Matthew Hickey — Senior DevSecOps & Cloud Platform Engineer with 23+ years building high-availability platforms across AWS and Azure. Container supply-chain security, zero-trust IAM, and CI/CD pipelines your auditors will love.
Consulting engagements scoped to your pipeline, your cloud, your compliance burden.
Harden your image pipeline end to end — minimal base images, SBOM generation, signature verification, and admission control so only known-good artifacts reach production.
AWS & Azure posture reviews with prioritized remediation across IAM, network, and data layers.
Internal developer platforms and CLI automation so product teams self-serve infrastructure safely.
SOC 2, HIPAA, and NIST alignment through policy-as-code and continuous evidence collection.
Dashboards, alerting, and SLOs that catch incidents before your customers do.
Human-in-the-loop approval gates, permission boundaries, and tenant-isolation reviews for AI-assisted engineering workflows.
Describe your stack in plain words — get a security-hardened pipeline YAML back. Runs 100% in your browser, nothing leaves the page.
Name it, pick a stack — the builder generates a project, commits it with git, and builds the image. Live log below.
Fill in the form and hit Build — git + docker output streams here.Self-audited in real time — every number below is generated by this server. Nothing simulated.
Teal-bordered items are core specialties.
Roles and the stacks behind them.
Real-world security research from the terminal — not a lab.
While running a routine CI task, an AI coding assistant generated reasoning and a tool call pointing at a private environment belonging to a complete stranger — real paths and identifiers from someone else's machine, inside my session. I preserved the forensic logs, tracked down the affected engineer, and we confirmed it together: context crossing user boundaries.
Session logs showed the model authored the foreign path and variables directly — evidence saved before reaching out.
The other party verified the paths matched their private environment. A hallucination wouldn't do that. A security issue would.
An external-directory permission boundary rejected the cross-tenant tool call before any file access could occur. Defense in depth works.
Cleared for high-security enterprise and telecom environments. Coursework: Network Security, Virus Protection & Vulnerability Mitigation, Microsoft Exchange Enterprise Implementation.
Based in Guelph, ON — working with teams everywhere.
lanndoc@gmail.com · (519) 993-6056