Ziad Amir Email & Phone Number

Remote

- Responsible for supporting cloud and on-prem systems, servers, and access- Provision and update AWS infrastructure using CloudFormation and Terraform- Deploy and manage containerized applications and microservices run on Docker and Kubernetes- Manage AWS firewalls, load balancers, NACLs, route tables, and security groups- Ensure AWS resources are right-sized- Responsible for upgrading, installing, configuring, and monitoring Linux EC2 instances- Create and manage CloudWatch alarms related to AWS infrastructure and processes- Create Lambda functions in Python to alert on security incidents- Automate EC2 server patching using AWS Systems Manager- Manage and audit AWS IAM permissions and policies- Manage and audit Redshift and RDS user access- Manage Okta and SAML connectors- Review and update company security policies- Provide support on monitoring, troubleshooting, and resolving complex system & networking issues- Document troubleshooting steps, runbooks, and procedures- Provide after hours and weekend support on a rotational basis, and as needed- Incident & problem management experience to coordinate required resources to respond to complex technological issues

Holmdel, Nj

- Automating data collection jobs from Apple Music, Spotify, and YouTube APIs run on Kubernetes and Airflow- Ensure data quality, accuracy, and integrity amongst various data sources by automating data checks- Reporting and visualization of big data- Code review and debugging- Purging user data for GDPR requests

Holmdel, Nj

- Identify, investigate, and respond to internal and external security vulnerabilities, incidents, and threats - Oversee AWS infrastructure- Set up, manage, and monitor Sysdig Secure security monitoring tool for Kubernetes environments- Monitor AWS resources through DataDog- Evaluate and identify where system/infrastructure enhancements are required- Expand and improve logging on all systems, making alerts meaningful and actionable- Set up and manage JumpCloud cloud active directory and mobile device management software- Oversee the security and firewall rules of the Vydia web application- Created company security policy- Perform penetration testing through threat modeling, Wi-Fi auditing/hacking with Aircrack-ng, password cracking with John the Ripper and Hashcat, simulated social engineering attacks to test employees, packet sniffing with Wireshark, and port scanning with Nessus and Nmap- Run security training workshops to educate both technical and non-technical employees on security best practices- Code design and review- Manage AWS IAM and database access control- Manage on-premise VPN users and firewall access rules- Set up and manage site-to-site VPN tunnel between AWS VPCs and on-premise VPN- Evaluate, set up, and manage automated security monitoring tools- Automate the creation of database users, groups, and privileges- Set up and manage AWS CloudTrail and CloudWatch audit logging- Set up and manage AWS Redshift connection and user activity logs- Manage company GSuite account; created spoofing/spam filter policies, enforced multi-factor authentication, password strength requirements, and password rotation policy- Implement Role Based Access Control (RBAC) across company resources- Manage company password manager- Manage and install anti-virus on all employee workstations

Evaluated security monitoring solutions Firemon and FireEyeAssisted in creating information security policies and procedures including Information Security Strategic Plan and Business Continuity Plan

Master Of Business And Science (Mbs), Cybersecurity

Bachelor Of Arts (Ba), Information Technology And Informatics