CLOUD SECURITY · DEVSECOPS · SRE
I secure, automate and stabilise cloud platforms.
I bring together DevSecOps, SRE and infrastructure as code to support regulated and high-availability environments.
Cloud Security & DevSecOps EngineerGreater Manchester, United Kingdom
Open and verifiable
Public proof
Follow the work and public profiles at the source.
Where I can help
What I solve
Practical engineering work across security, delivery, reliability and day-to-day operations.
Cloud security
Cloud posture, IAM hardening and security controls aligned to recognised frameworks.
Secure delivery
CI/CD and infrastructure-as-code baselines with automated vulnerability scanning.
Reliability and observability
Monitoring, alerting and incident investigation for dependable platforms.
Linux and automation
System troubleshooting and Python, Bash and infrastructure automation.
AI automation
Practical AI automation and agent workflows with Hermes Agent.
Work in practice
Selected outcomes
Selected contributions from recent roles.
Strengthened platform observability and alerting to surface system health and issues earlier.
BNP Paribas · Operations Platform SupportBuilt GitHub Apps and automated enterprise repository lifecycle management through GitHub APIs.
Huler PLC · Site Reliability EngineeringAutomated provisioning, patching and vulnerability scanning across hybrid cloud platforms.
BNP Paribas · Senior DevSecOps EngineeringAutomated provisioning and supported application transitions to Docker and Kubernetes microservices.
ADESA PLC · Senior DevOps EngineeringCareer chronology
Experience
A compact view of platform, security and operations work.
Feb 2026–Present
GLCTech
Co-Founder & CTO
Founded a cloud security and observability consultancy serving regulated professional-services SMEs across the UK. Design secure cloud architectures, conduct posture and IAM reviews, and build secure CI/CD and infrastructure-as-code baselines.
Sep 2025–Feb 2026
BNP Paribas
Operations Platform Support Engineer (SRE / DevSecOps)
Supported and stabilised enterprise banking platforms in a regulated environment. Improved observability and alerting, investigated performance and availability issues, and supported incident response and remediation.
Feb 2025–Jul 2025
Huler PLC
Site Reliability Engineer / Site Reliability & DevSecOps Engineer
Led secure CI/CD tooling, developed GitHub Apps, automated repository lifecycle management and introduced vulnerability scanning and policy enforcement.
Jan 2024–Feb 2025
BNP Paribas
Senior DevSecOps Engineer
Owned secure automation pipelines across hybrid cloud, automating provisioning, patching and vulnerability scanning. Produced runbooks and remediation playbooks aligned to internal audit controls.
Aug 2022–Mar 2023
ADESA PLC
Senior DevOps Engineer
Automated infrastructure provisioning with Terraform, Ansible and Azure DevOps YAML; built Python cloud API tools and supported application transitions to Docker and Kubernetes.
Feb 2022–Jun 2022
Precog PLC
Site Reliability Engineer
Managed Kubernetes clusters on AWS EKS and GCP GKE, developed Go deployment tooling and designed observability with custom metrics exporters.
Feb 2021–Dec 2021
Bikmo Ltd
Lead DevOps Engineer
Designed an automation strategy with Ansible, Terraform and CI/CD pipelines, and established secure container and observability workflows.
Feb 2019–Jan 2020
Jaguar Land Rover
Lead DevOps Engineer / SRE
Developed Go applications for cloud infrastructure management, implemented Kubernetes orchestration and provisioned GCP infrastructure with Terraform.
2012–2019
Earlier roles
DevOps, systems and Linux engineering
Bee Engineering, Capgemini, E: Fundamentals, EnVirtual and Rated People. CV-listed work across DevOps, systems integration, infrastructure automation and Linux system administration.
Public repositories
Owned public projects
Repository descriptions checked against their public README files.
AWS Route53 to Cloudflare migration
Python and Terraform tooling to convert Route53 zones into validated Cloudflare configuration. Unsupported records are reported for manual review; controlled cutover follows a documented runbook.
Python · Terraform · AWS · Cloudflare
View repositoryAzure Firewall zero-trust network
A Terraform configuration for a zero-trust network for web applications using Azure Firewall.
Terraform · Azure Firewall
View repositoryDevOps labs and learning monorepo
A curated repository of automation tools, configurations and experiments, including a qBittorrent plugin synchroniser and an Ansible/Vagrant lab.
Python · Ansible · Vagrant · Bash
View repositoryLeadership and operations
Building with GLCTech
Co-Founder & CTO
At GLCTech, I am responsible for development operations and the management of international clients. My presence in the United Kingdom extends the company’s reach into the European market.
Tools and practice
Skills and platforms
Cloud and platforms
- AWS
- Azure
- GCP
- EKS
- GKE
- Kubernetes
- Docker
- Linux
Security and governance
- Cloud security
- IAM
- Vulnerability management
- GitHub Advanced Security
- Zero Trust
- ISO 27001
- NIST
- CIS controls
Infrastructure and automation
- Terraform
- CloudFormation
- Ansible
- SaltStack
- Python
- Go
- Bash
Delivery and observability
- GitHub Actions
- GitLab CI
- Jenkins
- Azure DevOps
- Grafana
- Datadog
- Prometheus
- ELK
Reading and contribution
Writing and public footprint
Articles by Tchize Matias on How to Do Computing.
Learning and foundations
Education and development
Education
BSc Cyber Security and Forensics
Kingston University, London
2011–2014Professional development stated in CV
- GitHub Advanced Security
- Kubernetes administration and orchestration
- Terraform infrastructure automation
- Ansible infrastructure build and deployment
- AWS and GCP cloud architecture and security
- SDLC and DevSecOps practices
Languages
- English · fluent
- Portuguese · native
- Spanish · conversational
Open a conversation
Bring me the platform problem.
If you are securing cloud infrastructure, improving a delivery workflow or stabilising a service, let’s talk through the challenge.
Email Tchizetchize@tchizematias.com