South Carolina Department of Health & Human Services (contract)• Worked with the CISO and IT and business stakeholders to define metrics and reporting strategies that effectively communicate successes and progress of the security program.• Designed for high availability and business continuity using self-healing-based architectures, fail-over routing policies, multi-AZ deployment of EC2 instances, ELB health checks, Auto Scaling, and other disaster recovery models in alignment with AWS well-architected framework.• Collaborated and coordinated with security, DevOps, QA, compliance, and development teams to deploy the application as per the solution architecture created with a realistic overview of risks and threats.• Proactively monitored resources and applications using AWS (Cloud trail, CloudWatch, Guard Duty, Inspector, Macie, Artifact, Audit Manager) and created alarms using Aws Lambda and Event Bridge.• Leveraged AWS Control Tower to setup and govern a secure, AWS multi-account for scalability.• Implemented security best practices in AWS including multifactor authentication, access key rotation, encryption using KMS, firewalls, security groups and NACLs, S3 bucket policies and ACLs.• Reviewed AWS services used in the organization from a cost perspective and implemented cost optimization strategies utilizing AWS Cost explorer, Budgets, Billing, savings plans and usage reports.• Utilized CloudFormation to automate resource provisioning via pipelines using devops principals, allowing customer to rapidly build, test and release code and monitored using AWS config.• Analyzed application for data integrity issues, participated in peer code reviews activities. • Developed CI/CD pipelines using AWS Code Pipeline and GitHub, enabling frequent application version changes from GitHub to production environments.

• Developed strategies for modernization of existing systems and migration into cloud environment using AWS Migration Hub, AWS Server Migration Service, and AWS Database Migration Service.• Designed and contributed to security architecture processes that enable the enterprise to develop and implement security solutions and capabilities that are aligned with the business and technology.• Implemented scalable solutions in cloud environment leveraging cloud enterprise technology and services in AWS such as AWS VPC, Auto Scaling, ELB, and AWS Global Infrastructure (Regions and Availability Zones).• Hands-on experience in architecting and securing the Infrastructure on AWS using IAM, KMS, Cognito, API Gateway, Cloud Trail, Cloud Watch, Config, Trusted Advisor, Security Groups, NACL, etc.• Designed secure cloud ecosystem by implementing enterprise-level Identity and access management, key management, data encryption, logging, security incidence response, and event monitoring.• Provided support and guidance for legal and regulatory compliance efforts, including audit.• Defined and implemented processes for risk management and recovery strategies.

• Worked as a project lead for the security team for various project modules including user registration, external user management, application security, user access control, and document management.• Did active participation in doing POC for Microsoft Azure which the company intended to buy and implemented CI/CD in Azure cloud for the company.• Worked as a team lead and active developer in designing and developing an in-house security solution.for both Role-based and attribute-based security which was widely used by other applications. • Developed enterprise-level restful web services for security using microservice architecture for other applications across the company using docker and orchestrated with Kubernetes.• Served as Applications Security solution Architect for content management using FileNet.