Skip to content
View brj0067's full-sized avatar

Block or report brj0067

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Content in all repositories owned by your account will be closed.
Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. Markdown is supported. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
brj0067/README.md

Brahma Raj Joshi

Azure DevOps IaC Security

Kathmandu, Nepal


Engineering Focus

Designing, automating, and securing enterprise-grade Azure environments using CI/CD-driven delivery models and Infrastructure as Code.

Focused on building scalable, secure cloud platforms aligned with Zero Trust, automation-first operations, and production reliability.


Featured Projects


DevOps & Platform Toolchain

CI/CD & Release Engineering

  • GitHub Actions (multi-stage pipelines, approvals, secrets management)
  • Jenkins (pipeline orchestration & automation)
  • Git (branching strategy, PR workflow, trunk-based concepts)
  • YAML-based pipeline design
  • Artifact management & versioning

Containerization & Orchestration

  • Docker (image lifecycle, optimization)
  • Azure Kubernetes Service (AKS)
  • Azure Container Registry (ACR)
  • Microservice deployment patterns

Infrastructure as Code

  • Bicep (modular, environment-based deployments)
  • ARM Templates
  • Terraform (foundational)
  • Environment isolation (dev / staging / prod)

Cloud Platform (Azure)

  • App Services, Azure Functions, Virtual Machines
  • VNet, NSG, Private Endpoints, DNS
  • Azure Key Vault (secrets & identity integration)
  • Managed Identity
  • Backup & disaster recovery strategies

Observability & Operations

  • Azure Monitor
  • Log Analytics
  • Application Insights
  • Alerting & operational response

Security & Identity

  • Microsoft Entra ID (RBAC, Conditional Access, MFA)
  • Zero Trust architecture
  • Microsoft Intune (endpoint compliance)
  • Secure secret management
  • Least privilege access

Scripting & Automation

  • PowerShell
  • Bash
  • YAML automation workflows

Architecture Capabilities

  • High availability & scalable workload design
  • Secure network segmentation
  • Identity-driven infrastructure design
  • Automated environment provisioning
  • CI/CD-driven infrastructure promotion
  • Secure-by-default deployment patterns

Selected Engineering Work

Azure Web & Function Platform (IaC + CI/CD)

  • Modular Bicep infrastructure
  • Environment-specific deployments
  • Automated CI/CD integration
  • Secure networking & identity

Container Deployment (AKS + Docker)

  • Image build & push to ACR
  • AKS deployment testing
  • Environment-based configuration

Azure Backup Automation Framework

  • PowerShell automation
  • Improved operational resilience
  • Scheduled execution & monitoring

Certifications

CCNA Certified Network Security Professional


Current Focus

  • Kubernetes production readiness
  • DevSecOps pipeline integration
  • Policy-as-Code
  • Advanced container orchestration

Contact

LinkedIn: https://www.linkedin.com/in/brahma-raj-joshi/ Email: brahmraj128@gmail.com Website: https://www.brj.com.np/

Popular repositories Loading

  1. kubevirtbmc kubevirtbmc Public

    Forked from kubevirtbmc/kubevirtbmc

    A Kubernetes operator of virtual BMCs that provide Redfish and IPMI services for KubeVirt virtual machines

    Go 1

  2. Zkteco-Time-Attendance Zkteco-Time-Attendance Public

  3. Bicep-IAAC-template-Wb-FunctionApp Bicep-IAAC-template-Wb-FunctionApp Public

    How to create iaac bicep template of azure web/function app using Bicep

  4. Backup-Azure-App Backup-Azure-App Public

    Create backup of azure web app and function app using power shell script

  5. Dax-Query-Bi Dax-Query-Bi Public

    HTML

  6. learn-github-actions learn-github-actions Public

    A modern, beginner-to-advanced GitHub Actions & DevOps learning path

    Shell