Aerospace · SecDevOps Rebuild of Satellite-Imagery Platform
Role: SecDevOps / Platform Engineer (Freelance)GEOINT · Cloud Security · Platform EngineeringPrior experience — Michele Sanna, freelanceStatus: Completed
Zero-trust platform rebuild for a commercial satellite-imagery service: Kubernetes + Istio service mesh with mTLS, SPIFFE/SPIRE workload identity, SLSA-3 build pipelines with Sigstore signatures, and cryptographic tagging for export-controlled scenes.
- Kubernetes
- Istio
- Terraform
- Vault
- ArgoCD
- GitHub Actions
- Trivy
- Falco
- Sigstore
- PostGIS
Scroll to explore →
3 weeks → 27 mindeployment lead-time (DORA elite tier)
22% → 3%change failure rate reduction
0 critical CVEsin production images for 11 consecutive months post-migration
4 months → 3 weeksnew defence-customer onboarding (ISO 27001 + NIS2 readiness passed)
Next
Want this kind of work in your business?
Start with the problem, not the platform. Tell us what's slow, manual or breaking.