Zeshan Tariq
- Experience
- 8+ years — Government, Finance, Defence & Consultancy
- Focus
- Secure, AI-assisted delivery on Azure & Kubernetes
- Location
- United Kingdom — remote
- Contact
- Via the form below — reaches me directly
- Freelance
- Available for contract & permanent
Azure-certified DevSecOps engineer bridging business and technology — with security built in, not bolted on.
Over 8 years across Government, Consultancy, Audit and Finance: designing and operating Azure & AKS platforms, automating with Terraform and Bicep, building CI/CD pipelines, and translating requirements into working, secure software.
I pair SOC practices (threat monitoring, incident response, Sentinel/KQL) with SRE principles (SLOs, automation, observability) — and increasingly put AI agents to work across the SDLC: AI-assisted code review, autonomous remediation and policy enforcement, so teams ship faster while security and reliability hold.
At a glance
DevSecOps
Shift-left security — SAST/DAST, IaC & dependency scanning and policy-as-code wired into every pipeline.
Cloud & AKS
Azure & Kubernetes platforms designed, secured and run end to end — scalable, resilient workloads on AKS.
IaC & Automation
Terraform, Bicep and Ansible — infrastructure shipped safely and repeatably, with automated remediation.
SRE & Observability
SLOs, Azure Monitor, Grafana & Prometheus and automated incident response to drive MTTR down.
SOC & Threat Detection
Microsoft Sentinel & KQL hunting, full-lifecycle incident response, malware analysis and response playbooks.
Agentic & AI DevOps
AI agents and copilots that review code, remediate drift and cut toil — with guardrails and human sign-off.
Automating Azure + on-prem with Terraform, Bicep & PowerShell; GitLab CI/CD with built-in security scanning; automated remediation via Logic Apps & runbooks to cut MTTR; compliance through Azure Policy & Defender for Cloud.
Stood up and led a new SOC team. Threat hunting in Microsoft Sentinel with advanced KQL, full-lifecycle incident response, malware analysis, forensics and automated response playbooks.
Infrastructure automation & Kubernetes orchestration; hardened with Defender, Sentinel & Splunk plus vulnerability scanning; observability via Log Analytics, Grafana & Elastic; B2C SSO architecture.
Security, logging & troubleshooting across the DSAB Kubernetes microservice platform on AWS.
Build/release pipelines to Azure App Service & Dynamics 365; Azure AD & Power Platform admin; shift-left security.
Designed secure deployment procedures with architects & InfoSec officers, minimising downtime and addressing risk through shared-responsibility on Azure.
Introduced DevOps best practice & SonarQube into Azure DevOps CI/CD; GitHub repository management.
400
AZ-400 · Microsoft Certified
Amazon Web Services
Leading software deployment with Kubernetes, AKS, Docker & GitHub Actions · CI/CD & IaC with Terraform · root-cause analysis with dev, test & product teams · mentoring engineers · communicating confidently with clients and delivery leads.
Azure, AKS, Azure DevOps, Sentinel · AWS (EC2, S3, IAM, CloudWatch)
GitLab CI/CD, GitHub Actions, Jenkins, TeamCity, Octopus · Terraform, Bicep, Ansible, Puppet
Defender for Cloud, Sentinel, KQL, Splunk, OWASP, Palo Alto, Fortinet
Azure Monitor, Log Analytics, App Insights, Grafana, Prometheus, Kibana, Dynatrace
PowerShell, Python, Bash, C# · Azure SQL, Cosmos DB, PostgreSQL
Open to remote DevSecOps, platform & SRE roles — and AI-enablement of your delivery pipeline. Drop a line and I'll reply quickly.