Experience

Conedge Group

• United States
• Business Consulting and Services
• 1 - 100 Employee

• Cloud Security Engineer

  • Jun 2022 - Present

  • Perform ongoing, monthly audits of infrastructure for vulnerabilities • Advise on and preventatively remediate security issues • Working with client companies to make sure their data is properly secured • Experience implementing security controls around data and data products • Exploit Tool development: Developing the security toolset to exploit newly found vulnerabilities in order to perform real-world attacks • Work on improvements including the development of new tools, automation, and integration • Make recommendations to help improve our security posture as an organization • Work with application and infrastructure teams to design and architect infrastructure (network, OS, databases) and applications to protect against attackers • Confirms project teams comply with regulatory compliance and best practices • Ensures adequate security solutions and controls are in place throughout Watson Health Cloud platform, services, and solutions • Automate cloud security solutions and controls • Worked with PingFederate using SAML, OAUTH and OpenID in both Production and Non-production environments. • Have encrypted highly sensitive data such as protected health information (PHI) or personally identifiable information (PII) using customer-controlled keys. • I ensured and informed teams about compliance regarding PCI DSS, GLBA and CCPA



Gopuff

• United States
• Software Development
• 700 & Above Employee

• Cloud Engineer

  • Dec 2021 - May 2022

  • Validated the environment to meet all security and compliance controls. • Automated the installation of software through PowerShell scripts. • Worked with engineers and development teams to ensure that architecture solutions are compliant • Worked with PingFederate using SAML, OAUTH and OpenID in both Production and Non-production environments. • Have encrypted highly sensitive data such as protected health information (PHI) or personally identifiable information (PII) using customer-controlled keys. • Work with application and infrastructure teams to design and architect infrastructure (network, OS, databases) and applications to protect against attackers



Amazon

• Bangladesh
• Advertising Services
• 1 - 100 Employee

• Solutions Architect

  • Jul 2020 - Nov 2021

  • Deployment of databases in Private Subnets and configured Bastion Hosts and NAT-Gateways for access. • Implementing various Security policy using NACL, Security groups, Private-subnets, Encryption in transit and Encryption at rest etc into all configurations backup and recovery process monitoring. • Using IAM services to create new IAM user, groups, roles, policies and identity provider, as well as assigning least privilege. • Creating of Autoscaling Group to scale EC2 instances. • Developing of docker containers for DevOps designs and enabled interfaces for DevOps builds and release management and CI/CD pipeline for applications • Provisioning of VPC and other component of the VPC using cloud formation and YAML language. • Provisioning of resources, users and access controls on AWS cloud • Monitoring of AWS applications using CloudWatch and CloudTrail. • Performing database and data migration using cloud endure. • Implementing Ansible for configuration management for Linux environment. • Building of Linux and Windows VMs for DevOps environment. • Building of AWS Infrastructure using CloudFormation Templates. • Scheduling AWS lambda functions from CloudWatch triggers



TopView Sightseeing

• United States
• Travel Arrangements
• 1 - 100 Employee

• Cloud Engineer

  • Dec 2016 - Jul 2020

  Managed Cloud Architecture projects for the Company. Provisioned Virtual Private Cloud (VPC) from scratch, configured subnets, route tables, NAT Gateway and Security Group. Led sessions with businesses to deeply understand their needs and documented requirements. Used requirements gathered to design a fault tolerant and highly scalable architecture. Created and maintained project-related documentation (Statement of Work Document, Proof of concept document, technical design document, etc.). Developed and documented implementation plan for on-premise migration into cloud. Led migration Project reviews and guided the team on technical and functional perspective. Designed, built and migrated applications, software and services on the AWS platform. Validated the environment to meet all security and compliance controls. Designed, deployed, monitored and managed enterprise level platforms and infrastructure in AWS. Identified key areas for improved and cost effective cloud architecture Provided high level documentation with diagrams. Designed and developed technically and operationally feasible long-term solutions. Analysed and identified enterprise technical and operational risks, then provisioned the best architected AWS infrastructure. Performed cost-benefit and return on investment analyses for proposed systems to aid management in making implementation decisions. Analysed and deployed Cloud controls, Governance and Security on the Cloud Architecture. Designed scalable, elastic and redundant architecture that allows the organization's Data Lake to organically grow as the demand increased for their services. Provided technical guidance and built solutions using AWS Defined cloud strategy, roadmap, and business case for cloud adoption by assessing and analysing on-premise applications Defined cloud architecture, design and implementation for hosting large, complex applications in AWS.