Engineering teams slowed down by 40-minute flaky CI builds, manual Friday-night SSH deployments, or missing staging environments frequently search to hire a freelance Release Engineering, GitHub Actions, GitLab CI & DevSecOps programmer. I am Aldian Fazrihady, a Senior Freelance Full Stack & DevSecOps Engineer available via Upwork.
Core CI/CD Velocity & Zero-Downtime Release Capabilities
- Sub-3-Minute Parallelized CI Pipelines: Optimizing Docker BuildKit layer caching (`type=gha` / registry cache), pnpm/uv dependency caching, and sharded pytest/Playwright test runners across GitHub Actions, GitLab CI, and Google Cloud Build.
- Ephemeral Pull-Request Preview Environments: Automatically spinning up isolated preview URLs and branched databases (Neon / Supabase / Cloud Run revisions) for every pull request so product managers can test changes before merge.
- OIDC Keyless Cloud Deployments & SAST/SBOM Gates: Replacing long-lived AWS/GCP static secret keys in CI with short-lived OpenID Connect (OIDC) federated tokens, paired with Semgrep, Trivy, and Gitleaks secret scanning.
Frequently Asked Questions
Why should we replace `AWS_SECRET_ACCESS_KEY` in GitHub Actions with OIDC federation?
Static IAM keys stored in CI secrets can be exfiltrated and never expire automatically. OIDC federation issues temporary 15-minute credentials scoped strictly to your repository and branch with zero stored secrets.
How can we hire you to modernize our CI/CD and release pipeline?
Reach out on Upwork.