Who I am
Eliazar Chodjayev
# Platform Engineer & DevSecOps
Cloud platforms · Israel
About
I build secure cloud platforms and compliance infrastructure across AWS, GCP, and Azure —
combining Kubernetes, Terraform, DevSecOps, and pragmatic architecture. Over 4+ years,
I've built 20+ landing zones, cut PR-to-prod cycles by 50%+,
and cut cloud + tooling spend by roughly $45K/year.
Multi-account and multi-project foundations, IAM guardrails, network segmentation, DNS, security baselines, and cost-aware defaults.
Kubernetes platforms across cloud providers with GitOps, observability, and autoscaling for production workloads.
CI/CD pipelines with embedded security checks, SAST/SCA, secret detection, and vulnerability scanning baked into delivery.
Terraform, Terragrunt, CloudFormation, and cloud-native automation for repeatable environments and scalable changes.
Tech stack
Experience
Projects
Extracted and sanitized from private client and production work, then published as standalone reference repos — so commit history reflects the date of publication, not the years of work behind them.
Python · FastAPI · React · Postgres · Celery · Terraform · Vault PKI
Built and deployed solo: a multi-tenant compliance platform with 140+ automated checks mapped across 90 SOC 2, CIS AWS L1, and ISO 27001 controls. Uses scoped read-only IAM roles for agentless collection and deliberately runs on a single VPS with Docker Compose—not Kubernetes or microservices—because that is the right operational tradeoff at its current scale.
↗ github.com/Veritrail/VeritrailHCL · Terraform · EKS · Karpenter · Helm
Production EKS platform with Karpenter autoscaling, IRSA, External Secrets, observability, and encrypted storage.
↗ github.com/awakzdev/eks-production-iacHCL · Terraform · Terragrunt · Lambda · Aurora Serverless · Kinesis · CloudFront
Serverless AWS platform with Lambda, Aurora Serverless v2, API Gateway, SQS FIFO, Firehose, CloudFront, least-privilege IAM, and KMS.
↗ github.com/awakzdev/aws-serverless-iac-portfolioHCL · Terraform · Terragrunt · GKE · ArgoCD
GCP platform with GKE, ArgoCD GitOps, Cloud SQL, private networking, IAM, CDN, WAF, and Cloud Armor.
↗ github.com/awakzdev/gcp-platform-iacHCL · Terraform · Terragrunt · Lambda · Python 3.11 · KMS · Secrets Manager
Serverless audit pipeline that retrieves Monday.com logs, encrypts them, and forwards them into SIEM workflows.
↗ github.com/awakzdev/monday-audit-pipelineHTML · GitLab CI · OWASP ZAP · SAST
GitLab pipeline with SAST, secret detection, authenticated OWASP ZAP DAST, and a unified security report.
↗ github.com/awakzdev/gitlab-devsecops-ciHCL · Lambda · EventBridge · SNS · SQS
AWS alerting system using EventBridge, Lambda, SNS, Slack fan-out, DLQ handling, and least-privilege IAM.
↗ github.com/awakzdev/aws-eventbridge-notificationsJinja2 · Ansible · Traefik · CI
Ansible automation for provisioning, Traefik routing, application deployments, and multi-environment CI workflows.
↗ github.com/awakzdev/ansible-platform-automationContact
Open to senior platform, DevSecOps, and cloud security roles.
Four years building and running production cloud platforms for client organizations, plus a compliance-automation product shipped solo. Most interested in work where security and platform engineering are the same job.