Shefiu Y Email & Phone Number

United States

• Experience in limiting Access to AWS Services using IAM and restricting network access using NACLs and Security Groups to ensure the principle of least privilege.• Engineered and executed a comprehensive credential verification system using AWS Lambda, EventBridge, and SNS, significantly improving security and user authentication processes. This system was designed following agile principles, utilizing Terraform for infrastructure automation, resulting in a 40% improvement in deployment… Show more • Experience in limiting Access to AWS Services using IAM and restricting network access using NACLs and Security Groups to ensure the principle of least privilege.• Engineered and executed a comprehensive credential verification system using AWS Lambda, EventBridge, and SNS, significantly improving security and user authentication processes. This system was designed following agile principles, utilizing Terraform for infrastructure automation, resulting in a 40% improvement in deployment efficiency and a 25% reduction in operational costs.• Collaborated with the cybersecurity team to conduct comprehensive security assessments, including penetration testing and application security testing using OWASP guidelines and Burp Suite, to identify and mitigate potential security risks.• Improved cloud infrastructure resilience, reducing downtime by 25% through the strategic integration of monitoring tools (CloudWatch, CloudTrail), enhancing real-time threat detection and automated incident response.• Led DevOps initiatives to promote efficient change management and infrastructure automation, achieving a 97% adherence to best practices and reducing manual errors by 91% through the use of Terraform and Git.• Actively collaborated with DevOps Engineers, Platform & Software Engineering teams, identifying and addressing over 300 security threats, thereby maintaining 99.9% uptime for key applications.• Enhanced security posture by conducting rigorous security assessments, including code reviews and vulnerability scans, ensuring comprehensive coverage against cyber threats.• Guide other teams in building security into their infrastructure as code solution using code scan such as Checkov, Terrascan, Sonarqube.• Experience in safeguarding data integrity using AWS KMS for data at rest and TLS for data in transit through effective encryption key access control.• Provide guidance & code to ITOps to help them deliver CIS compliant AWS accounts to product teams. Show less

• Spearheaded compliance initiatives for PSN, CAS-T, ISO27001, CESG PCI-DSS, and OWASP standards.• Reinforced CI/CD pipeline security by reviewing GitHub Pull Requests and implementing KICS, enhancing the automation of build, test, and deployment processes• Maintained robust security postures within AWS and Azure, leveraging Cloud Custodian for scanning and monitoring, and ensuring adherence to CSPM security best practices.• Executed advanced CI/CD pipelines, integrating with Git… Show more • Spearheaded compliance initiatives for PSN, CAS-T, ISO27001, CESG PCI-DSS, and OWASP standards.• Reinforced CI/CD pipeline security by reviewing GitHub Pull Requests and implementing KICS, enhancing the automation of build, test, and deployment processes• Maintained robust security postures within AWS and Azure, leveraging Cloud Custodian for scanning and monitoring, and ensuring adherence to CSPM security best practices.• Executed advanced CI/CD pipelines, integrating with Git for version control systems, facilitating a collaborative environment among cross-functional teams.• Managed and optimized AWS CloudFormation templates, playing a crucial role in the development and maintenance of cloud-based infrastructures.• Monitored AWS ecosystem using CloudTrail, CloudWatch, SNS, Config, and Guard Duty, implementing responsive controls with Cloud Custodian.• Adopted NIST 800-53 Framework to methodically address security vulnerabilities in workload management.• Pioneered the implementation of policy as code, automating security policy enforcement across AWS and Azure infrastructure. • Collaborated with internal teams, guiding their cloud migration & implementation and promoting security best practices.• Utilize expertise in IAM, KMS, and AWS Security Hub to safeguard infrastructure, coupled with active threat detection using Guard Duty and CloudTrail.• Drive the implementation of Amazon Inspector for automated security assessments, identifying vulnerabilities and deviations from best practices. AWS Shield for DDoS mitigation, ensuring the resilience of applications.• Expertly configured IAM groups, users, roles, and policies while implementing the principle of least privilege to ensure optimal cloud security.• Designed, deployed, and maintained robust security capabilities in AWS and Azure, leveraging tools like CrowdStrike Horizon and Cloud Guard for optimal Cloud Security Posture Management. Show less

• Review Pull Requests in BitBucket from cloud engineering team and implementing DevSecOps best practices.• Designed, deployed, and maintained robust security capabilities in AWS, leveraging tools like Aqua and Cloud Guard for optimal Cloud Security Posture Management.• Established and secured fully automated CI/CD pipelines, utilizing GitHub Actions and infrastructure as code deployment, enhancing workflow efficiency.•Expertly configured IAM roles and policies while implementing… Show more • Review Pull Requests in BitBucket from cloud engineering team and implementing DevSecOps best practices.• Designed, deployed, and maintained robust security capabilities in AWS, leveraging tools like Aqua and Cloud Guard for optimal Cloud Security Posture Management.• Established and secured fully automated CI/CD pipelines, utilizing GitHub Actions and infrastructure as code deployment, enhancing workflow efficiency.•Expertly configured IAM roles and policies while implementing the principle of least privilege to ensure optimal cloud security.• Accountable for development of the Cloud Security Design framework for new technology solutions• Perform Bash Scripting using PowerShell and Python using AWS Lambda functions.• Integration of AWS Security Hub with current AWS Environment (AWS Config Rules, GuardDuty, Macie)• Wrote terraform scripts to various modules for easy management, reusability of code and deployment.• Collaborate closely with cross-functional teams to design and configure IAM policies, encryption mechanisms, and access control lists, ensuring the integrity and confidentiality of sensitive data.• Perform SRE (Site Reliability Engineering) listening to feature requests/suggestions of end users and trying to implement a reliable CI/CD pipeline.• Experience using GitHub OpenID connect to request token from AWS during workflow run for high security deployment.• Ensure application performance, uptime, and scale, maintaining high standards of code quality and thoughtful design.• Experience hardening and refine access to Linux Systems, Window Servers and MacOS. Show less

• Spearheaded the design and implementation of robust cloud infrastructure to ensure resilience, efficiency, and security.• Created multiple VPCs for AWS infrastructure segmentation while deploying them across various availability zones to ensure high availability and fault tolerance.• Configured security groups, network ACLs, and route tables to establish a secure and compliant AWS zone.• Managed S3 buckets, implementing life cycle policies to seamlessly transition infrequently… Show more • Spearheaded the design and implementation of robust cloud infrastructure to ensure resilience, efficiency, and security.• Created multiple VPCs for AWS infrastructure segmentation while deploying them across various availability zones to ensure high availability and fault tolerance.• Configured security groups, network ACLs, and route tables to establish a secure and compliant AWS zone.• Managed S3 buckets, implementing life cycle policies to seamlessly transition infrequently accessed data to cost-effective storage solutions.• Established and managed Elastic Load Balancers and Auto Scaling Groups, ensuring efficient traffic distribution and an optimized cost-performance balance.• Leveraged automation tools such as AWS Lambda and Chef for infrastructure management, streamlining deployment time and operations.• Successfully migrated multiple core applications from on-premises environments to AWS VPC, ensuring smooth transitions and uptime.• Utilized AWS Beanstalk to deploy and dynamically scale Java-based web applications, ensuring responsiveness and reliability.• Assigned EIPs, configured Health checks, and optimized cloud infrastructure components like EC2, VPC, ELB, and RDS, ensuring resilience, scalability, and high availability.• Created NAT Gateways to enable outbound internet access for instances in private subnets, and configured Bastion hosts to facilitate secure SSH access to these instances. Show less

Master'S Degree, Computing & Data Science

Bachelor'S Degree, Computer Science