Jean-Paul Lizotte

secdevops

AI in DevSecOps: Why the Future Needs Guardrails

AI is everywhere in DevOps, but the latest reports show a reality check: it's powerful, but not ready to fly solo. At JPSoftWorks, we help teams put guardrails in place so AI becomes an ally, not a liability.

CloudComputing

Automation: Redundancy vs Resilience

Cloud outages aren’t a matter of if, but when. At JPSoftWorks, we don’t just trust provider SLAs: we design resilience into our systems with automation, smart routing, and chaos testing. Because being ready beats being surprised.

secdevops

Why Waiting Is Riskier Than Moving: SecDevOps in Uncertain Times

Even in tough times, cybercriminals don't stop evolving. Standing still is the riskiest move. Incremental SecDevOps adoption is low-risk, high-reward: and the best time to start is now.

secdevops

The Four Agilities: Through a SecDevOps Lens

Agility is sustained speed with safety. We break down the four agilities and show how we wire them into pipelines, platforms, and team habits that actually stick.

DevOps

From Battlefields to Pipelines: What the Marines Can Teach Us About DevOps

When IT delays become mission-limiting When the U.S. Marine Corps decided it was time to modernize its IT backbone, the challenge was clear: traditional waterfall methods and rigid compliance structures were slowing down innovation. Some systems were taking five years and over a million dollars just to get authorized.

CloudSecurity

Cloud Security Theater: Why Azure "Best Practices" Don’t Actually Make You Secure (With guest blogger, Joshua Copeland)

Alone a checklist is worthless. Joshua Copeland and Jean-Paul Lizotte Image generated by AI. They look good in a board report. They check the compliance box. But they don't reflect how adversaries actually move, exploit, and pivot in cloud environments. What we're left with is "

secdevops

Pushing Technology on People: A Familiar Pattern We Can’t Ignore

The Push from Technology Leaders The Register highlights On the flip side, we have GitHub’s CEO Thomas Dohmke stepping up the rhetoric: "embrace AI or get out." In a blog post and at the DLD conference, he dropped a clear ultimatum for developers: AI is no longer

secdevops

Where Not to Automate: Keeping Human Value at the Core of SecDevOps

Customer Contact: People First and Always We talk a lot about automation in SecDevOps, and with good reason. Automation lets us move fast, reduce errors, and scale security into every part of the delivery pipeline. But we've also learned the hard way that not everything should be automated.

secdevops

Augmenting SecDevOps Pipelines with AI Agents on Azure (part 2/2)

What we’re augmenting (in plain terms) We’ve been hands-on with Azure DevOps and Azure cloud long enough to know this truth: our pipelines already produce the answers we need, but they hide them in logs, metrics, and alerts spread across tools. AI agents help us stitch that story

secdevops

Augmenting SecDevOps Pipelines with AI Agents (1/2)

Why AI Fits Naturally into SecDevOps As many of you know by now, we've always believed that SecDevOps is about balance: security, development, and operations working together in a way that doesn't slow delivery but still keeps everything secure and resilient. Now, with the rise of

cybersecurity

Vibe Coding: Are Humans an asset or a threat?

As usual, our people are our salvation We’ve seen cybersecurity evolve: from basement script kiddies to AI-fueled threats. And yet as we enter late 2025, Alan Shimel’s article   “Distraction is the New Zero‑Day: The Human Risk We Keep Ignoring”   rings truer than ever. It’s not ransomware

DevSecOps

AI Code Generation: Superpower or Security Blindfold?

At JPSoftWorks, we like to say: “Speed without security is just chaos with better sneakers.” The rise of AI-powered code assistants has been breathtaking. A third of organizations already generate most of their code through AI, yet fewer than one-in-five have actual policies for how to use these tools. That’

secdevops

Saving 90% of cost with five lines of code.

AI in SecDevOps: Why “Cost Hacks” Aren't the Whole Story I was just reading an article by towardsdatascience.com. And it occurred to me that most of us would be tempted to jump into this pretty blindly. Here's my take on it. “How We Reduced LLM

DevSecOps

EAC or everything as code

Everything as Code: The Backbone of a Reliable, Secure, and Consistent DevSecOps Practice At JPSoftWorks, you know, we've always believed that technology should serve people first: not the other way around. Over the years, working in SecDevOps, one truth has become increasingly clear to us: in order to

DevOps

Is Engineering Excellence an Endangered Species?

A SecDevOps Reflection on the 2025 "State of Software Engineering Excellence" Report Why this report matters to me If you've followed my writing, you know I treat DevOps (and its grown-up sibling, SecDevOps) as a team sport that balances speed with safety, people with process, and

DevOps

Why the “Dev(SEC)Ops Rockstar” Myth Persists

Why the “DevOps Rockstar” Myth Persists A Bad­ging Bonanza for Ambitious Engineers * Instant credibility. One LinkedIn title change, and you’re the go-to guru for pipeline pain. * Tool-collector’s paradise. Kubernetes today, service mesh tomorrow—learning curves feel like career hacks. * Hero dopamine. Shipping hot-fixes at 2 a.m.

Are you a shadow crypto factory?

Speaking of DevSecOps, are your pipelines secured or are they making illicit crypto? Why the CI/CD gold-rush now targets your CPU cycles Over the past few years, attackers have moved from smashing storefronts to skimming the till. 2025’s flavour of “digital skimming” is cryptojacking inside DevOps tooling. A

en

DevOps versus DevSecOps, an illustrated example.

So what’s the big deal about DevSecOps? Why can’t you just explain it? I can, but first we need to talk about DevOps. Act I – DevOps, the culture. Not a person. Contrary to many job ads, DevOps isn’t a title. It’s a way of working that

en

To SecDevOps or not to. It isn't even a question.

SecDevOps + Zero-Trust: a Cheeky Field Guide for Teams That Already “Do DevOps”...or dont... TL;DR — We’re not trying to replace DevOps, we’re giving it a shiny exoskeleton that blocks or exposes risk and still lets the people inside, boogie like it's 1999.   What is SecDevOps,

DevOps

Doing Agile the right way: Points and the contract.

Beyond the Numbers: Understanding Story Points as a Tacit Contract in Azure DevOps: Embracing Observability & SecDevOps Introduction: Setting the Stage Let's be honest: the idea of "story points" can feel a bit…well, absurd at first. It’s like trying to measure the feeling of

SystemDesign

Sustainability Is the New Performance

Sustainability Is the New Performance We talk a lot about performance — in business, in systems, in teams. How fast? How scalable? How productive? These are important questions, but in this age — where AI consumes ever-growing energy, where our ecological systems are in crisis, and where relentless economic growth strains planetary

Automation

LLMs ≈ Pocket Calculators for the Mind

Why the real question is how we use them, not if we should “I don’t carry information in my mind that is readily available in books… The value of a college education is not the learning of many facts but the training of the mind to think.” — Albert Einstein

DevOps

The Two Faces of DevOps: Tech guru vs. Culture

What is all this about? Over the past months, as I’ve scanned the DevOps job market, one clear pattern emerged: many organizations still treat DevOps as two distinct interests. Below I'll try to take them apart and make you see what makes them tick. Keep in mind

AIethics

Is Agentic SecDevOps for you?

What is it? As usual. let's take a moment to look at the "bare essential constituant parts" of what Agentic DevOps is, and let's see how we align them to the SecDevOps mindset. Microsoft’s "Agentic DevOps", Key Concepts: * "Agentic DevOps&

The DevSecOps Manifesto

We have agreed and hold these ideals as our own: We strive to do the right thing at the right time. And the wrong ones too. We want to improve: our work, our customer satisfaction and indeed our lives.We live by the ideal of: work smarter and not harderWe