Cyber Security & Transformation Architect at Zscaler.
Before that, 2016–2024 at Check Point — CloudGuard across private and public cloud, Code Security (Spectral), Container Security (CWPP), and security integrations for CI/CD pipelines.
This account is split cleanly along that line: active work lives at the top, the Check Point years are consolidated and archived below.
🔒 = private repository.
| Repository | What it is |
|---|---|
| zs-ot-ebc-dashboard 🔒 | Operations dashboard for the IoT/OT Experience Center — one reconciled live view of ZIA, ZPA, ZDX, Zero Trust Branch, Deception and two PLCs. Stdlib-only Python, framework-free JS |
| zs-zpa-private-service-edge-lab | Reproducible AWS lab for a ZPA Private Service Edge — two isolated VPCs, PRIV/MCU segmentation, unattended enrolment via SSM. OpenTofu + stdlib Python |
| zs-lab-cloud-dashboard | Switchboard — a cloud-lab control plane: plug in a provider, see what is running and what it costs, flip use cases on and off with a button. AWS first, GCP/Azure next. FastAPI + vanilla JS, OpenTofu-driven |
| zs-cloud-connector-terraform-base 🔒 | Baseline Terraform for a single Cloud Connector deployment |
| zs-repo-template 🔒 | 📋 Template for new zs-* repos — README skeleton, CI with secret sweep, runbook, PR template |
Start a new work repo with:
gh repo create nilsujma-dev/zs-<area>-<thing> --private --template nilsujma-dev/zs-repo-template
| Repository | What it is |
|---|---|
| daily-intel-briefing | Daily AI & cyber-security briefing by email — ten RSS feeds in, two ranked tables out. Pure stdlib Python |
| nilsujma.io | Personal site (Jekyll / GitHub Pages) |
| ham-aprs-igate 🔒 | Network-layer diagnostics for APRS-IS igates that lack their own |
| ham-ygate | Fork: turn a Yaesu APRS radio into an igate |
| tool-thai-text-translator 🔒 | Extract Thai words from text, translate, export to CSV |
| tool-xbox-usage-monitor 🔒 | Track Xbox online time to CSV |
learn-terraform-associate 🔒 · learn-python-cs50 🔒 · learn-aws-beanstalk-sample
All cp-* repositories are archived and read-only, spanning 2022–2024. Twenty duplicate
repos were consolidated into six toolkits; every original still exists as cp-archive-* with
its commit history intact.
Consolidated toolkits
| Toolkit | Absorbs |
|---|---|
| cp-cloudguard-event-converters | Webhook JSON → CEF / syslog, schema inference (5 repos) |
| cp-cloudguard-ruleset-tools | Compliance ruleset merge / combine / compile (3 repos) |
| cp-cloudguard-compliance-reporting | Compliance report generation, incl. by-tag (3 repos) |
| cp-cloudguard-permissions-tools | IAM auditing, gap analysis, CFN role extraction (4 repos) |
| cp-shiftleft-pipeline-examples | Spectral/ShiftLeft CI pipelines for Nginx, NodeJS, Redis (3 repos) |
| cp-cloudguard-gcp-webhook | GCP webhook receiver + its deployment automation (2 repos) |
Browse the rest by topic —
check-point ·
cloudguard ·
spectral ·
shiftleft ·
appsec ·
workshop
Full index: ARCHIVE.md · Naming rules: CONVENTIONS.md