06/22/2026 updated
100 % available
SOC2/HIPAA/PCI Specialist for AWS/GCP and DevOps professional
Austin, USA
Only remote
Bachelor in Computer SciencesAbout me
I’m an AWS Certified Security Specialist & DevOps Engineer who helps companies achieve SOC2/HIPAA/PCI (4 SOC2, 2 HIPAA) compliances, save on cloud costs ($440k+) without compromising performance.
SOC 2Amazon Elastic Compute CloudGoogle App EnginesCloud EngineeringDevOpsPCI Data Security StandardsCloud ServicesGoogle CloudAWS VPCAWS ECSCloud MigrationCloud Optimization
I am a Senior DevOps / Cloud / Security Engineer with 8+ years of hands-on experience designing, securing, migrating, and optimizing production environments on AWS and GCP for SaaS, healthcare, finance, and enterprise platforms. My core specialization is building secure, scalable, compliance-ready cloud architectures that help businesses improve reliability, reduce operational risk, and control infrastructure costs without slowing down delivery.
My experience covers the full cloud lifecycle: cloud architecture, infrastructure automation, DevOps enablement, Kubernetes / container platforms, security hardening, compliance implementation, monitoring, backup / disaster recovery, and cost optimization. I work best with companies that need more than a basic deployment engineer, clients usually involve me when they need someone who can modernize legacy or fragile environments into production-grade cloud platforms with strong governance and long-term maintainability.
A major strength of mine is security and compliance-focused cloud engineering. I currently support PCI-related compliance work for banking environments and HIPAA-oriented AWS projects for US-based clients. In addition, I have helped customers strengthen and prepare AWS environments for 4 SOC and 2 PCI compliance engagements, while also implementing broader SOC 2, HIPAA, and PCI-aligned controls across SaaS and enterprise workloads. My focus is always on practical compliance implementation: encryption at rest and in transit, least-privilege IAM, centralized logging and monitoring, evidence readiness, backup resilience, secure access controls, and audit-friendly cloud governance.
I also bring strong experience in cloud migration and modernization projects. I have worked on migrating legacy and hosted SaaS applications into AWS by containerizing workloads, deploying them on Kubernetes / EKS, implementing Landing Zone and centralized networking, enabling GitOps / CI-CD, and migrating databases into managed cloud services such as AWS RDS using services like AWS DMS.
Another area where I deliver strong value is cloud cost optimization. I have successfully identified and implemented cost-saving opportunities through rightsizing, resource cleanup, support plan optimization, scheduling, storage lifecycle policies, network cost reduction, and architecture improvements. My work has contributed to meaningful savings including $15K/month, $40K/year, and even larger multi-year reductions, while keeping performance, availability, and compliance in mind.
I am especially valuable for projects involving AWS / GCP cloud architecture, SOC 2 / PCI / HIPAA compliance on cloud, Landing Zone and multi-account setup, DevOps and CI/CD automation, security hardening, monitoring and observability, and cost optimization.
My goal is always to deliver secure, well-architected, and business-aligned cloud solutions that solve today’s technical challenges while preparing the platform for future growth.
Experience
Professional experience5 - 10 years
Freelancer since2024
Languages
EnglishFluent
Project history
- Reduced monthly cloud spend by 30% by modernizing and migrating infrastructure from a private cloud monolithic hosting to AWS EKS (auto mode).
- Strengthened AWS security through multi-account provisioning using AWS Control Tower as per AWS best practices, using Pod Identity for inter-service communication, following the IAM least privilege access principle, and secret management using AWS Secret Manager.
- Optimized infrastructure provisioning through Terraform, remote state management and CICD pipeline using AWS CodePipeline.
- Improved high availability and scalability through multi-AZ deployment by Karpenter and PDBs.
- Accelerated SDLC by containerizing the applications (Angular + Java), maintaining Git repositories for each application, and automating the deployment through AWS CodePipelines and Argo CD.
- Enhanced observability and operational awareness by integrating AWS CloudWatch Container Insights and setting up proactive alerting for critical application and infrastructure metrics using AWS SNS.
- Reduced monthly AWS spend by saving $40,000/year ($80,000+ in 2 years) at EZO through strategic billing optimizations and saving plans, instance right-sizing, resource cleanup, retention policies, and architectural improvements.
- Ensured 99.99%+ uptime for four SaaS applications by implementing automated monitoring, alerting, and self-healing mechanisms.
- Hardened security for cloud infrastructure with IAM policies, data encryption at rest and in transit, the least privilege principle, logging and monitoring, change management, disaster recovery, etc., to support SOC 2, HIPAA and PCI DSS compliance.
- Optimized CI/CD pipelines for zero-downtime deployments and to cut deployment time by 40% using Jenkins, GitHub Actions, and AWS CodePipeline for four SaaS applications.
- Optimize GKE/EKS cluster costs on GCP/AWS with pod/node dynamic autoscaling, right-sizing of instances, and upgrade to newly available versions to avoid extended support costs, etc.
- Automate infrastructure provisioning for 15+ accounts on AWS and GCP using Terraform, Ansible, and GitHub Actions, resulting in an 80% reduction in manual efforts.
- Managed Azure cloud for SaaS applications, integrating SCIM and Azure AD to enable automatic user provisioning within the ITAM tracking applications.
- Enhanced infrastructure and application monitoring through consolidated dashboards and proactive alerting systems using tools like Grafana, Prometheus, AWS CloudWatch, GCP Cloud Monitoring/Logging, and DataDog, ensuring high availability and early detection of issues across cloud infrastructure and SaaS applications.
- Enhanced DDOS/DOS protection using AWS WAF, NACL, SGs, and the SIEM solution, Wazuh.
- Enhanced the software development lifecycle (SDLC) by working closely with a team of over 50 developers and 10 QA resources, reducing bottlenecks through automated testing and deployments using Jenkins with tools such as Selenium, Playwright, Robocop, Bullet, and RSpec.
- Ensured high availability for APIs through decoupled and serverless architectures with Lambda written in Python, SQS, ALB/API Gateway, and DynamoDB for monolithic applications.
- Managed on-call rotations and defined SLIs, SLOs, and SLAs to ensure service quality and meet business objectives, especially with large-scale SaaS clients with private clouds.
- Fine-tuned Apache worker processes, boosting WordPress site performance and resource utilization with autoscaling, handling 100k+ requests per minute.
- Optimizing AWS to achieve over 60% cost savings ($30,000/year) by scheduling old EBS snapshots, introducing lifecycle policies for Amazon S3, deleting old and unused resources (AMIs, snapshots, backups), reducing cross-region data transfer, removing unused compute resources (RDS, EC2) and replacing VPC NAT Gateways with VPC endpoints.
- Optimized website performance globally with AWS CloudFront (CDN), enhancing user experience through faster content delivery.
- Strengthened email security with SPF, DKIM, and DMARC setup, plus regular DMARC report analysis.
- Managed a global WordPress site with a scalable and high-availability design, achieving 99.999% uptime and zero-downtime updates, and enhanced security using AWS WAF.
- Reduced code and OS patching time by 60% through Ansible and AWS Systems Manager Patch Manager.
- Initiate monthly AWS training for development teams, empowering them with skills in auto-deployments and secure access.
- Reduced manual efforts by 80% in AWS recurring tasks through bash scripting, i.e., ALB rules update, customer’s SSL certificates upload to ACM, etc.
- Upgraded Ubuntu servers, slashing application startup time from 3 minutes to 20 seconds (88%).
- Reduced the onboarding time by 80% for new hires by automating the provisioning of local setup using a containerized solution (Docker) and demos.