Building and securing infrastructure across AWS and Azure — identity, encryption, firewalls, containers, and high availability.
Architected, deployed, and validated — with published write-ups.
A production-grade dual-AZ VPC hosting an Aurora MySQL 8.0 Multi-AZ cluster. I validated zero-downtime failover with automatic writer/reader role promotion in under 60 seconds, and diagnosed a security-group misconfiguration that was blocking connectivity during testing.
Identity, encryption, monitoring, and container security across both major clouds.
Secured S3 with resource-based & IAM policies, encrypted data at rest with AWS KMS (SSE-KMS, EBS volumes), monitored activity with CloudTrail + CloudWatch, and auto-remediated security-group drift using AWS Config + Lambda.
Deployed Azure Firewall, enforced least privilege with Privileged Identity Management (PIM), implemented directory synchronization, and secured container workloads across Azure Container Registry (ACR) and Azure Kubernetes Service (AKS).
Available for cloud security, cloud engineering, and infrastructure roles across AWS and Azure.