Tunnl — DevSecOps Engineer
April 2022 – Present- Designed and maintained AWS security controls across IAM, S3, EC2, RDS, VPC, Elastic Load Balancing, Secrets Manager, and related cloud services, supporting alignment with AWS Foundational Security Best Practices and CIS AWS Foundations benchmarks.
- Remediated AWS Security Hub findings involving IAM credentials, MFA, S3 security controls, load balancer configuration, network protections, logging, and unused secrets.
- Developed and maintained Terraform-based IAM/RBAC and policy-as-code frameworks to enforce least-privilege access across AWS resources.
- Supported SOC 2 compliance through control evidence, documentation, quarterly access reviews, and recurring compliance activities across AWS and engineering tools.
- Administered identity and access for employees, contractors, and engineering teams across AWS, Databricks, GitHub, VPN, and other enterprise systems.
- Supported disaster-recovery planning and cross-region infrastructure migration across multiple availability zones, spanning EC2, RDS, S3, ClickHouse, Airflow, Cognito, VPN, DNS, and application infrastructure.
- Automated AWS IAM access-key rotation using AWS Lambda and Secrets Manager to strengthen credential management and reduce manual security operations.
- Supported privacy and data-protection operations, enterprise security questionnaires, and troubleshooting for cloud services and developer infrastructure.