Tunnl — DevSecOps Engineer
April 2022 – Present- Engineered and enforced AWS security controls across IAM, S3, EC2, RDS, VPC, ELB, and Secrets Manager spanning 5 organizational accounts and 9 teams, securing 100+ users while maintaining alignment with AWS Foundational Security Best Practices and CIS AWS Foundations benchmarks.
- Built and led Tunnl's SOC 2 compliance program from inception, delivering 5 successful audit issuances across SOC 1 and SOC 2 Type I/II certifications — directly unlocking Fortune 500 client opportunities and strengthening enterprise security posture.
- Drove a 22% reduction in security findings by executing continuous cloud security assessments, vulnerability remediation, and control enhancements via AWS Security Hub — achieving an average remediation time of 11 days across a multi-team engineering environment.
- Partnered with Platform, API, ETL, and Data teams to close systemic security gaps and harden cloud configurations, reducing recurring vulnerabilities while aligning remediation priorities with executive and business stakeholders.
- Architected Terraform and JSON policy-as-code frameworks to enforce security best practices and standardize configurations across 25 AWS organizational accounts, eliminating configuration drift at scale.
- Provisioned and administered identity and access management across AWS, Databricks, GitHub, VPN, and additional enterprise platforms — supporting 9 departments and 50+ contractors with consistent, least-privilege access controls.
- Automated credential rotation using AWS Lambda and Secrets Manager, reducing manual security operations and minimizing credential exposure risk across the organization.
- Spearheaded implementation of a SaaS privacy-request platform, integrating vendor APIs with AWS RDS and S3 — processing 506,000+ deletion requests, 32 access requests, and 44 opt-out requests with average completion times under 7 hours, enabling scalable, audit-ready data subject request handling.
- Established Tunnl's third-party security assessment program, formalizing vendor risk management processes and strengthening data protection controls across upstream and downstream data partners.