ARIF WIDIYANTO
Professional Summary
Security-minded DevOps Engineer, Fullstack Developer, and Security Researcher with 15+ years of hands-on experience in cloud infrastructure, application development, and cybersecurity. Proven track record orchestrating containerized workloads on AWS (EKS), cutting cloud costs by 30%, and building scalable web applications. Active bug bounty researcher with documented findings on Intigriti, YesWeHack, and DNV VDP. Adept at scripting automation, SRE practices, and integrating security into DevOps pipelines.
Core Competencies
Fullstack Development & DB: React, Supabase, Node.js, RESTful APIs, PostgreSQL, MariaDB, MS SQL.
DevOps & Cloud Infrastructure: AWS (EKS, EC2, CloudWatch), Docker, Kubernetes, CI/CD, Terraform, Nginx, Linux (Ubuntu/RHEL), Windows Server.
Cybersecurity & Bug Hunting: Web & API Penetration Testing, HTTP Request Smuggling, IDOR/BOLA, OWASP Top 10, Ethical Hacking.
Automation & AI Integration: n8n Workflow Automation, Python, Bash Scripting, Workload Automation (Stonebranch), Local LLM Integration.
Observability & SRE: Prometheus, Grafana, ELK Stack (Elasticsearch, Logstash, Kibana), SolarWinds, Dynatrace, Site Reliability Engineering.
Professional Experience
DevOps | Fullstack Developer | Security Researcher
Oct 2025 - Present
Self-Employed / Independent
Jakarta, Indonesia
- Conducted web and API vulnerability assessments across major bug bounty platforms including Intigriti, YesWeHack, and a private VDP at DNV.com.
- Identified and ethically reported critical security flaws, including HTTP request smuggling, undocumented API parameter exposure, and sensitive data leaks.
- Formulated technical remediation reports and actionable mitigation strategies for engineering teams to secure production environments.
- Engineered custom web applications and e-commerce platforms using React, Supabase, and tailored backend APIs.
- Built automated data integration pipelines using n8n to streamline administrative and operational tasks for business clients.
DevOps Engineer
Oct 2024 - Oct 2025
Seven Event (Contract)
Jakarta, Indonesia
- Managed containerized workloads on AWS (EKS) using Docker and Kubernetes, optimizing cluster resource allocation and reducing AWS cloud costs by 30%.
- Administered high-availability ticketing servers on AWS, maintaining zero downtime during large-scale national exhibition events.
- Configured real-time observability and alerting dashboards with Prometheus and Grafana to track node health, memory usage, and service availability.
- Automated internal workflows using n8n, integrating local LLMs (OpenAI, Qwen, DeepSeek) for experimental AI-driven process automation.
- Developed ExpoHub, an onsite exhibition management system using React and Supabase to streamline organizer operations and exhibitor workflows.
- Designed and deployed an internal IT Asset & Project Management platform to standardize technical resource tracking and team collaboration.
- Executed rapid deployment troubleshooting and performance tuning under production pressure during live event operations.
IT Engineer / System Engineer
Jan 2020 - Jan 2024
PT Bajau Escorindo
Jakarta, Indonesia
- Designed and implemented enterprise Workload Automation solutions, integrated workflows, and managed secure file transfers while ensuring compliance with security standards.
- Led patch management strategies, conducted risk assessments, and created Python and Bash scripts to automate tasks.
- Managed the installation, configuration, and monitoring of Stonebranch agents across target multi-OS servers.
- Participated in operational support activities to enhance overall system stability and performance.
IT Coordinator
2014 - 2019
PT Torin Multi Investama
Jakarta, Indonesia
- Coordinated IT support, planned projects, and communicated with stakeholders to ensure alignment of technical solutions.
- Maintained system and network infrastructure, and designed procedures for IT resource utilization.
- Developed, tested, and maintained software applications to meet operational requirements.
- Troubleshot technical issues and actively monitored system performance metrics.
Research Support & IT Development
2012 - 2014
PT Andalan Artha Advisindo Sekuritas
Jakarta, Indonesia
- Provided data support for Research Analysts, building database tools to assist in analytical reporting.
- Developed applications and support systems for the Research Division, producing and documenting research data.
IT Specialist
2010 - 2012
PT Arjuna Resources
Jakarta, Indonesia
- Managed daily IT operations and developed efficiency-focused procedures and technical strategies.
- Coordinated in-house technical staff, remote employees, third-party vendors, and contractors.
- Installed hardware and software components, and trained employees on their use.
IT Project Officer
2009 - 2010
PT Jakarta Realty (Thamrin City)
Jakarta, Indonesia
- Assisted Project Managers with monitoring project status, managing risks, dependencies, and tracking action items.
- Provided technical guidance and managed project resources, vendors, and contractors.
Education & Certifications
Politeknik LP3I Jakarta
Informatics Management (Graduated 2009)
GPA: 3.06 / 4.00
Certifications:
- AWS AI & Cloud Foundations (AWS)
- Professional Software Developer (Tanmia)
- Server Automation using Ansible (Udemy)