• Integrated cloud monitoring tools like Prometheus and Grafana for system health visibility and alerting.• Hands-on experience designing a well-architected multi-account baseline using the AWS control tower to create a landing zone, SCP, and guardrails.• Designed and deployed secure cloud architectures using Terraform across AWS, Azure, and GCP, ensuring compliance with CIS benchmarks and organizational security standards.• Implemented Kubernetes security policies, including Kyverno, to enforce workload isolation, secure images, and restrict privileged access.• Developed custom scripts in Bash and Python to automate cloud operations and perform routine tasks efficiently.• Architected and deployed secure AWS cloud solutions using Palo Alto Networks VM-Series and Prisma Cloud, ensuring comprehensive protection against threats and vulnerabilities, • Experience in Amazon Cloud Services (AWS) creating features like EC2, VPC, IAM, VPC, EBS, AMI, APIs, Route 53, snapshots, Autoscaling, Cloud watch, CloudTrail, CloudFront, SSM, SQS, SNS, RDS, Cloud Watch, S3, API Gateways, Autoscaling, ALB, NLB, Lambda, Security groups using Terraform, CloudFormation and CLI• Managed and orchestrated Kubernetes clusters on Amazon EKS, allowing seamless containerization, scaling, and automation of microservices-based applications.• Implemented Single Sign-On (SSO) and Multi-Factor Authentication (MFA) mechanisms to fortify user authentication and ensure secure access.• Collaborated with cross-functional teams to monitor AWS resources, set up effective alerting mechanisms, and optimize cloud infrastructure for performance and cost efficiency.• Designed secure CI/CD pipelines with GitLab CI and Jenkins, embedding security scanning into the build process.• Wrote Ansible playbooks to implement policy as code, ensuring infrastructure complies with security best practices.• Managed IAM roles and policies across cloud environments to enforce least-privilege access.

Restricted access to customer infrastructure using robust Identity and Access Management (IAM) policies, Resource-Based Policies, IAM roles, and AWS Organizations' Service Control Policies (SCPs) to ensure tight security controls.Implemented Multi-Factor Authentication (MFA) for all AWS root accounts and IAM users, paired with a password rotation policy to maintain strong authentication practices.Enforced the principle of least privilege by using assumed roles for users and resources, enhancing security and reducing unnecessary access.Led Virtual Private Cloud (VPC) implementations, building multiple security layers with Security Groups and Network Access Control Lists (NACLs) to protect customer infrastructure.Designed IT Security Architecture based on business requirements, mapping use cases to security solutions and aligning with regulatory compliance.Automated compliance and remediation processes using Terraform to ensure infrastructure adherence to security policies, reducing manual intervention for policy enforcement.Configured and optimized AWS cloud security tools, including IAM, CloudTrail, GuardDuty, Config, Inspector, CloudWatch, KMS, AWS Inspector, and AWS Macie to enhance security monitoring and logging.Automated machine and human password rotation using the AWS SDK, minimizing password-related riskConducted regular vulnerability scans with tools such as Turbot, Prisma Cloud, and Sync IAC to identify and remediate security gaps within cloud resources.Reviewed security architecture to identify potential vulnerabilities and misconfigurations, collaborating with technology partners for timely remediation.Analyzed penetration test results and worked closely with business units to resolve identified vulnerabilities, reducing risk to customer data and services.Configured and enabled CloudTrail, CloudWatch, and VPC Flow Logs to monitor infrastructure traffic and proactively detect unauthorized access attempts and other security threats.

 Designed and Implement Cloud Solutions using various AWS Services, including EC2, VPC, S3, Glacier, EFS, AWS Kinesis, Cloud Formation, Code Pipeline, Code Build, Code Deploy, RDS, Data Pipeline, DynamoDB, Workspace, etc. Designing and implementing public and private facing websites on AWS Cloud. Configure AWS Config to monitor, query, and automate remediations for noncompliant rules and resources in customer AWS Accounts. Peer Multiple VPCs using VPC peering/ transit gateway to enable traffic flow between multiple corporate VPCs. Knowledge of Source Code Management tools such as GIT

• Collaborated with business leaders to align security strategies with overall business goals, balancing security and operational needs effectively.• Developed comprehensive security policies, including data encryption, network segmentation, and identity management policies, leading to a 40% improvement in compliance audit results.• Partnered with DevOps to build automated security checks within CI/CD pipelines, allowing for rapid detection and remediation of vulnerabilities prior to production release.• Created and maintained a security risk register for tracking and prioritizing risks, which facilitated a more structured approach to risk mitigation and resource allocation.• Conducted regular security awareness training for business units and development teams, resulting in a 30% increase in secure coding practices and reduced risk of social engineering attacks.• Managed third-party security assessments for vendor systems and integrations, ensuring adherence to internal security standards and mitigating supply chain risks.