • Sigstore cosign (keyless)
production images signed with provenance
100%
median pipeline time
38 → 9 min
Sample content (6)

Replace these, then set sample: false: