Security architecture for people who still ship.

ZodOps is the public notebook of a security architect based in San Diego, CA. The work underneath it is twelve years of cloud, DevOps, containers, and data protection — designing controls that have to live next to a release train, not in a slide.

I care about the unglamorous parts: image provenance, IAM graphs, admission policy, DSPM inventory, and DLP on the paths that actually leave the cluster. Most of the writing is implementation-level on purpose. If a design cannot be typed into a repo, it is not finished.

This site is intentionally small. Four topics, a handful of essays, and a way to get in touch. No newsletter maze. The same pages are meant to be hosted as a static site — GitLab Pages, GitHub Pages, or any object-storage CDN — with a custom domain in front.