Kyle Sorensen DevSecOps Engineer

OpenShift platform engineering

Secure platforms.
Repeatable delivery.

I engineer and operate secure container platforms for mission-focused environments—connecting OpenShift, GitOps, CI/CD, identity, and compliance into delivery systems teams can trust.

Explore deployed work See the delivery model

Core expertise

Engineering the control plane—and everything it touches.

01

OpenShift operations

Cluster lifecycle, Operators, storage, networking, MachineConfigPools, workload security, certificate trust, and production troubleshooting.

  • OpenShift 4.x
  • ODF / Ceph
  • MetalLB
  • Multus
02

Secure software delivery

Version-controlled paths from pull request to image build and deployment, backed by GitOps reconciliation and database migration practices.

  • Argo CD
  • Tekton
  • Helm
  • Flyway
03

Identity & compliance

Platform security that works in real environments: CAC/PIV, mTLS, OIDC, directory integration, least privilege, STIG evidence, and vulnerability remediation.

  • Keycloak
  • DoD PKI
  • DISA STIG
  • Tenable

Delivery model

A controlled path from change to cluster.

Every handoff is visible, versioned, and testable. Application code, platform configuration, and database changes move together through a repeatable workflow.

  1. 01Feature branchLocal container development
  2. 02Pull requestReview and automated tests
  3. 03PipelineBuild, scan, and publish
  4. 04GitOps syncDeclarative deployment
  5. 05OpenShiftHealth and policy validation

Selected outcomes

Hard platform problems, resolved at the system boundary.

GitOps integrationRepository → cluster

Made secure repository access dependable.

Integrated OpenShift GitOps with an internal Azure DevOps Server using least-privilege PAT access, trusted CA injection, proxy controls, and repository Secrets—then isolated duplicate authorization headers that were breaking Git fetches.

Cluster reliabilityControl plane → nodes

Recovered stalled configuration rollouts.

Worked across MachineConfigPools, cordoned nodes, eviction constraints, StatefulSets, and PodDisruptionBudgets to return nodes to Ready and configuration pools to Updated state.

Platform servicesShared capabilities

Operated the services delivery teams depend on.

Deployed or integrated JFrog Artifactory and Xray, Quay, Keycloak, Splunk, STIG Manager, Satellite, and Ansible Automation Platform across Linux and OpenShift environments.

Deployed work

Applications running beyond the lab.

Container-hosted application

Energy telemetry

Solar Dashboard

Power history, production reporting, system status, and operational views for a container-hosted solar platform.
Container-hosted application

Live network milestone

Bitcoin Halving Countdown

A focused, containerized countdown experience tracking the next Bitcoin block-reward halving.

Infrastructure foundation

Deep operations experience beneath the platform layer.

Windows Server & RHEL

VMware, Hyper-V & Proxmox

SQL Server & PostgreSQL

NetApp, Alletra & Rubrik

IIS & enterprise middleware

PowerShell, Bash & Ansible