Omar Albalouli

# syntax=docker/dockerfile:1 — an engineer, built to spec
FROM ubuntu:devops AS omar-albalouli

LABEL maintainer="[email protected]"
LABEL role="Senior DevOps Engineer · DevSecOps & Cloud Security" experience="4y+"

# --- summary -------------------------------------------------
LABEL org.summary="Senior DevOps Engineer and security specialist with 4+ years building and securing highly available cloud and Kubernetes platforms. Specialized in embedding security across the SDLC: integrating SAST, SCA, and container image scanning (SonarQube, Trivy) into CI/CD, centralizing secrets with HashiCorp Vault, and hardening internet-facing workloads with Cloudflare. Proven track record across AWS, Azure, Terraform, Linux, and Python in identifying, triaging, and remediating vulnerabilities and driving DevSecOps practices that bake robust security into every stage of delivery."

# --- core stack ----------------------------------------------
RUN apt-get install -y \
      kubernetes \
      aws \
      terraform \
      linux \
      python \
      azure \
      helm \
      teamcity \
      azuredevops \
      githubactions \
      hashicorpvault \
      cloudflare \
      sonarqube \
      trivy \
      devsecops \
      penetrationtesting \
      vulnerabilityresearch(cve) \
      prometheus \
      grafana \
      opensearch \
      newrelic \
      ansible \
      argocd \
      kafka \
      rabbitmq \
      mysql \
      postgresql \
      mongodb \
      networking \
      vulnerabilitymanagement \
      sast/sca/dast \
      containersecurity \
      threatmodeling

# --- certifications baked into the image ---------------------
COPY --from=certs /certs/cka-certified-kubernetes-administrator /etc/omar-albalouli/
COPY --from=certs /certs/aws-certified-solutions-architect-associate /etc/omar-albalouli/
COPY --from=certs /certs/google-it-automation-with-python-professional-certificate /etc/omar-albalouli/
COPY --from=certs /certs/devops-on-aws-specialization-aws-coursera /etc/omar-albalouli/

# --- work history layers (cached, oldest first) --------------
COPY ./roles/electronic-health-solutions-ehs-hakeem.sh /career/v1/   # 2022
COPY ./roles/aspire-it-services-client-network-international.sh /career/v2/   # 2023
COPY ./roles/network-international.sh /career/v3/   # 2024
COPY ./roles/cfi.sh /career/v4/   # 2025

# --- education ---
RUN echo "BSc, Computer and Network Engineering — Al Balqa Applied University, Amman (2022) · GPA 3.55"

# --- security research ---
RUN echo "Discovered and responsibly disclosed an authorization bypass in Moodle (open-source LMS) — CVE-2022-40208 (CWE-285): students could circumvent sequential quiz navigation via web services. Performed application and source-code analysis, reported upstream, and coordinated remediation through a responsible-disclosure process."

ENV STATUS="available"
EXPOSE 443   # contact: [email protected]
HEALTHCHECK --interval=1d CMD ship-reliable-infra || exit 1
ENTRYPOINT ["solve"]
CMD ["--scalable", "--secure", "--automated"]