IaC & the Future of DevSecOps

Speakers:

Dan Hernandez is a Customer Engineer at Pulumi. If you have used CloudFormation, ARM, Terraform, or k8s templates, you understand the frustration with YAML based domain-specific languages. When going above trivial examples, there are gotchas and nuances that make you wish you had the power of a true programming language.

In this talk, learn about the next evolution of Infrastructure as Code, Pulumi. We'll walk through what Pulumi is and how it makes working with the cloud easier using real programming languages.

Chris Altamimi is an AI, Cloud, and DevOps enthusiast with a deep-rooted passion to push the boundaries of his field. Often times finding himself responsible for more than he bargained for, he is known for questioning the current trends and reconstructing meaningful solutions from scratch.

Infrastructure as Code principles bring many benefits to organizations that heavily rely on technology. In this presentation, Chris will discuss how applying Infrastructure as Code & Security as Code principles to create on-demand Ephemeral Environments can cut infrastructure costs by up to 50%. Also, how the application of these principles (IaC & DevSecOps) is able to benefit the entire SDLC.

Tom Ricardo is an experienced Cloud Architect who has acted as a Security Advisor for several startups including ChartHop and TWFVerify. Specializing in Cloud Networking and Security as well as DevOps Governance, Tom has architected large global enterprise environments working with AWS, Azure, GCP, and OCI. Tom has spoken for several security vendor partners including Check Point, Fortinet, and Palo Alto focusing on Security within MultiCloud Environments and adoption of CI/CD to the Security Stack.

With the current movement to agile production workloads lead by the adoption of cloud, containers, and DevOps Principles, modern security teams are finding new challenges securing and monitoring production environments and CI/CD pipeline. In this presentation we will discuss building environment and process within a secure framework and encouraging collaboration between DevOps and Security Team.