- Design, implement, and roll out a new cloud identity and access management architecture, following principle of least privilege, across Okta IdP, AWS, GCP, and Azure.- Enable developer self-service by developing automated workflow for Identity-and-Access Management (IAM) across AWS, GCP, and Azure using Terraform infrastructure-as-code.- Reduce cloud infrastructure security risk by implementing security best practices, e.g. CIS benchmarks, as re-usable Terraform modules deployed via CI/CD.- Collaborate with Product developers to incorporate static code analysis, container scanning, and dependency vulnerability scanning into their software development life cycle and continuous integration (CI) / continuous delivery (CD) pipelines.- Shepherd security and operations architecture and design proposals to drive standardization across functional groups.- Educate product developers and operations engineers on threat modeling applications and cloud infrastructure configurations.

- Reduced lead time for provisioning and configuring AWS environments and Kubernetes clusters by adopting and promoting GitOps principles and building CI/CD pipelines that convert Infrastructure-as-Code (IaC) to production-ready environments.- Standardized secret management by architecting and deploying highly reliable Vault clusters and integrating it with an internal Continuous Deployment (CD) system and applications deployed into production.- Improved deployment frequency by implementing a system to measure developer productivity metrics as defined by DevOps Research and Assessment (DORA) using cloud native technologies (e.g. Argo) and developing custom pub-sub services in Golang to consume raw and publish metrics to internal dashboards.- Reduced outstanding security vulnerability SLOs by implementing Static Application Security Testing (SAST) and Software Composition Analysis (SCA) scanning into standardized CI/CD pipelines to detect and report findings as early as possible in the software development life cycle.- Drafted and review standards for next-generation cloud native applications and security practices.

- Defined the Application Security Program.- Implemented monitoring for software supply chain vulnerabilities, such as malicious/compromised open source software packages/libraries.- Performed incident response and remediation.

- As a Software Engineer, contributed to the development of KubeKit, an open source tool for provisioning and configuring Kubernetes clusters on various infrastructure environments, e.g. bare metal, AWS EC2, AWS EKS, Azure AKS, OpenStack, & VMware vSphere.- As the lead security engineer, established Kubernetes and Docker security standards and best practices, resolved security bugs in KubeKit & Kubernetes, and enhanced the platform's security capabilities through adoption of cloud-native security projects, e.g. Open Policy Agent.- Acted as a developer advocate around Kubernetes, container, and Application Security topics.- Contributed to upstream Kubernetes & CNCF projects and participated in community meetings.

- Reduced security risk in AWS cloud environments by developming and deploying a tool to automate detection of potential security misconfigurations, such as public S3 buckets, overly permissive IAM roles, API keys nearing expiry, ...etc.- Performed penetration testing of web applications and internal infrastructure.- Eliminated applications' need for managing their own encryption keys/secrets by deploying Hashicorp Vault and leveraging Transit backend (i.e. Encryption-as-a-Service).

Maintained private virtual cloud infrastructure using VMware.Manageed infrastructure configurations using Chef.Conducted load and performance testing.Troubleshot bugs in deployed production ASP.NET web applications and MS-SQL databases.Developed custom tools with NodeJS and Powershell scripts to automate routine tasks in Windows-based systems. Audited backup, DR, security, and compliance policies.Monitored SIEM logs using Nagios and Splunk.

Managed and resolve tier-3 technical ASP.NET and MS-SQL issues.Conducted large data transfers between databases using complex T-SQL.Maintained custom web applications using wide range of web technologies, such as Visual Basic, JScript, ASP, ASP.NET, HTML, CSS, JavaScript, and jQuery

Diagnose reported problems, provide first level (Tier 1) technical support, and recommend possible solutions via phone, email, and remote desktop administration tool.Provide end-user training for medical credentialing, call center, quality, and optometric software.Install, configure, and upgrade SQL-based proprietary software on Microsoft servers (IIS and SQL).

Maintained contents of district website on daily basisDeveloped new sites using HTML, CSS, JavaScript, and jQueryCollaborated with principals and teachers to promote events via district