fix

Author: 51nk0r5w1m

resume.typ

@@ -137,8 +137,9 @@
 - Architected private *EKS* clusters with *Fargate* and *IRSA*, applying Kubernetes hardening, namespace isolation, and secure-by-default controls for *multi-tenant* workloads.
 - Established *golden paths* and *paved roads* for infrastructure and CI/CD, reducing developer friction and eliminating ad hoc provisioning.
 - Created a *GitHub Actions* platform with *65 reusable composite actions*, standardizing build, test, security scanning, and deployment workflows as shared platform primitives across services.
-- Drove *security reviews* for infrastructure changes, identifying systemic risks in Terraform, Kubernetes, and cloud configurations before production deployment.
-- Developed *secure patterns* and reference implementations using *policy-as-code*, Terraform validation, and Kubernetes admission controls.
+- Implemented *policy-as-code* guardrails using Terraform validation and *Kubernetes admission controls*, embedding security, compliance, and cost awareness into the platform layer.
+- Led *GitOps* adoption with *ArgoCD*, using ApplicationSets to manage multi-environment Kubernetes deployments with automated reconciliation and rollback.
+- Built shared *observability* foundations including centralized audit logging, metrics, dashboards, and alerting used by both *platform and service teams* to support operational excellence and compliance.
 - Designed a multi-account AWS *hub-and-spoke architecture* with secure cross-account access patterns, automated IAM role provisioning, and zero-trust networking controls.
 - Partnered with *SRE*, *Infrastructure*, and *Product Engineering* teams to integrate security into platform services and deployment pipelines.