I am a wide-ranging technologist focusing on building secure, high-performance, and scalable solutions for mission-focused organisations using modern cloud and full-stack development practices. Recently CompTIA Security+ certified, I enjoy developing and deploying robust, auto-scaled applications using Infrastructure as Code (IaC), ensuring compliance, performance, and operational excellence from development to production.

I'm currently seeking roles that challenge me to apply my enterprise engineering experience and cyber security know-how, integrating DevSecOps and serverless architecture to deliver mission-critical applications.

These repositories showcase my ability to design, build, and deploy complex, production-ready applications across the full stack.

1. Community Security Checkup Automation Tool (CSCAT)

   • Focus: Infrastructure as Code (IaC), Security Auditing, Serverless.
   • Description: A fully serverless web security auditing tool that checks critical domain configurations (HTTP headers, DNS/Email records). The entire infrastructure is managed by Terraform and automatically deployed via a GitHub Actions CI/CD pipeline with OIDC authentication. A strong demonstration of DevSecOps practices.
   • Technologies: Terraform, AWS Lambda (Python), AWS API Gateway, S3, GitHub Actions.
   • Repo: https://github.com/dvhzldn/cscat
   • Demo

2. Volunteer Matching Application

   • Focus: Full CI/CD Pipeline, Authentication, GraphQL, Serverless Backend.
   • Description: A production-ready solution that connects volunteer skills with charity needs. Features a complete CI/CD pipeline defined by AWS SAM and a back-end built on Python FastAPI exposing a GraphQL API. Implements secure user authentication and management via AWS Cognito.
   • Technologies: AWS SAM, Python (FastAPI), Ariadne (GraphQL), AWS Cognito, DynamoDB, GitHub Actions.
   • Repo: https://github.com/dvhzldn/volunteer-matching-app
   • Demo

3. Secure Logging Dashboard

   • Focus: Data Security, Principle of Least Privilege, Real-time Monitoring.
   • Description: A comprehensive logging and monitoring solution built entirely on AWS SAM. It establishes a secure, real-time data pipeline where logs are generated, stored in a private, encrypted S3 bucket, and processed by separate, permission-controlled Lambda functions. The dashboard accesses metrics only through a controlled API Gateway endpoint, ensuring logs are never publicly exposed and adhering strictly to the Principle of Least Privilege.
   • Technologies: AWS SAM, AWS Lambda (Python), AWS API Gateway, Encrypted S3, CloudFormation.
   • Repo: https://github.com/dvhzldn/secure-logging-dashboard
   • Demo

• Email: dave hazeldean at gmail com
• LinkedIn: /davehazeldean
• Website: djwh.me