 Assist the Information System Security Officer (ISSO) in collecting the essential technical artifacts required during security control assessment to ensure the proper implementation of security controls. Provide assessment support a wide array of technologies, network devices, hardware, and software. Manage one or more NIST 800-53 security control families for each assessment CP means contingency plan. Applied AWS security best practices including IAM, MFA, access key rotation, role-based permissions, and configuring security groups and NACLs. Configured web application hosting with VPC for secure and scalable facilitate the resolution of POA&M items. Stay updated with industry best practices related to POA&M management and incorporate relevant improvements into existing processes. Stay up to date with changes in regulations and update policies and procedures accordingly. Prepare for and actively participate in compliance audits, providing evidence of POA&M completion and effectiveness of security controls. Maintain detailed documentation of POA&M activities, including updates Updated security documentation like the SSP, CP, FIPS200, System Security Plan (SSP) Review, Evaluation. Assisted team members with proper artifact collection and detail to client’s examples of artifacts that will satisfy assessment

 I developed solution for hybrid cloud platform and managed active directory dependent workloads, using AWS AD connector, IAM role, and configuring Cross-Account Policies with MFA authentication. I have been responsible for assigning role-based access control (RBAC), least privilege, and removing toxic combinations to restricts system access for both Azure and AWS tenants.  I built VPCs from scratch, creating private and public subnets, creating security groups and network access lists, configuring internet gateways, OpenVPN, creating AMI, understanding of user access management/role-based access/multi factor authentication and API access, configuration of auto scaling and elastic load balancer for scaling services if a configured threshold has been exceeded, configuration of SNS to send notifications and Cloud Watch to collect logs and metrics. I have been identifying single point of failure and provide guidance on architecture designs to prevent failure from causing application to stop working in the AWS cloud infrastructure.  Implementing automation using AWS Security Hub and AWS Config to automate security compliance checks, identify and remediate security issues, and provide continuous monitoring of security posture. Developed, implemented, and oversaw the security policies, programs, and standards; delivered security training and education to agency personnel. Worked with stakeholders with high standards, technically adept at delivering advanced technical solutions to government organizations who use our products daily to support their mission of protecting national security. Strongly skilled in reporting and documentation; along with great customer experience focus with the ability to independently identify, analyze, communicate, and resolve issues.

 I developed solution for hybrid cloud platform and managed active directory dependent workloads, using AWS AD connector, IAM role, and configuring Cross-Account Policies with MFA authentication. I assigned role-based access control (RBAC), least privilege, and removing toxic combinations to restricts system access for both Azure and AWS tenants.  Implemented automation using AWS Security Hub and AWS Config to automate security compliance checks, identify and remediate security issues, and provide continuous monitoring of security posture. I implemented AWS Control Tower, AWS Organization, and Single-Sing-On for a client that needed multi-cloud environment. Using AWS Cloud along with Azure cloud.  I setup and configured AWS Organization to centrally manage multiple AWS accounts, consolidated billing, and policy-based restrictions.  I implemented AWS Control Tower Preventive and Detective guardrails with Account Factory to easily comply with corporate standards, requirements, meet regulatory and to follow the best practices.  I maintained and configured user accounts for dev, QA, Production servers and created roles for EC2, S3, CloudWatch, EBS resources to communicate with each other using IAM and AWS security best practices including MFA for extra security.  Performed continuous monitoring of security controls to ensure configuration and threat changes to the information system remained within an acceptable level of risk. Designed, integrated, and promoted security features, products, and procedures to ensure operational system Accreditation and authorization. Assess and mitigate system vulnerabilities. I architected, built, and designed solutions to host in-house servers and products on AWS platform using AWS services like Elastic Block Storage volumes (EBS), EC2, Relational Database (RDS), Security Groups, Auto-Scaling, Load Balancers (ELBs), Simple Storage Service (S3) in the defined Virtual Private connection (VPC).