Sahil Soni Email & Phone Number

A comprehensive Cloud Security Architect with extensive 12 years of technical expertise, I am eager to leverage my skills to design secure cloud architectures for businesses. My unparalleled experience in implementing and managing secure cloud environments fuels my passion to protect organizational assets and ensure the utmost confidentiality, integrity, and availability for their systems and applications. Performed Cloud network security Assessment for various application architectures migrating to Cloud (AWS/Azure/GCP)As a Cloud Security Architect I have:● Conducted thorough security assessments of cloud-based environments (AWS, Azure) and recommended solutions to ensure compliance with industry best practices and regulatory standards.● Integrated cloud platforms with various security services such as CSPM, CASB, SIEM, Vulnerability Management, Data Security, Network Security, container security, DevSecOps and IAM services to improve cloud security posture.● Kubernetes security advisor , cillium Network policies, Kyverno security policies in K8s.● Involved in process improvement on Cloud network security assessment process and automation.● Designing Project Plan, Kick-off Deck, Effort estimation, and Client use case matrix for CASB (Cloud Access Security Broker) implementation.● Prisma Cloud CSPM tool Integration.● Performed Netskope CASB implementation for SaaS apps (API, Forward proxy and reverse proxy)● Developed and delivered cloud security training programs for internal teams and external clients, resulting in increased awareness and adoption of security best practice.● Performed IAM Assessments on Multi-Cloud environment (150+ AWS, 50+ Azure & GCP accounts) ,Role mining & Role designing as per security best practices using CSPM tools Prisma Cloud and Dome9 (Cloud Guard). ● Developed Custom RQL queries on Prisma Cloud and GSL queries on Cloud Guard Dome9. ● Performed Cloud network security assessment, identify gaps and provided recommendations including Palo Alto firewalls, Microsegmentaion, Network firewall rules management, remote access, etc. ● Responsible for designing Kick-off Deck, Project Plan, Effort estimation and cloud cost estimation matrix. ● Developed AWS cloud security checklist matrix.● Developed remediation automation on Azure Cloud services with a defined set of rules using C#, Azure Cloud services, Powershell, and Azure DevOps ● Cloud security on AWS, Azure & GCP, Azure DevOps, Terraform, IAM, C#, Powershell, Okta identity, Prisma Cloud & Cloud Guard Dome9.