Cloud Security Engineer

Cloud Security Engineer — Aetheric Cloud Solutions

Denver, CO | January 2023 – Present

• Designed and deployed AWS IAM least-privilege structures for 140+ accounts using Terraform, reducing over-privileged administrative access by 65%.
• Configured and automated Checkov and Trivy security scanning tools into GitLab CI/CD pipelines, blocking 97% of high-severity vulnerabilities prior to deployment.
• Architected a centralized log ingestion pipeline utilizing AWS CloudTrail, GuardDuty, and Datadog, reducing average threat detection time (MTTD) by 35%.
• Led technical controls remediation for annual SOC 2 Type II audits, addressing 18 security gaps and achieving zero-finding compliance reports.

Associate Cloud Security Engineer — Sentinel Cyber Networks

Boulder, CO | August 2020 – December 2022

• Deployed Azure Security Center alerts and network security groups (NSGs) for 42 web applications, improving security posture score by 28%.
• Remediated 150+ legacy security groups, pruning redundant rules to reduce the cloud network attack surface area by 40%.
• Conducted 14 internal vulnerability assessments using Nessus, facilitating patch management to maintain PCI-DSS compliance across 5 business units.
• Automated routine SSL/TLS certificate rotation processes using Azure Key Vault and PowerShell, saving 12 developer hours per month.

IAM architecture, Least privilege implementation, DevSecOps integration, Infrastructure as Code (IaC) security, SIEM and log aggregation, Vulnerability management, Regulatory compliance (SOC 2, ISO 27001, PCI-DSS), AWS Security, Azure Security, Terraform, Checkov, Trivy, Nessus, Git, Docker, Kubernetes security

Cloud Multi-Region DevSecOps Pipeline

Role: Lead Security Engineer

Tools: Terraform, GitHub Actions, AWS IAM, Trivy, GuardDuty

Integrated automated static analysis security tests (SAST) into dev pipelines, resolving 95% of security bugs before code merge and speeding up releases by 14 hours per sprint.

IAM Least-Privilege Optimization Initiative

Role: Cloud Security Engineer

Tools: AWS IAM Access Analyzer, Python, CloudTrail, Terraform

Scripted an automated utility to scan and revoke unused permissions across 60 AWS accounts, reducing identity-related exposure by 55% over a 3-month period.

• CCSP (Certified Cloud Security Professional) (2024)
• AWS Certified Security – Specialty (2023)
• Azure Security Engineer Associate (AZ-500) (2021)

• Languages: English (Native), Hindi (Conversational)
• Professional Memberships: Cloud Security Alliance (CSA) Member (2022 – Present)
• Technical Blog: Writes monthly articles on cloud security automation (1.2K readers/month)