Lead Cloud Security Engineer Resume
Richmond, VA
SUMMARY
- 10 years of IT experience with ability to accomplish all aspects of the software configuration management (SCM) process, systems deployment engineering (SDE), AWS and DevOpsin CI/CD pipeline, Build/Release management and Cloud Security Engineering.
- Guide the cloud security group, identifying opportunities for improvement and then driving those improvements through the enterprise.
- Closely collaborate with security architects in developing cloud security frameworks for the enterprise.
- Provide thought leadership on cloud usage strategy, monitoring, alerting, reporting, and blocking.
- Examine current cloud security practices and identify key risks, then execute programs to address them.
- Lead large scale programs that span the enterprise to deploy and manage various cloud security appliances and agents.
- Implemented Saas Platform tools for enabling continuous monitoring on cloud accounts and identifying the key risks.
- Worked with various teams like Business, Governance to address and remediate the issues identified.
- Skill in DevOps, Release Engineering, Cloud Infrastructure, mechanization.
- Well Experienced in working on source controller tools like Subversion (SVN), GIT, TFS.
- Implemented Continuous Integration and Continuous Delivery pipeline using GitHub, Maven, Ansible, and Jenkins in an Agile Environment.
- Experience in writing deployment scripts for Pre - Production, Performance, Staging and Production environments using Bash, Shell, Python and Perl scripts.
- Experienced in using Nexus and Artifactory Repository Managers for storing artifacts.
- Ability to build automated scripts by coordinating with the software development team in ensuring successful deployments and health of the application.
- Worked on Jenkins for continuous integration and for End-to- End automation for all Build and deployments.
- Experience with Migrating Infrastructure from On Premise Servers to Multiple clouds.
- Hands on experience with Ansible to automate deployment process, configuration management and infrastructure.
- Configured, monitored, distributed multi-platform servers using Ansible.
- Experience in branching, tagging and maintaining the version across the environments.
- Experience in using tools like JIRA and Remedy for ticketing.
- Worked on Performance, Log Monitoring Issues, Role Mapping, Dashboard creation, Data models etc, using Splunk.
- Experience with installing and configuring monitoring tools like Splunk, Wily Introscope.
- Having experience on Alert Management System (a tool for organizing and tracking the most important alerts in an enterprise or logical segment of an enterprise. AMS lets you focus on and manage the highest severity IT alerts in real time)
- Excellent written and verbal communication skills, analytical, problem solving skills, strict attention to detail and ability to work independently, and within a team environment.
TECHNICAL SKILLS
Continuous Monitoring Tools: Evident.io, Prisma cloud, Cloud conformity
Cloud Platforms: AWS, Azure, OCI, GCP
Version Control Tools: GIT, SVN, Rational Clear Case
Project management Tools: JIRA, Sonar, Remedy, HP Quality Center
Scripting Languages: Shell, Python, Perl
Platforms: Redhat Enterprise, CentOS, Sun Solaris, Ubuntu
Application Servers: Weblogic, WebSphere, JBoss, Tomcat
CM Tools: Ansible, Chef
Monitoring Tools: Wily Introscope, Splunk, Keynote, Xpologs
Continuous Integration Tools: Jenkins, Hudson
Cloud Computing Services: AWS
Operating Systems: UNIX, LINUX, WINDOWS, HP-UX, Mac
Networking Protocols: DHCP, Ethernet, TCP/IP
PROFESSIONAL EXPERIENCE
Confidential
Lead Cloud Security Engineer
Responsibilities:
- Responsible for the thorough documentation of implementations, via technical documentation and run books.
- Responsible for input and feedback on security architectures
- Apply adept understanding and experience with systems automation platforms and technologies
- Partake in efforts that shape the organization’s security policies and standards for use in cloud environments
- Interpret security and technical requirements into business requirements and communicate security risks to relevant stakeholders ranging from business leaders to engineers
- Direct and influence multi-disciplinary teams in implementing and operating Cyber Security controls
- Collaborate with application developers and database administrators to deliver creative solutions to difficult technical challenges and business requirements
- Provide subject matter expertise on information security architecture and systems engineering to other IT and business teams
- Execute security architectures for cloud cloud/hybrid systems
- Responsible for automating security controls, data and processes to provide improved metrics and operational support
- Employ cloud-based APIs when suitable to write network/system level tools for safeguarding cloud environments
- Stay abreast of emerging security threats, vulnerabilities and controls
- Spot and execute new security technologies and best practices into the company’s Cloud offerings.
- Involved heavily in setting up the CI/CD pipeline using Jenkins, Maven, Nexus, GitHub, Puppet, Terraform and AWS
- Experienced in cloud automation using, AWS cloud Formation Templates, Chef, Puppet.
- Configured and managed Elastic Load Balancing (ELB) to implement fault tolerance and avoid single point of failure of applications, thus providing high reliability and efficient usage.
- Create AMI's for the environment using established pipeline
- Administer JIRA and Confluence Servers to include backups, snapshots, User Creation and Kanban modification
- Configure Securitygroups to allow for appropriate flow of traffic.
- Created responsibility matrix for the developers who are responsible to solve the incidents and report them to the entire team.
- Triggered lambda functions to get the notifications through SNS in our slack channels.
- Good understanding of the principles and best practices of Software Configuration Management (SCM) in Agile, scrum, and Waterfall methodologies.
Confidential, Richmond VA
Cloud Security Engineer
Responsibilities:
- Assist with the implementation, modification and improvement of the Sponsor's Risk Management Framework (RMF) workflow and its component parts
- Exploit Tool development: Developing the security toolset to exploit newly found vulnerabilities in order to perform real-world attacks
- Work on improvements including the development of new tools, automation, and integration
- Make recommendations to help improve our security posture as an organization
- Work with application and infrastructure teams to design and architect infrastructure (network, OS, databases) and applications to protect against attackers
- As a hands-on technical specialist, handle complex and detailed technical work necessary to establish and maintain secure cloud & data center security
- Champion test driven development and continuous delivery of our work
- Release Engineer for a team that involved different development teams and multiple simultaneous software releases.
- Launching Amazon EC2 Cloud Instances using Amazon Web Services (Linux) and Configuring launched instances with respect to specific applications.
- Continuously managed and improved the build infrastructure for global software development engineering teams including implementation of build scripts, continuous integration infrastructure and deployment tools.
- LeveragedAWS cloud services such as EC2, auto-scaling and VPC to build secure, highly scalable and flexible systems that handled expected and unexpected load bursts.
- Developed and maintained the continuous integration and deployment systems using Github, Jenkins, Maven, Nexus and Ansible.
- Coordinating with different Project teams on Build & Release planning and efforts.
- Responsible for nightly and weekly builds for different modules.
- Responsible for changes for release and environment configuration.
- Developed shell scripts for automation of the build and release process, developed Custom Scripts to monitor repositories, Server storage.
- Familiar and experienced with Agile Scrum development.
- Installed and configured Jenkins for automating deployments and providing an automation solution.
- Integrated Subversion into Jenkins to automate the code checkout process.
- Used various plug-ins to extend the base functionality of Jenkins to deploy, integrate tests and display reports.
Confidential, San Antonio, TX
Sr AWS/Devops engineer
Responsibilities:
- Creation of EC2 instances and creation of S3 buckets.
- By using Jenkins plugins storage of artifacts to S3.
- Implemented and created the work environments using Ansible onAWS private VPC, which are, hosted on the cloud and on premise data centers.
- Worked with Puppet on various deployment configurations.
- Performed Server configuration management via Puppet. Transparent Data Encryption (TDE) implementation.
- As member of Release Engineering group, redefined processes and implemented tools for software builds, patch creation, source control, and release tracking and reporting, on Unix platform. Served as interim group leader.
- Assist with maintaining current build systems, developed build scripts, and maintained the source control system.
- Worked on setup of various dashboards, reports and alerts in splunk.
- Proposed different branching strategies for SVN Subversion to support the parallel development for various projects.
- Involved in data migration from SVN to GIT.
- Configured and managed jobs in Jenkins. Set up jobs for auto deployment.
- Created and managed all the branches for short term and long-term projects in SVN Subversion.
- Prior to Quality Assurance release merge all the development branches to the release branch and perform a QA migration.
- Created backup scripts for SVN Subversion and perform the backup activity every week.
- Responsible for maintaining build scripts and checking build status. Maintained and modified scripts and documented process for build.
- Created Change Controls and for change management process for Various Migration of code to production, and worked on approvals from Seniors and CAB and ECAB
- Develop automated deployment scripts using maven and python to deploy war files, properties file and database changes to development server or QA server and Staging/Production server.
- Develop automated rollback deployment on Staging/Production server. Purpose is to undo previous deployment in database, properties files and war files changes.