Noah Frost
Former Police Constable → DevSecOps Engineer. Building zero trust architecture, supply chain security, and AI security testing systems. Incident response instincts meet infrastructure automation.
Open to opportunities
About
18 months as a Police Constable in the Metropolitan Police taught me skills that don't appear on technical assessments: translating complex requirements for non-expert audiences, making decisions under pressure with incomplete information, and working within compliance frameworks where documentation actually matters.
I carried that into DevSecOps through intensive training at Cyber Agoge, led by a Global CISO with experience at KPMG, BAE Systems, and UK Government. Then 18 months of building — using Claude and ChatGPT to accelerate learning, but implementing and testing everything hands-on across 20+ production-grade projects, an autonomous AI build system, and a self-hosted Kubernetes cluster with live observability.
The combination is unusual: an LLM in Criminal Justice from Northumbria plus AWS, Terraform, and Kubernetes certifications. Zero trust architecture plus the instinct to document everything like it might end up in court. Technical depth plus the ability to explain why a deployment is blocked without making enemies.
Infrastructure & Security
20+ projects built in 18 months. Zero trust, supply chain security, secrets management, AI security testing, and production DevSecOps pipelines. Each repository includes architecture decisions and working code.
Zero Trust Kubernetes
Production-grade zero trust on EKS with Cilium eBPF, SPIFFE/SPIRE workload identity, mTLS, WireGuard encryption, and L7 micro-segmentation — aligned to NIST SP 800-207.
Supply Chain Security
End-to-end supply chain security: dual-format SBOMs via Syft, keyless signing with cosign/Sigstore, SLSA provenance attestation, Grype scanning, and 5 Kyverno ClusterPolicies in Enforce mode.
Secrets Management
Vault 1.15.4 HA on EKS with Raft consensus, AWS KMS auto-unseal, 4 secrets engines (PostgreSQL, AWS IAM, PKI, Transit), and Vault Secrets Operator syncing to Kubernetes.
Agentic AI Security
Automated platform testing AI agents against OWASP Top 10 for LLMs (2025) and Agentic AI (2026). Plugin-style attack registry, composite scoring, dual CI/CD with 15 custom Semgrep rules.
DevSecOps Pipeline
Four-stage security pipeline with Semgrep, Trivy, Gitleaks, Checkov gates. EKS deployment with GuardDuty and CloudWatch streaming to Splunk Cloud via dual ingestion.
AI/ML Governance
Dual-layer policy enforcement: Sentinel blocks non-compliant Terraform plans pre-apply, OPA Gatekeeper rejects ML deployments missing governance labels at Kubernetes admission. EU AI Act compliance.
Multi-Cloud Orchestration
Unified deployment pipeline provisioning identical web infrastructure across AWS, Azure, and GCP from single GitHub Actions workflow. Terraform with provider-specific state backends, Ansible for OS-adaptive configuration, Datadog for unified monitoring.
AI FinOps Platform
Real-time cost observability for AI/ML infrastructure. Kafka 3-broker cluster via Strimzi streams GPU utilisation and API spend events. OpenCost, Prometheus, and Grafana for anomaly detection.
AI/ML IDP
Self-service portal for GPU workloads with cost governance. Backstage templates with budget verification, MLflow for experiment tracking, ArgoCD for GitOps. Hybrid EKS/ECS architecture.
Kubernetes Observability
Complete logging and metrics on EKS. Fluentd DaemonSet tails container logs to Elasticsearch via Logstash. Prometheus and Grafana for metrics. Environment-specific Terraform sizing.
GitOps ArgoCD
Production-style Kubernetes deployment where Git commits flow to running workloads automatically. ArgoCD with automated sync and self-healing. kube-prometheus-stack for metrics and dashboards.
Healthcare Threat Model
Comprehensive threat model for HIPAA-compliant platform. 15 prioritised threats across five trust boundaries. STRIDE methodology mapped to MITRE ATT&CK and HIPAA Security Rule.
Serverless Application
Three-tier serverless architecture. React frontend via CloudFront/S3, single-purpose Lambda functions behind API Gateway, DynamoDB with on-demand capacity. Modular Terraform with explicit dependencies.
CI/CD Comparison
Side-by-side implementation deploying to shared infrastructure. Jenkins on EC2 with declarative pipeline for Flask, GitLab CI with Docker stages for Node.js. SSH-based deployment reflecting common migration patterns.
Portfolio CI/CD
This site's infrastructure. GitHub Actions deploys to S3 with CloudFront CDN on every push. Route 53 DNS, ACM SSL certificates, path-based cache invalidation. Terraform manages all AWS resources.
Jarvis Webapps
An autonomous AI build system running on a dedicated Mac. Jarvis takes a webapp brief and delivers a live, deployed application — hero art, animation, code, and AWS deployment — with zero manual intervention.
Homelab
AI Build System & Kubernetes Cluster
Phase 1: Autonomous Webapp Pipeline
An agent with its own GitHub account, AWS credentials, and deployment pipeline. Starting with Jarvis (the build system itself), then five production security webapps built and deployed with zero manual intervention. Each webapp includes full-stack implementation — hero art, component design, responsive layouts, animated interactions, production AWS deployment, domain configuration, and SSL certificates.
Phase 2: Kubernetes Cluster & AI Operations
K3s on Apple Silicon with Cloudflare Tunnel for secure external access. Production-grade security hardening: 4 namespaces (workloads, monitoring, ingress, tunnel), Pod Security Standards enforcement, 12 network policies, RBAC with least-privilege service accounts, non-root pods, read-only rootfs, and capability drops.
Complete observability stack: Prometheus for metrics collection across the cluster, Grafana with 28 custom dashboards showing cluster health, resource utilisation, and security events. Jarvis queries cluster health via kubectl to stay aware of infrastructure state and make deployment decisions based on real-time capacity.
Skills
Tools and platforms used across 20+ projects.
Certifications
Industry-recognized certifications demonstrating cloud and security expertise.
