Dananjaya Cahyo Kusumo
⚙️

Hi, I'm

Dananjaya Cahyo Kusumo

I build

Computer Science graduate transitioning from offensive security research into DevSecOps and Platform Engineering. Leveraging an attacker’s mindset to architect highly resilient, GitOps-driven Kubernetes infrastructure, building the secure systems I used to test. Currently engineering an end-to-end Cloud Native environment utilizing OpenTofu, ArgoCD, and HashiCorp Vault.

Featured Projects

A selection of my recent work

Tech Stack

The tools I use to architect and deliver Cloud Native infrastructure

Infrastructure & Ops

OpenTofu (Terraform)
K3s / Kubernetes
Docker
Kustomize
Helm
Traefik

CI/CD & Delivery

Github Actions
ArgoCD (GitOps)
Git

Security & Secrets

HashiCorp Vault

Experience

Cloud Native Architecture Build

Independent DevOps Project

Architecting a completely automated, zero-trust Kubernetes environment from bare metal. • Provisioning isolated virtual infrastructure utilizing OpenTofu (Terraform). • Orchestrating container workloads with K3s and managing secure ingress routing via Traefik. • Implementing a Continuous Delivery (CD) GitOps pipeline using Helm and ArgoCD to eliminate manual deployments. • Securing sensitive credentials dynamically using HashiCorp Vault and External Secrets Operator (ESO).

Freelance Developer

Client Data Management Web Application

Developed a custom Google Apps Script solution to streamline client data entry and automate database logging. • Engineered a dedicated frontend form that dynamically writes unique client records to the primary Database sheet while simultaneously appending timestamped entries to a separate ClientData log sheet. • Troubleshot and mapped correct column logic to ensure robust data integrity between user inputs and database fields.

Independent Security Researcher

Bug Bounty Programs

Conducted offensive security testing and reconnaissance on production web applications. • Developed a deep understanding of common misconfigurations, web vulnerabilities, and the attacker lifecycle. • Utilized standard penetration testing toolsets (Kali Linux) to analyze network traffic and application logic. • Transitioned into DevOps to focus on remediating infrastructure flaws at the root level via Infrastructure as Code.

Education

B.S. in Computer Science

Telkom University

Focus on underlying compute layers, networking, and software engineering. Developed a strong theoretical foundation in how distributed systems operate.
Recent Posts
Stage II: CI/CD Pipeline, GitOps & Ephemeral Secrets featured image

Stage II: CI/CD Pipeline, GitOps & Ephemeral Secrets

A deep dive into Phases 5-6: Building Docker images via GitHub Actions, eliminating configuration drift with ArgoCD, and injecting zero-trust credentials using HashiCorp Vault and …

avatar
Dananjaya Cahyo Kusumo
Stage I: Architecting a Bare-Metal KVM & K3s Foundation featured image

Stage I: Architecting a Bare-Metal KVM & K3s Foundation

A deep dive into Phases 1-4 of my DevSecOps laboratory: Virtualizing Ubuntu on a Kali Linux host via KVM, securing access with Tailscale, and bootstrapping K3s with Traefik.

avatar
Dananjaya Cahyo Kusumo

Get In Touch

Let’s build something amazing together

Connect

I'm always interested in hearing about new projects and opportunities. Whether you're looking to hire, collaborate, or just want to say hi, feel free to reach out!

✓ Copied to clipboard!
Send a message

Find me on