Noah Frost
At ai71 I deploy Ask, its enterprise AI platform, on client private cloud and Azure. I built a federal government client's staging as sole author and was its sole DevOps engineer through production go-live, speaking for DevOps on daily calls with the client and their hosting provider.
About
18 months as a Police Constable in the Metropolitan Police taught me skills that don't appear on technical assessments: translating complex requirements for non-expert audiences, making decisions under pressure with incomplete information, and working within compliance frameworks where documentation actually matters.
I carried that into DevSecOps through intensive training at Cyber Agoge, led by a Global CISO with experience at KPMG, BAE Systems, and UK Government. Then I spent months building, using Claude and ChatGPT to accelerate learning, but implementing and testing everything hands-on across production-grade portfolio builds, an autonomous AI build system, and a self-hosted Kubernetes cluster with live observability.
An LLM in Criminal Justice from Northumbria plus AWS, CompTIA Security+, and Terraform certifications. Zero trust architecture plus the instinct to document everything like it might end up in court.
Infrastructure & Security
Portfolio builds in zero trust, supply chain security, secrets management, AI security testing, and production DevSecOps pipelines. Each repository includes architecture decisions and working code.
Zero Trust Kubernetes
Production-grade zero trust on EKS with Cilium eBPF, SPIFFE/SPIRE workload identity, mTLS, WireGuard encryption, and L7 micro-segmentation, aligned to NIST SP 800-207.
Supply Chain Security
End-to-end supply chain security: dual-format SBOMs via Syft, keyless signing with cosign/Sigstore, SLSA provenance attestation, Grype scanning, and 5 Kyverno ClusterPolicies in Enforce mode.
Secrets Management
Vault 1.15.4 HA on EKS with Raft consensus, AWS KMS auto-unseal, 4 secrets engines (PostgreSQL, AWS IAM, PKI, Transit), and Vault Secrets Operator syncing to Kubernetes.
Agentic AI Security
Automated platform testing AI agents against OWASP Top 10 for LLMs (2025) and Agentic AI (2026). Plugin-style attack registry, composite scoring, dual CI/CD with 15 custom Semgrep rules.
DevSecOps Pipeline
Four-stage security pipeline with Semgrep, Trivy, Gitleaks, Checkov gates. EKS deployment with GuardDuty and CloudWatch streaming to Splunk Cloud via dual ingestion.
AI/ML Governance
Dual-layer policy enforcement: Sentinel blocks non-compliant Terraform plans pre-apply, OPA Gatekeeper rejects ML deployments missing governance labels at Kubernetes admission. EU AI Act compliance.
Multi-Cloud Orchestration
Unified deployment pipeline provisioning identical web infrastructure across AWS, Azure, and GCP from single GitHub Actions workflow. Terraform with provider-specific state backends, Ansible for OS-adaptive configuration, Datadog for unified monitoring.
AI FinOps Platform
Real-time cost observability for AI/ML infrastructure. Kafka 3-broker cluster via Strimzi streams GPU utilisation and API spend events. OpenCost, Prometheus, and Grafana for anomaly detection.
AI/ML IDP
Self-service portal for GPU workloads with cost governance. Backstage templates with budget verification, MLflow for experiment tracking, ArgoCD for GitOps. Hybrid EKS/ECS architecture.
Kubernetes Observability
Complete logging and metrics on EKS. Fluentd DaemonSet tails container logs to Elasticsearch via Logstash. Prometheus and Grafana for metrics. Environment-specific Terraform sizing.
GitOps ArgoCD
Production-style Kubernetes deployment where Git commits flow to running workloads automatically. ArgoCD with automated sync and self-healing. kube-prometheus-stack for metrics and dashboards.
Healthcare Threat Model
Comprehensive threat model for HIPAA-compliant platform. 15 prioritised threats across five trust boundaries. STRIDE methodology mapped to MITRE ATT&CK and HIPAA Security Rule.
Serverless Application
Three-tier serverless architecture. React frontend via CloudFront/S3, single-purpose Lambda functions behind API Gateway, DynamoDB with on-demand capacity. Modular Terraform with explicit dependencies.
CI/CD Comparison
Side-by-side implementation deploying to shared infrastructure. Jenkins on EC2 with declarative pipeline for Flask, GitLab CI with Docker stages for Node.js. SSH-based deployment reflecting common migration patterns.
Portfolio CI/CD
This site's infrastructure. GitHub Actions deploys to S3 with CloudFront CDN on every push. Route 53 DNS, ACM SSL certificates, path-based cache invalidation. Terraform manages all AWS resources.
Jarvis Webapps
An autonomous AI build system running on a dedicated Mac. Jarvis takes a webapp brief and delivers a live, deployed application (hero art, animation, code, and AWS deployment) with zero manual intervention.
Homelab
AI Build System & Kubernetes Cluster
Phase 1: Autonomous Webapp Pipeline
An agent with its own GitHub account, AWS credentials, and deployment pipeline. Starting with Jarvis (the build system itself), then five production security webapps built and deployed with zero manual intervention. Each webapp includes full-stack implementation: hero art, component design, responsive layouts, animated interactions, production AWS deployment, domain configuration, and SSL certificates.
Phase 2: Kubernetes Cluster & AI Operations
K3s on Apple Silicon with Cloudflare Tunnel for secure external access. Production-grade security hardening: 4 namespaces (workloads, monitoring, ingress, tunnel), Pod Security Standards enforcement, 12 network policies, RBAC with least-privilege service accounts, non-root pods, read-only rootfs, and capability drops.
Complete observability stack: Prometheus for metrics collection across the cluster, Grafana with 28 custom dashboards showing cluster health, resource utilisation, and security events. Jarvis queries cluster health via kubectl to stay aware of infrastructure state and make deployment decisions based on real-time capacity.
Skills
Tools and platforms used across the portfolio builds.
Certifications
Cloud, security and Terraform certifications, verifiable on Credly.
