captain@colombo:~$ ./introduce --brief

Piranavan
Nadarajah

▍

Builds secure, automated cloud platforms. Breaks them first, on purpose. I build the platforms I used to defend.

Colombo, Sri Lanka · open to remote · ⌘K to navigate

$ whoami --long

From defending platforms to building them

Security teams find problems. Platform teams ship products. I do both jobs — and each one makes me better at the other.

Most organizations run security and engineering as separate worlds: one builds fast, the other audits after. My career has been about collapsing that gap — from the national FINCSIRT defending Sri Lanka's banks, through 24×7 SOC leadership, VAPT and DevSecOps, into platform engineering — across banking, telecom and enterprise IT, for local and international clients, including a Fortune 500 enterprise.

What that combination delivers: platforms that are fast and defensible. Pipelines with security designed in rather than bolted on. Infrastructure holding 99.99% availability for millions of users. One engineer who can handle a compliance audit in the morning and a production incident in the afternoon — no translator required.

What's next: AI on both sides of the fence. I'm building toward AIOps — operations that detect, predict, and heal intelligently — and AI Security, protecting the machine-learning systems every organization is racing to adopt.

FINCSIRTSOCDevSecOpsPlatformAI×Ops×Sec

MISSION

Make secure the default: platforms where the safe path and the fast path are the same path.

VISION

Engineering where AI observes, security informs design, and humans handle only what machines can't.

NOW

AIOps × AI Security — applying AI to operations, and defending the AI systems entering production.

EDUCATION

MSc Cyber Security — University of Gloucestershire · 2026Dissertation: The Biometric Deed

BSc (Hons) Cyber Security — SLIIT

$ systemctl status ops.service sec.service

Two domains, one engineer

Most teams hire a platform engineer or a security engineer. The rare leverage is one person who ships with both threat models in their head.

● active

DevOps & Platform Engineering

Build it fast, keep it running.

  • Azure & AKS platform engineering at production scale
  • Infrastructure as Code — Terraform, Ansible
  • CI/CD — GitLab, Jenkins, Azure DevOps, GitHub Actions
  • Kubernetes operations — Rancher, Harbor, Helm (CKA)
  • Observability, SLOs and 99.99% uptime platforms

● active

Cybersecurity & DevSecOps

Assume breach, design accordingly.

  • National-level incident response — FINCSIRT, Sri Lanka banking sector
  • SOC leadership — detection, triage, incident escalation
  • Led VAPT — web, cloud, infrastructure & Kubernetes (eJPT)
  • Threat hunting & detection engineering — Sentinel, KQL, Splunk
  • DevSecOps — SAST, SCA, container & cluster hardening
  • ISO 27001 / SOC 2 audit-readiness engineering

$ kubectl get skills -A --sort-by=depth

Skills galaxy

Blue nodes build; amber nodes defend. Size is depth of daily use. Filter or search to isolate a constellation.

50/50 nodes
AzureAKSAzure SQLApp GatewayKubernetesDockerHelmRancherHarborNeuVectorTerraformAnsiblePackerGitLab CIJenkinsAzure DevOpsGitHub ActionsArgoCDNexusSonarQubeTrivySnykVeracodeBurp SuiteNessusMicrosoft SentinelMicrosoft DefenderSplunkCrowdStrike FalconThreat HuntingDetection EngineeringVAPTMITRE ATT&CKEntra IDIntunePurviewZero TrustISO 27001SOC 2PrometheusGrafanaELKAzure MonitorPythonBashPowerShellKQLGoPostgreSQLLinux (RHCE)

$ git log --career --oneline --graph

Experience

Seven years, both sides of the fence. Expand any commit for the diff.

  • Engineer Azure & AKS infrastructure with Terraform and Ansible across environments
  • Build and maintain GitLab CI/CD pipelines and platform automation
  • Operate Azure SQL / PostgreSQL data platforms with observability baked in
AzureAKSTerraformAnsibleGitLabPostgreSQL

$ ls ~/certs --group-by=domain

Certifications

Twelve active credentials spanning Kubernetes, Linux, Azure, cloud security and offensive security.

▸ Kubernetes & Linux

  • CKACertified Kubernetes AdministratorCNCF / Linux Foundation
  • RHCERed Hat Certified EngineerRed Hat
  • RHCSARed Hat Certified System AdministratorRed Hat

▸ Microsoft — DevOps & Cloud

  • AZ-400DevOps Engineer ExpertMicrosoft
  • AZ-104Azure Administrator AssociateMicrosoft
  • AZ-900Azure FundamentalsMicrosoft

▸ Microsoft — Security

  • SC-100Cybersecurity Architect ExpertMicrosoft
  • AZ-500Azure Security Engineer AssociateMicrosoft
  • SC-200Security Operations Analyst AssociateMicrosoft

▸ Cloud Security & Offense

  • CCSKCertificate of Cloud Security KnowledgeCloud Security Alliance
  • eJPTeLearnSecurity Junior Penetration TesterINE Security
  • CCCertified in CybersecurityISC2

$ docker ps --filter status=shipped

Featured projects

Research, running infrastructure, and one side quest. Each card unfolds into architecture → challenge → result.

▸ architecture
Fingerprint minutiae → deterministic key derivation → RSA signing of the deed → private key discarded after signing → tamper-evident SQLite audit trail for verification.
▸ challenge
Deriving a stable key from an inherently noisy biometric, while guaranteeing the private key never persists anywhere it could be stolen.
▸ result
Working prototype, MSc dissertation (University of Gloucestershire, 2026), with a related peer-reviewed publication on biometric signatures for land-registry verification.
PythonRSABiometricsSQLiteApplied Crypto
Next.jsTypeScriptTailwindGitHub Actions
open
Pythonscikit-learnNeural NetsGenetic Algorithms
JavaScriptCanvasGitHub Pages
open
0+

years across security & platforms

0+

active certifications

0.00%

uptime platforms operated

0

domains, one engineer

$ watch -n1 tech-radar --split=domain

Technology radar

What I run in production (adopt), what I'm piloting (trial), and what I'm studying (assess) — platform on the left, security on the right.

adopttrialassess◤ platformsecurity ◥
Terraform·aAKS·aGitLab CI·aAnsible·aArgoCD·tCrossplane·aOpenTofu·aeBPF·aTrivy·aNeuVector·aZero Trust·tAI SecOps·tLLM red-teaming·a

$ tail -f ~/writing.log

Writing

Notes from both sides of the fence — platform engineering, security, and where AI is dragging both.

▸ in print: Peer-reviewed research: biometric digital-signature schemes for land-registry verification — University of Gloucestershire, 2026.

$ ssh captain@colombo

Open a session

No contact form, no published email — that's a deliberate security posture, not an oversight. The terminal explains.

captain — ssh — 80×24

Last login: from somewhere behind a well-configured firewall

Type `help` to see available commands.

captain@colombo:~$