I’m Joseph Velliah, a Staff Cybersecurity Engineer based in Austin, Texas. I work in identity governance — helping organizations define, enforce, and audit who and what can access their systems. For 15+ years I’ve built and run enterprise-scale platforms on Azure, AWS, and GCP, across cloud security, Kubernetes, DevSecOps, and AI/GenAI.

This blog is where I share field notes from that work: zero-trust patterns, workload identity, secure pipelines, and what actually holds up in production.

Focus areas

  • Identity governance — access lifecycle, least privilege, policy-as-code, and auditability
  • Zero-trust & multi-cloud security — service identity, IAM federation, workload trust, and compliance automation on Azure, AWS, and GCP
  • Kubernetes in production — service mesh, secrets, sidecars, and production operations
  • DevSecOps & AI engineering — secure CI/CD, RAG, MCP tooling, and practical GenAI in security workflows

Community

  • Docker Captain — containers, Kubernetes, and cloud-native practices
  • AWS Community Builder — cloud security, DevSecOps, and AI systems

Certifications

Azure Solutions Architect Expert · Azure DevOps Engineer Expert · Certified DevSecOps Practitioner

Elsewhere

Browse all posts