Summary
Cloud Security Engineer with 7+ years of experience building and scaling secure cloud platforms across AWS and GCP. Specialized in CSPM automation, policy-as-code, and security telemetry pipelines, enabling enterprise-wide visibility and governance. Proven track record in designing infrastructure and security systems that improve reliability, reduce operational overhead, and strengthen cloud security posture. Experienced in leading platform initiatives, mentoring engineers, and driving multi-cloud security strategies.
Certifications
Key Skills
Cloud Security Engineering, CSPM & CNAPP, Security Automation, Policy-as-Code, Multi-Cloud Architecture (AWS & GCP), Security Telemetry & SIEM Integration, DevSecOps, Security Data Pipelines & Alert Orchestration, Infrastructure as Code (Terraform), Kubernetes & Container Security, Observability & Monitoring
Core Competencies
- Cloud Platforms: Amazon Web Services(AWS), Google Cloud Platform(GCP).
- Scripting: Python, Shell/Bash.
- Containerization & Orchestration: Docker, Kubernetes(ECS & EKS Environments)
- Infrastructure Automation: Terraform, Ansible.
- CI/CD & Source Control: Jenkins, Azure DevOps, CodeBuild, CodePipeline, Bitbucket, GitHub.
- Monitoring & Logging: CloudWatch, Prometheus, Grafana.
- Database & Query: RDS, MySQL, Athena.
- Security & Compliance: CSPM (Prisma Cloud, Cortex Cloud), IAM & Access Control, Security Logging & Audit (CloudTrail), Threat Detection & Compliance Automation, Policy-as-Code
- Generative AI Workloads: AWS BedRock, SageMaker, LiteLLM(OpenSource interface)
Professional Experience
➤ Lead Cloud Security Engineer | Airbus | Jan 2026 - Present
Impact
- Designing and implementing a CSPM automation framework to onboard users across AWS accounts, enabling seamless access provisioning aligned with IAM roles.
- Building a security telemetry pipeline to ingest audit logs and alerts from CSPM platforms into S3, enabling downstream SIEM integration.
- Developing a security alert enrichment and routing system, augmenting findings with contextual metadata and directing issues to appropriate teams based on ownership and severity.
- Engineering policy-as-code CI/CD pipelines to manage custom CSPM rules via Git, ensuring controlled and auditable deployments.
- Contributing to migration from Prisma Cloud to Cortex Cloud, including policy transition and data continuity considerations.
- Implementing detection logic on audit logs to identify discrepancies and proactively notify security teams.
➤ Lead CloudOps Engineer | Harman Connected Services | Dec 2023 - Dec 2025
Impact
Led multiple strategic cloud migration and automation initiatives that significantly improved system reliability and operational efficiency. Mentored team members, enforced engineering best practices, and delivered secure, scalable infrastructure using Terraform and Kubernetes. Championed platform security and governance while driving adoption of innovative AWS solutions, including GenAI, IAM RolesAnywhere, and automation-first compliance management.
Key Deliverables
- Led cloud migration projects, improving platform reliability by 30% and reducing costs by 20%.
- Managed a team building Terraform-based IaC pipelines, streamlining deployments across environments.
- Designed scalable EKS infrastructure with Docker container orchestration, improving scalability and uptime.
- Implemented RolesAnywhere, migrating 70% of long-lived IAM access keys to short-term credential use.
- Built automated Lambda notification systems to alert users on Golden AMI releases and account compliance.
- Standardized code and infrastructure validation processes, improving deployment accuracy and reducing manual rework.
- Mentored junior engineers on cloud architecture, Terraform, and scripting best practices.
- Delivered security hardening using GuardDuty and enabled EKS audit monitoring across accounts.
- Performed organization-wide cloud cost optimization using AWS Compute Optimizer and Cost Optimization Hub, achieving a 17% cost reduction.
- Rightsized EC2 instances and removed orphaned/unutilized resources, improving overall infrastructure efficiency and governance.
Key Projects
- Cloud Migration & IaC Modernization: Migrated multiple legacy environments to AWS using Terraform and automated pipelines. Defined modular IaC, reducing provisioning errors and deployment time. Achieved 30% higher system reliability and 20% operational cost savings.
- IAM RolesAnywhere Adoption: Transitioned long-lived IAM access keys to IAM RolesAnywhere, boosting account security and compliance posture. Migrated 70% of key- based users to short-term credential access.
- Security Hardening Initiative: Implemented AWS GuardDuty and EKS audit monitoring across multiple accounts to enhance visibility into threats and misconfiguration. Enabled proactive threat detection for all critical accounts.
- GenAI Chatbot for Hackathon: Developed an AWS-native chatbot using Lex, Bedrock, and OpenSearch, integrating a custom knowledge base. Won internal GenAI Hackathon, showcasing innovative use of AWS AI services.
- Cloud Cost Optimization Initiative: Conducted a thorough review using AWS Compute Optimizer and Cost Optimization Hub, leading to a 17% reduction in overall cloud spend. This include rightsizing EC2 instances, cleaning up orphaned resources, and improving resource efficiency across multiple AWS accounts.
Worked with AWS services, including EC2, S3, IAM, Lambda (Boto3), DynamoDB, DataSync, CloudWatch, and CloudTrail.
Used Terraform, CloudFormation, Bitbucket (Git), Jira, and Confluence in daily operations.
➤ Platform Engineer | Quantiphi Analytics Inc. | Nov 2021 - Dec 2023
Impact
Delivered end-to-end cloud infrastructure for analytics and real-time telemetry solutions across IoT, computer vision, and legacy systems. Developed reusable CloudFormation stacks, dockerized application workloads for Amazon ECS, and enabled CI/CD using AWS CodePipeline and CodeBuild. Enhanced developer productivity, improved deployment agility, and reduced infrastructure response time through robust automation, monitoring, and incident support.
Key Deliverables
- Designed and deployed full-stack infrastructure using AWS CloudFormation, ECS, RDS, and S3.
- Enabled CI/CD automation for applications and infra using AWS CodeBuild & CodePipeline.
- Dockerized .NET applications and deployed them to ECS with ALB integration.
- Built CloudWatch dashboards and alarms for real-time performance visibility.
- Supported developer troubleshooting, improving delivery velocity and stability.
- Integrated IoT sensor feeds and live IR/normal camera streams using AWS KVS + IoT Core.
- Created Python-based Lambda functions for S3 data cleansing and triggering ETL flows.
- Worked with Glue jobs to process and load data to Redshift for analytics via Power BI.
- Ensured least-privilege access control with IAM and compliance with AWS Config rules.
- Managed infrastructure deployments for legacy apps using EC2, ALB, and Auto Scaling.
Key Projects
- Onsite Video + IoT Monitoring Platform: Developed infrastructure for a real-time monitoring system where camera feeds (IR & normal) streamed via Kinesis Video Streams, and IoT devices pushed telemetry to IoT Core. Data was stored in RDS and updated live on a .NET-backed web portal hosted on ECS.
- ETL Pipeline for Analytics Platform: Built a fully automated S3 → Lambda → Glue → Redshift pipeline. Cleansed CSV files using Lambda functions triggered by S3 events. Processed data using Glue and ingested into Redshift, powering downstream Power BI dashboards.
- Legacy App Modernization: Migrated a traditional application to AWS using EC2, Auto Scaling, and Application Load Balancer. Hardened security, implemented CloudWatch monitoring, and defined scaling policies to ensure availability.
Worked extensively with AWS services, including CloudFormation, ECS, RDS (SQL Server), S3, CloudWatch, Lambda (Boto3), KVS, IoT, Config, CodeBuild, and CodePipeline.
Used tools like Terraform, CloudFormation, Bitbucket (Git), Jira, and Confluence in day-to-day operations.
➤ Cloud Engineer | Tata Consultancy Services | Oct 2018 - Nov 2021
Impact
Delivered secure, scalable cloud solutions by migrating legacy enterprise applications to AWS and automating infrastructure provisioning using Terraform. Improved cloud governance, strengthened account security, and increased team agility by building reusable IaC modules, implementing CI/CD automation, and optimizing AWS account bootstrapping. Enabled compliance automation and resolved critical networking issues across environments, contributing to successful project delivery under Agile frameworks.
Key Deliverables
- Migrated enterprise applications from on-prem to AWS, enabling improved scalability and resilience.
- Designed and developed reusable Terraform modules for IAM roles, instance profiles, and policies.
- Automated AWS IAM provisioning (users, groups, roles) using Terraform, Shell, and Python (Boto3).
- Built Lambda functions for account compliance and governance automation.
- Troubleshot network-level issues (SGs, NACLs) and applied secure-by-default configurations.
- Optimized account bootstrapping by modularizing Terraform code, reducing manual errors.
- Enabled least-privilege access control by defining granular IAM and S3 policies.
- Supported Agile Scrum projects, collaborating closely with architects and app teams.
Key Projects
- AWS Cloud Migration Project: Successfully migrated enterprise-grade workloads to AWS, implementing best practices for security, IAM, and network architecture.
- Terraform Optimization Initiative: Refactored monolithic IaC scripts into modular, reusable components for AWS account bootstrapping.
- Compliance Automation via Lambda: Developed Python-based AWS Lambda functions to monitor and enforce compliance with tagging, IAM usage, and storage policies.
Worked extensively with AWS services, including IAM, VPC, Lambda (Boto3), DynamoDB, S3, Route 53, ACM, NACL, Security Groups, CloudWatch, and CloudTrail.
Used Terraform, Jenkins, Bitbucket (Git), Jira, and Confluence in day-to-day operations.
Education
Bachelor of Engineering
Adichunchanagiri Institute of Technology, 2018