Cloud Security Engineer with 10 years of experience in security and IT. Expertise in implementing and managing cloud security solutions. Committed to continuous learning and adaptation of emerging technologies.
Overview
10
10
years of professional experience
1
1
Certification
Work History
Principal Cybersecurity Engineer - Cloud
MTSI
03.2023 - Current
Responsible for the security of MTSI’s Azure Government, AWS Government, and GCC High Microsoft 365 tenants. All areas of cloud security, with extensive experience in Microsoft security offerings.
Lead initiatives to ensure NIST 800-171 and CMMC compliance across cloud workloads.
Collaborate closely with Cloud Architect, Cloud Administrators, and Development team to secure Azure workloads.
Guide security leadership and IT leadership on optimal cloud security strategies.
Specialist in Zero Trust framework
Maintained documentation of security policies and incident response procedures.
Coordinated with vendors to evaluate products related to cybersecurity solutions.
Assisted in developing policies and procedures related to information security management.
Responded quickly to any alerts generated by the organization's cybersecurity systems.
Conducted vulnerability scans and identified areas for improvement.
Notable projects:
Implemented Zero Trust security model within MTSI’s workflow
Optimized administrator role accounts and IAM access to resources, implementing least privilege and JIT principles (PIM).
Deployed Intune for enhanced security of desktop and mobile devices.
Facilitated NIST 800-171 compliance implementation for Azure, M365, and AWS services.
Developed and executed strategies for information protection within Purview.
Established data loss prevention (DLP) to safeguard sensitive information.
Conducted insider risk evaluations to detect and address threats.
Collaborated with DevOps team to secure AKS Kubernetes clusters intended for government and contractor applications.
Implemented CrowdStrike across all Azure resources and container image registries to enhance security.