Lead Cloud Architect and Product Owner - Consultant

• Working as Product Owner with Head of Security Compliance and Audit for AWS Security posture for multi million security projects and liaising with multiple project teams to remediate Non Compliance on AWS Account and incident investigation. 

• Managing DevSecOPS and SecOPS teams integrating with Security Incident and Security Operations and Security Engineering teams. 

• Reports generation for FCA and Group Audit for compliance and security.

• Responsible for Agile coaching, Sprint Planning and Backlog Refinements and OKRs for each quarter.

• Working with the Data team to deploy PCI DSS controls on the Payment AWS accounts for monitoring and remediation of non-compliance.  

• Worked with the data team to deploy Amazon Macie to discover and protect sensitive data using pattern matching and machine learning. 

• Managing a team for Security Operation to remediate the non compliance and communicating with multiple teams with consolidated issue viewing using  JIRA and Servicenow. 

• Compliance ticket generation in Service Now/SIEM Logrhythm using webhook.

• Deployment of seventy Security Controls on 250 AWS Accounts using AWS Code Pipeline the controls include CIS Framewok, Managed Rules and Custom Rules for seamless deployment. Deployment of Compliance Daily Reporting via email and MS Teams webhooks.

• Data capture from Security Controls via AWS Event Rule to Master Compliance account using AWS Event Bridge using AWS Kinesis Data Stream. Working with the IAM team to use SCP and boundary permissions to give limited admin access to users and prevention of Non Compliance resource creation. Working on Jupyter-lab to diagnose  the problems on AWS Cloud Formation stacks and AWS Cloud formation stack sets and Configuration of SSM parameters. Deployment of Responders for multiple environments under multiple AWS organizations to remediate the bulk AWS Global level non compliance.

• Working with AWS Amazon Managed Services team to deploy controls where automation pipeline is not allowed. Use of AWS DynamoDb Tables for the Security Control Table, Reporting Data Trend, AWS Account Lists,  Resource Exception for a particular AWS resource where compliance report percentage should be ignored. 

•  

• Extensive use of AWS services: Lambda, Kinesis Data Firehose, CloudWatch Logs, Cloud Watch events, Events Bridge, S3, SSM parameters, Parameter Store,  KMS keys and Secret Manager, IAM Roles and Policies. AWS Macie, AWS GuardDuty. AWS Security Hub for CIS Framework and AWS Control Tower.

* Engaged with third party companies to integrate their services on Kubernetes.
* Strategized IAM Architect strategy for ABAC to be used by the business.
* Architect the Kubernetes based API gateway with APIGee Edge MicroGateway and Kong solution and
comparison with SaaS API gateway Solution.
* Worked on both Azure AKS and AWS EKS solutions in parallel for Kubernetes cluster using Pods,
Services, Ingress, deployments, ConfigMaps and Persistent volumes having Jobs, Replica Sets,
Daemon Sets, Stateful Sets.
* Attribute based Access Control ABAC with OKTA and Apigee/Kong and third party tools to secure
access six hundred applications world wide for online customers.Apigee Micro Edge Gateway
Kubernetes deployment and integration with other applications on Kubernetes cluster.Kong/Konga
implementation on Kubernetes cluster with Helm Charts and Brigade pipeline.Secured the
Kubernetes cluster for database and network traffic.
* Extensive use of Docker Compose and Helm Charts to implement solutions with Brigade
pipeline.Terraform Module for AWS and Azure Cloud and ApiGee and Kong Configuration.Attribute
based Access Control via OKTA user based profile to access application via Symphonic Policy
Decision point and Policy creation using Policy Application Point. ELK, Prometheus, Kashti for
CI/CD monitoring Brigade Pipelines, Release Management Tool to view Pod level logs. Architect
the design for ETL Data for five hundred clients having data in multiregional and multi cloud
environment and Attribute Based Access Control. Design and Implement multi Tier Security
Architecture over multi cloud data and app.

* Lead Team of five and practising the DevOps solution while hands on coding with
Terraform,Python and Ansible.
* AWS Landing Zone and OKTA based integration to integrate multiple accounts. AWS - Azure
Transformation/Integration - Azure DevOps CI/CD Pipeline integration with AWS infrastructure
using Terraform infrastructure as Code - IaC. Use of Ingress/Load balancer on Kubernetes.
Selenium Testing Script using Kubernetes Jobs for Functional Testing, Load Testing and Nightly
Build Test using EKS cluster. AWS S3 Cross account policies integration with IAM roles and IAM
Users to secure granular level access for data. Implementing GITOPS strategy to decrease
technical debt in Terraform Code with over two hundred branches with multiple state files.
Kubernetes Platform integration on Google cloud with Azure DevOps Data CI/CD Pipeline and AWS
Sagemaker in a secure manner. GitLab to Azure DevOps Repository migration through automation
and TeamCity migration to Azure CI/CD Pipelines. Implementing AWS IAM security policy
violation tester using lambda. AWS Machine Learning tech stack implementation with Sagemaker
blue green deployment and Load Testing from Goolge GKE Cluster. Azure DevOPS Linux based build
agents over AWS platform to build test and deploy packages in a secure manner. Azure DevOPS
Usage data migration to S3 and ELK stack using AWS Lambda, Azure API Secret Manager. IAM Role
and Lambda Trigger added via Terraform to get alerts for managed services outside of
whitelisted IPs. Data migration from in house to S3 and KMS based custom encryption using
Terraform. Utilising Azure DevOps CLI to parse repositories and scripting in Python for repo
migration.Data Migration using Talend Server ETL to be used by an artificial intelligence
platform and making the migration secure and stable using KMS encryption.

Monitoring
* Azure DevOps security auditing by extracting the security logs in S3 bucket and pushing to ELK
Stack using lambda. Datadog Integration with AWS account using AWS Security Manager.Use of
DataDog, ELK, NewRelic for monitoring and analysing data.
Docker and Kubernetes
* EC2, Autoscaling Groups, AWS Load Balancer, S3, KMS, Azure build Agents using Docker over EKS,
ECR, ECS, AWS Sagemaker, Route53 and Azure CI Build and Release CD Pipelines with AWS
infrastructure encapsulating security with Azure Personnel Access Token PAT and AWS Secret
Manager and GITLAB PAT. Python Script for automation of Azure pipelines and AWS Lambdas.
Agile Tools
* JIRA, Confluence, Bit Bucket , GitLab, GitHub, Azure DevOPS pipeline. Azure DevOPS Scrum
board.