Felipe Sotille, speaking at a conference
Open to new engagements

Felipe Sotille

DevSecOps Architect & Engineer

17+ years building critical systems at SWIFT, Swissquote and Eleven Sports. I design the release-orchestration and security standards squads ship through, then coach them until the standard holds. Coding agents work under the same gates as human-written code.

Brussels, Belgium 17+ years experience Italian (EU) citizen · EU work rights
View Résumé Download PDF Get in touch LinkedIn
17+ Years in software engineering
2.5bn Financial records migrated to Oracle
40+ Java apps on zero-touch release orchestration
100k+ Concurrent users on a Kafka/Vert.x platform
Projects & Work
Resume & Experience
Curriculum Vitae

Four role-tailored CVs generated from one source: DevSecOps Architect, Principal Architect, Tech Lead and Backend Engineer. PDF/A and Markdown, with quality gates in CI.

CloudBees CI/CD SBOM · Policy as code Kubernetes · Docker Java · Spring Coding agents
View CV EN · PDF/A · Markdown
Open source · Techstream
Nine DevSecOps frameworks

Release orchestration, supply-chain security, secure CI/CD, compliance automation, agentic delivery, forensics: reference architectures under Apache 2.0, published under my consultancy.

Release governance Supply chain Policy as code Agentic delivery
See the frameworks Apache 2.0
Side project · tech news
TechStream News

Curated daily digest of AI, security and infrastructure. Handpicked signal, no noise — covering agents, DevSecOps, releases and developer tooling.

AI & Agents Security Infrastructure Releases
Open TechStream Daily updates
Writing

Articles

Three 2026 pieces on supply-chain security, SBOM integrity and DevSecOps transformation. A six-volume Techstream series is in progress.

Medium →
MAY 26Medium
Why Your AI Agent Is the Next SolarWinds: Supply Chain Security for the Agentic Era
Agentic AISupply chainSBOM
MAY 26Medium
The Four Layers of Software Supply Chain Integrity
SBOMProvenanceIntegrity
APR 26Medium
The 4-Phase DevSecOps Transformation
90-day planPolicy to practiceGovernance
Open Source

Frameworks & OSS

9 open-source DevSecOps frameworks under Techstream, my consultancy — from release governance and supply-chain security to agentic delivery.

GitHub →
FOUNDATIONOpen
DevSecOps Foundation Framework
8-Phase LifecycleSecure SDLCSecurity Controls
MATURITYOpen
Techstream DevSecOps Maturity Model
5 Levels37-Q ScorecardGap Analysis
PIPELINESOpen
Secure CI/CD Reference Architecture
SAST/DAST/SCAZero-Trust CI/CDSecrets Mgmt
SUPPLY CHAINOpen
Software Supply Chain Security Framework
SBOMSigstoreSLSA Levels
RELEASESOpen
Release Orchestration Framework
Blue/GreenCanaryRollback Automation
COMPLIANCEOpen
Compliance Automation Framework
OPA/RegoSOC2/ISO27001Policy as Code
AGENTIC AIOpen
AI DevSecOps Framework
Agentic deliveryGovernanceSecurity gates
FORENSICSOpen
Forensics & Incident Response Framework
EvidenceIncident responsePost-mortems
METHODOpen
DevSecOps Transformation Methodology
90-Day PlaybookRACI MatricesROI Model

Get in touch

Let's build something
remarkable together.

Available for DevSecOps architecture, release-orchestration and secure-delivery engagements, and OSS collaborations. Based in Brussels, working across the EU.

Send email LinkedIn GitHub