David Thomson

Background

About David Thomson

Senior DevOps Engineer with over a decade of experience, specialising in embedding security into the DNA of cloud and Kubernetes infrastructure. I architect and build secure, scalable, and automated systems for data-intensive environments. My focus is on shifting security left—integrating robust controls directly into the CI/CD pipeline and championing a "secure-by-default" approach to Infrastructure as Code. I thrive on solving complex compliance challenges and leading the technical implementation for certifications like ISO 27001 and SOC 2. Key Areas of Expertise: DevSecOps & Cloud Security: Leading compliance initiatives (ISO 27001, SOC 2), embedding security into CI/CD pipelines (SAST, SCA, Trivy), hardening cloud infrastructure, and applying the Principle of Least Privilege to IAM. Cloud & Kubernetes Architecture: Designing and managing high-availability, large-scale clusters on AWS and Azure (EKS, AKS). Proven experience in multi-cloud and on-premises environments. Infrastructure as Code & Automation: Expert-level proficiency in Terraform and Ansible for building reliable and repeatable infrastructure. Architecting and managing complex CI/CD pipelines with GitLab CI and GitHub Actions. Incident Response & Threat Detection: Proven experience in leading forensic analysis for security incidents using tools like AWS CloudTrail and Athena to trace and remediate threats.