CV PDF
Alae ER-RAJY
Available for DevSecOps & Software Engineering Opportunities

Hi, I'm Alae ER-RAJY

Full-Stack Developer | Cybersecurity Master’s Student | DevSecOps

I engineer high-performance web applications and secure software delivery pipelines. Combining hands-on software development experience across real-world systems with advanced Master’s training in Cybersecurity to embed shift-left security, SAST/SCA automation, and container hardening into modern DevOps lifecycles.

Explore Projects Download CV Get in Touch
Primary Stack:
GitLab CI/CD Semgrep & Trivy Spring Boot 3 Docker Compose PostgreSQL Linux OWASP Top 10 Cloud Delivery Virtual Machines
devsecops-pipeline.sh
SECURE DELIVERY
$ gitlab-ci --profile devsecops
▶ Building secure delivery pipeline...
✔ Security integrated from code to production
✔ Automated SAST, SCA, Secrets & Container Scanning
✔ Policy-driven security gates enforced
✔ Continuous vulnerability assessment
✔ Automated Docker-based deployment
✔ Production environment health verified
✔ Pipeline Status: SECURE DELIVERY ENABLED
$ _
My Journey

The Evolution: Full-Stack to DevSecOps

A deliberate progression from writing application code to securing and automating the entire software supply chain.

1 Full-Stack
2 Software Eng
3 Cybersecurity
4 DevSecOps
Phase 01 2022 – 2024

Full-Stack Foundations

From Code to Functional Products

Built a strong foundation in full-stack web development at ISTA OFPPT, progressing from programming fundamentals to database design, REST APIs, and responsive web applications.

Core Competencies:
  • Programming fundamentals and object-oriented development
  • Database modeling, SQL and relational data management
  • Frontend development and RESTful API integration
Phase 02 2024 – 2025

Professional Software Engineering & SaaS

Agile Development & Real-World Applications

Learned the basics of network and security. Gained industry experience in SaaS under Agile Scrum with DevOps practices.

Core Competencies:
  • Agile Scrum, sprint planning and team collaboration
  • Full-stack development with Angular, Spring Boot and other frameworks
  • API integration, software testing and application deployment
  • Licence Professionnelle in Computer Science
Phase 03 2025 – 2027 (In Progress)

Cybersecurity Specialization

Threat Analysis, Network Defense & Application Security

Currently pursuing a Master’s degree in Network and Information Systems Cybersecurity, developing knowledge of security vulnerabilities, network defense, threat detection and secure application development.

Core Competencies:
  • OWASP Top 10 and web application security
  • Network monitoring with Suricata and Wazuh
  • Firewall configuration and network security with pfSense
  • Threat analysis and vulnerability assessment
Phase 04 2026 – Present

DevSecOps & Automated Security

Shift-Left Security & Secure CI/CD

Combining software engineering, infrastructure and cybersecurity to build secure software delivery workflows. Applying DevSecOps principles through automated security checks, container scanning and CI/CD pipeline integration.

Core Competencies:
  • GitLab CI/CD and automated pipeline stages
  • SAST with Semgrep and dependency scanning
  • Secret detection and container security with Gitleaks and Trivy
  • Docker deployment and Linux server administration
  • JWT authentication and Role-Based Access Control (RBAC)
Featured Work

Engineered Solutions & Case Studies

Real-world web applications, automated DevSecOps pipelines, and cybersecurity research implementations.

Marjane Enterprise IT & DevSecOps Platform DevSecOps & Enterprise Architecture Flagship Case Study
Marjane Menara (Marjane Groupe) Aug – Sep 2026

Marjane Enterprise IT & DevSecOps Platform

Internal IT asset management application with DevSecOps practices.

4 Automated Gates Security Scanners
0 Critical Findings Vulnerability Target
Automated Docker Rollout Deployment Strategy
GitLab CI/CDDevSecOpsDockerLinuxSemgrep SASTOWASP Dependency-Check +8 more
View Case Study & Gallery (18 screens)
AI Network Intrusion & Anomaly Detection System Cybersecurity & Machine Learning
Faculté des Sciences Meknès (Master Research) 2025 – 2026

AI Network Intrusion & Anomaly Detection System

Machine learning-based network traffic analysis and anomaly detection pipeline developed as part of Master's degree cybersecurity research.

Sub-Second Detection Speed
High Precision / Recall Evaluation Metric
Defensive Cyber ML Domain
PythonMachine LearningCybersecurityScikit-LearnPandasNetwork Telemetry +2 more
View Case Study & Gallery (5 screens)
ImmoHabitats Real Estate SaaS Platform Full-Stack SaaS & Cloud
LIADTech (Télétravail, Maroc) Jan – Sep 2025

ImmoHabitats Real Estate SaaS Platform

Commercial multi-tenant rental application engineered within an Agile Scrum team at LIADTech, supporting bilingual French/Arabic tenant portals and automated candidate qualification.

Azure DevOps DevOps Platform
Bilingual FR / AR Internationalization
Document Scoring AI Integration
AngularSpring BootPostgreSQLMySQLAzure DevOpsAzure Data Studio
View Case Study & Gallery (15 screens)
University Timetable Management Platform Academic Full-Stack SaaS
ISTA Hay Nahda, Rabat (Capstone Project) 2023 – Jun 2024

University Timetable Management Platform

Academic scheduling application developed as a capstone project at ISTA Hay Nahda, allowing automated class allocation, room booking, and teacher schedules.

100% Real-Time Clash Detection
React + Laravel Stack Architecture
Major de Promotion Project Award
ReactLaravelPHPMySQLREST APIsBootstrap +1 more
View Case Study & Gallery (11 screens)
Health Insurance Brokerage & Quotation System Full-Stack Web Application
iTech Solutions / Infocea Assurance Mar – Apr 2024

Health Insurance Brokerage & Quotation System

Single-page application and RESTful backend for health insurance quote simulations, policy management, and client inquiry tracking.

Interactive React Client Quotation Wizard
Prepared Statements API Security
Admin Protected Role Separation
ReactPHP NativeMySQLBootstrapREST APIsCSS3 +1 more
View Case Study & Gallery (16 screens)
Marjane POS Caisse Hardware Management Full-Stack Web & Retail IT
Marjane Menara (Marjane Groupe) Jul – Aug 2023

Marjane POS Caisse Hardware Management

Web application developed during my 2023 internship at Marjane Menara to supervise and manage checkout registers and peripherals.

100% Digital Hardware Tracked
PHP & MySQL Architecture
Marjane Menara Store Location
PHPMySQLBootstrapJavaScriptHTML5CSS3 +1 more
View Case Study & Gallery (5 screens)
Career Trajectory

Professional Work Experience

Authentic software engineering and DevSecOps internships and contracts delivered in production environments.

DevSecOps & Software Engineer Intern

Marjane Menara (Marjane Groupe)

Aug 2026 – Sep 2026 Internship Marrakech, Morocco

Engineered and secured a centralized internal IT hardware, purchase requisition, and delivery management system across hypermarket operations under a rigorous DevSecOps approach.

Key Contributions:
  • Implemented automated multi-stage GitLab CI/CD pipeline featuring Semgrep (SAST), OWASP Dependency-Check (SCA), Gitleaks (Secret Detection), and Trivy (Container Scanning).
  • Architected Spring Boot 3 & Spring Security backend with JWT authentication and strict Role-Based Access Control (RBAC) separating Director, IT Manager, and Department Supervisors.
  • Containerized full application stack (Spring Boot, Angular frontend, Nginx reverse proxy, PostgreSQL) deployed via automated shell runner on Ubuntu Server 24.04 LTS.
  • Designed immutable audit trail logging all equipment status transitions, PO approvals, and delivery imports for security auditing.
GitLab CI/CDDevSecOpsSemgrepOWASP Dependency-CheckGitleaksTrivyDockerDocker ComposeSpring Boot 3Spring SecurityJWTPostgreSQLNginxUbuntu Server

Full-Stack Developer (ANAPEC)

LIADTech

Jan 2025 – Sep 2025 Anapec Contract Remote (Télétravail), Morocco

Contributed to the end-to-end design, implementation, and deployment of cloud-native SaaS platforms within an Agile Scrum environment utilizing Azure DevOps.

Key Contributions:
  • Engineered key features for the ImmoHabitats real estate SaaS platform, including integrating an AI API for candidate document classification and bilingual French/Arabic responsive portals.
  • Developed modular microservices and RESTful APIs connecting Angular and Next.js frontends to Spring Boot, .NET Core, and NestJS services.
  • Managed database schema design, indexing, and migrations across MySQL and PostgreSQL via Azure Data Studio.
  • Participated in daily standups, sprint plannings, and automated deployments managed in Azure DevOps.
AngularSpring BootNext.js.NET CoreNestJSPostgreSQLMySQLAzure DevOpsAzure Data StudioScrum / Agile

Web Development Intern

iTech Solutions / Infocea Assurance

Mar 2024 – Apr 2024 Internship Rabat, Morocco

Built a dedicated web application for health insurance brokerage management, online quote simulation, and customer policy administration.

Key Contributions:
  • Developed interactive quotation calculation interface using React, modern CSS, and Bootstrap.
  • Built RESTful API endpoints in native PHP with sanitized inputs and prepared SQL statements.
  • Structured relational MySQL database for clients, insurance policies, and claim tracking.
ReactPHP NativeMySQLBootstrapCSS3REST APIs

Web Development Intern

Marjane Menara

Jul 2023 – Aug 2023 Internship Marrakech, Morocco

Engineered an internal web-based register peripheral monitoring and maintenance supervision portal for checkout lanes.

Key Contributions:
  • Created a centralized dashboard tracking POS peripherals (scanners, ticket printers, POS terminals) and cash register statuses.
  • Structured relational MySQL database with PHP backend to log hardware maintenance records and hardware lane assignments.
  • Built responsive interface with Bootstrap enabling floor technicians to quickly diagnose and service equipment.
PHPMySQLBootstrapHTML5CSS3JavaScript
Core Capabilities

Technical Skills Matrix

Verified technical proficiencies categorized by domain without fabricated percentage bars.

DevSecOps & CI/CD Pipelines

Automated security gates, pipeline orchestration, and continuous compliance.

GitLab CI/CD Advanced
Semgrep (SAST) Advanced
OWASP Dependency-Check (SCA) Advanced
Gitleaks (Secret Detection) Advanced
Trivy (Container Scanning) Advanced
SonarQube Quality Gates Proficient
Azure DevOps Pipelines Proficient
OWASP Top 10 Security Advanced

Software Engineering & Backends

Robust server-side architectures, strict typing, and clean RESTful APIs.

Java & Spring Boot 3 Advanced
Spring Security & RBAC Advanced
JWT Stateless Auth Advanced
Python Advanced
Angular Advanced
Next.js & React Advanced
C# & .NET Core Proficient
NestJS & TypeScript Proficient
PHP & Laravel Proficient

Infrastructure, Cloud & Systems

Container orchestration, network security, and hardened server environments.

Docker & Docker Compose Advanced
Linux (Ubuntu Server 24.04 LTS) Advanced
Windows Server Advanced
Nginx Reverse Proxy & SSL Advanced
VirtualBox & Hypervisors Advanced
Suricata (NIDS/NIPS) Proficient
pfSense Firewall Proficient
Wazuh SIEM / XDR Proficient
VPN & Squid Proxy Proficient

Databases & Tooling

Relational data modeling, secure database access, and engineering workflows.

PostgreSQL Advanced
Azure Data Studio Advanced
MySQL Advanced
Git & Git Flow Advanced
MongoDB Proficient
Jira & Agile / Scrum Advanced
UML & System Architecture Design Advanced
Figma UI Prototyping Proficient
01

Automate Security at Commit Time

Security checks should not be an afterthought before release. By integrating static code analysis and secret detection directly into developer workflows, vulnerabilities and credential leaks are caught at the source.

02

Harden Every Software Supply Chain Link

Modern applications rely on external dependencies and container runtimes. Continuous software composition analysis and container audits ensure that known vulnerabilities cannot hide inside third-party layers.

03

Enforce Zero-Trust & Strict Access Control

Authentication is never sufficient without fine-grained authorization. Role-Based Access Control and least-privilege principles must strictly govern every business domain endpoint and system interaction.

04

Maintain Immutable Auditability

Compliance and rapid incident response require indisputable operational logging. Critical business events and state transitions must be chronologically recorded with actor identity and timestamps.

Academic Foundation

Education & Verified Degrees

Solid academic roots combining practical digital development, applied computer science, and advanced cybersecurity research.

University Degrees & Diplomas

Master in Cybersecurity of Networks and Information Systems

Faculté des Sciences, Université Moulay Ismaïl (Meknes, Morocco)
In Progress 2025 – 2027

Specialization: Network Security, DevSecOps, Cryptography, Anomaly Detection

Advanced specialized training focused on defensive security architectures, intrusion detection, penetration testing methodologies, machine learning applied to telemetry analysis, and secure CI/CD pipeline automation.

Licence Professionnelle in Computer Science & Applied Mathematics

Faculté Polydisciplinaire (FP), Université Chouaib Doukkali (Sidi Bennour, Morocco)
Completed 2024 – 2025

Specialization: Software Engineering, Algorithms, Applied Mathematics, Database Systems

Rigorous foundation in algorithm design, object-oriented software engineering, relational database normalization, applied statistics, and enterprise software patterns.

Diplôme de Technicien Spécialisé in Digital Development (Full-Stack)

ISTA Hay Nahda (OFPPT) (Rabat, Morocco)
Completed 2022 – 2024

Specialization: Full-Stack Web Development, REST APIs, Frontend Frameworks

Intensive hands-on professional curriculum mastering front-to-back web application delivery, database architecture, modern frameworks (React, Spring Boot, Laravel), and version control.

Baccalauréat in Physical Sciences (French International Option - BIOF)

Lycée Qualifiant (Marrakech, Morocco)
Completed 2021 – 2022

Certifications & Honors

DevSecOps Fundamentals (Sécurité intégrée au cycle CI/CD)

Certanika
Oct 2026

Certification validating core competencies in shift-left security, automated vulnerability analysis, SAST/SCA/DAST pipeline embedding, and container security compliance.

2nd Place Award — Annual Coding Challenge

École Supérieure de Rabat en Management et Ingénierie (ESR)
May 2024

Recognized for exceptional competitive problem-solving speed, clean algorithmic code architecture, and rapid prototype implementation under timed hackathon constraints.

English Language Proficiency Certification (B3 Level)

American Language Center
Dec 2023

Advanced professional English certification covering technical communication, documentation writing, cross-border team collaboration, and verbal fluency.

Get in Touch

Let’s Connect & Build Together

Seeking opportunities in DevSecOps, Security Engineering, or Full-Stack Development. Whether you have a project to collaborate on or a role to discuss, my inbox is always open.

Direct Email alaedrajyeam@gmail.com
Phone +212 6 30 63 87 49
LinkedIn linkedin.com/in/alae-er-rajy
GitLab gitlab.com/alaedrajyeam
Message me on WhatsApp Download Curriculum Vitae (PDF)