Instituted, enforced security as code, policy as code, tags, automated processes required to maintain security posture and compliance programs that slashed monthly cloud spend by 70%, security incidents by 90%. Delivered 3 major projects ahead of schedule, saved 40% project cost. Improved customers’ systems protection from unauthorized access by 90% via a robust, automated identity foundation, least privileged principle, separation of duties using users, groups, MFA, time-based… Show more Instituted, enforced security as code, policy as code, tags, automated processes required to maintain security posture and compliance programs that slashed monthly cloud spend by 70%, security incidents by 90%. Delivered 3 major projects ahead of schedule, saved 40% project cost. Improved customers’ systems protection from unauthorized access by 90% via a robust, automated identity foundation, least privileged principle, separation of duties using users, groups, MFA, time-based credentials, Service Principals, RBAC and IRSA.Provided granular permissions using role-based access control to limit over-permissive access which reduced security alert findings/incidents by 60%Designed, implemented, automated AWS Organization, Control Tower, Account Strategy that reduced cost by 25% via consolidated billing. Designed, implemented access management automation, logging & monitoring.Assessed and Mitigated security risks using AWS Security Hub services and third-party tools such as Tenable Nessus. Conducted App PenTest: Gathered Information, Tested Vulnerabilities (OWASP TOP 10), Assessed Risks, and Submitted report. Show less