Skip to content
Taufiq Permana
DevSecOps Engineer · Jakarta

Taufiq Permana

Currently at Acclime, specializing in cloud infrastructure, CI/CD automation, and security integration across AWS, GCP, and Azure. Passionate about DevOps culture, R&D, and enabling teams to ship faster with confidence.

8+Years Exp.
3Cloud Platforms
4+Certifications
2Publications

Core Skills

Cloud Computing

Deploying and managing scalable, cost-optimised infrastructure on AWS, GCP, and Azure, with a focus on high availability and operational efficiency.

DevSecOps

Integrating security across the entire software development lifecycle through SAST, DAST, SCA, secrets scanning, and policy-as-code, plus supply chain hardening via SBOM generation, container image signing, dependency auditing, and CI/CD pipeline tamper protection.

CI/CD Automation

Designing and maintaining automated delivery pipelines on GitLab CI/CD, GitHub Actions, and Jenkins with integrated security gates, quality checks, and GitOps workflows.

Container Orchestration

Running production workloads on Kubernetes and Docker with a focus on resource efficiency, auto-scaling, rolling deployments, and container security hardening.

Infrastructure as Code

Provisioning and managing cloud resources declaratively with Terraform and Ansible, enabling reproducible environments, drift detection, and audit-ready change history.

Monitoring & Observability

Building full-stack observability with Prometheus, Grafana, and the ELK Stack, covering metrics, logs, and traces to enable proactive alerting and faster incident resolution.

Tech Stack

Cloud
AWSGCPAzure
OS
DebianUbuntuCentOS
Containers
DockerKubernetesDocker Compose
CI/CD & IaC
GitLab CI/CDGitHub ActionsJenkinsTerraformAnsible
Monitoring
PrometheusGrafanaELK StackSentry
Security & AppSec
SonarQubeTrivyTruffleHogOWASP ZAPDefectDojoOpenVPNWireGuard

Professional Experience

DevSecOps Engineer

Acclime

Apr 2026 – Present
Jakarta · Hybrid
  • Designing and managing scalable cloud infrastructure on AWS, GCP, and Azure, with security embedded across the full automation lifecycle.
  • Implementing automated code security gates, secret management, vulnerability and attack surface analysis, infrastructure hardening, and optimizing GitLab Ultimate.
  • Embedding static and dynamic analysis (SAST/DAST), Software Composition Analysis (SCA), secrets scanning, SBOM generation, and container image signing into delivery pipelines using Trivy.
  • Provisioning declarative, reproducible, and audit-ready multi-cloud architecture across AWS, GCP, and Azure using Terraform, Kyverno, Helm charts, and Ansible with built-in drift detection.
  • Aligning cloud governance, access controls, patching schedules, and infrastructure configurations with ISO/IEC 27001:2022 information security standards.
  • Constructing full-stack monitoring, centralized log aggregation, and SIEM monitoring to ensure real-time threat visibility and rapid incident response using Datadog.

DevOps Engineer

PT. IDStar Cipta Teknologi

May 2022 – Apr 2026
Jakarta · Hybrid
  • Implementing DevOps culture and practices to enhance application development and project delivery.
  • Creating cloud infrastructure designs and implementing "Shift Left" security strategies in CI/CD pipelines.
  • Conducting attack surface analysis, system configuration, troubleshooting, and benchmarking.
  • Managing backup strategies, disaster recovery plans, and comprehensive infrastructure monitoring.
  • Leading R&D initiatives to improve internal processes and tools.

IT Support & Network Engineer

PT. Tosan Perkasa Unicorn

Sep 2019 – May 2022
Bandung · On-site
  • Managed IT infrastructure, networks, and software to ensure smooth daily operations.
  • Provided technical support for third-party applications and troubleshooting internal systems.
  • Ensured operational continuity by configuring and optimizing network devices.

Network Engineer

Freelance

May 2019 – Aug 2019
Bandung
  • Designed computer network topologies and managed detailed network documentation.
  • Configured essential network devices, including firewalls, routers, switches, and access points.

Education

Bachelor's Degree

Informatics Engineering

STMIK AMIK BANDUNG · 2020 – 2025

Vocational High School

Computer Network Engineering

SMKN 2 Baleendah · 2016 – 2019

Certifications & Training

Google Cloud Certified

Associate Cloud Engineer

2023

Bangkit Academy

Distinction Student, Cloud Computing

2023

DevOps School

Cilsy Fiolution, Cohort #14

2022

BNSP Certified

Junior Network Administrator

2019

Publications

2024

GitLab Self-Hosted Implementation on AWS

Implementation of Self-Hosted GitLab as VCS Server using AWS Cloud Platform at PT. IDStar Cipta Teknologi.

2023

Cloud Computing Learning Path

Final Report for Independent Study at Bangkit Academy 2023 by Google, GoTo, and Traveloka.

Personal Portfolio, Blog and Documentation