Saniya Subhan
Sr. Lead Cloud Security Engineer at Go Daddy Software- Claim this Profile
Click to upgrade to our gold package
for the full feature experience.
Topline Score
Bio
Credentials
-
Amazon Web Services DevOps Engineer - Professional
Amazon Web Services (AWS) -
Amazon Web Services Solutions Architect - Professional
Amazon Web Services (AWS) -
Certified Information Systems Auditor (CISA)
Cisco -
Certified Information Systems Security Professional (CISSP)
Cisco -
Security+
CompTIA
Experience
-
Go Daddy Software
-
Technology, Information and Internet
-
1 - 100 Employee
-
Sr. Lead Cloud Security Engineer
-
Aug 2020 - Present
1. Responsible for conducting Threat Modeling Assessments on Application Architecture. 2. Performed Security Assessments and Risk assessments to identify potential security vulnerabilities. 3. Worked with App Dev Team for Resolution of Threats and Vulnerabilities. 4. Worked with corporate governance, Security, and external audit teams to implement security regulations and best practices such as PCI, SOX, HIPAA, or the ISO 27000 family of standards. 5. Member of disaster recovery team and involved in Disaster recover exercises walk troughs, simulation tests, parallel tests. 6. Member of implementation group of federated identity management with SAML for AWS public cloud with corporate LDAP and OIDC. 7. Designed and implemented private key (Symmetric key) encryption for data in rest. Show less
-
-
-
SmartPay Solutions, LLC
-
United States
-
Insurance
-
1 - 100 Employee
-
Sr. Cloud Security Engineer
-
Feb 2018 - Aug 2020
Develop and implement cloud security strategies, policies, and procedures to safeguard data and infrastructure in cloud environments. Conduct risk assessments and vulnerability scans to identify potential security threats and vulnerabilities. Design and deploy security controls and mechanisms, such as firewalls, intrusion detection systems, and data encryption, to protect cloud systems and applications. Monitor and analyze security logs and alerts to detect and respond to security incidents and breaches. Collaborate with cross-functional teams to ensure security requirements are integrated into cloud architecture and design. Conduct security assessments and audits of cloud service providers to evaluate their compliance with security standards and regulations. Stay up to date with the latest security threats, trends, and technologies in cloud computing and recommend appropriate security solutions. Develop and deliver security awareness and training programs to educate employees on cloud security best practices. Show less
-
-
-
New York Life Insurance Company
-
United States
-
Financial Services
-
700 & Above Employee
-
Sr. DevSecOps Engineer
-
Jun 2016 - Jan 2018
• Designing highly available, fault tolerant, self-healing, secure AWS architectures utilizing multi-regions, multiple availability zones, ELBs, auto-scaling, application clusters, security, encryptions • Working on the migration of applications from vendor-based software to open source • Working on building CI/CD pipeline with Jenkins, Ansible, Lambda, AWS EC2 CLI, shell scripts, AWS code deploy • Setting up AWS application security groups, IAM roles and policies for AWS resources and services, encrypting EBS volumes and AMIs via KMS keys, and ACM (AWS certificate management) • setting up classic and application load balancers, performing ELB operations for enabling, disabling, switching application environments • Creating custom AMIs(images) with custom software, tools, tunings for application environments, and launching new EC2 instances with the custom AMIs • Good understanding of AWS VPC, CloudWatch, ECS, Lambda, cloud trail, SQS, SNS, route 53, direct connect, beanstalk, etc.… • Have an excellent understanding of the Google Cloud platform. • Worked on setting up POC environment for Kubernetes. Also worked on log shipper solution fluentd on kubernetes • Expertise in automating infrastructure builds with infrastructure as code tools chef, puppet, terraform. • Expert in RedHat open shift Infrastructure design, deployment, and operational support. Show less
-
-
-
-
DevOps Engineer
-
Nov 2014 - May 2016
• Configured data warehouse jobs in AWS using RedShift, AWS Glue by creating a crawler and configuring the job. • Utilized Atlassian suite of tools to complete the configuration of product SDLC life cycle. • Configured new users in AWS using AWS IAM and applied the principle of least privilege. • Created multiple ETL jobs within AWS environment and configured SNS/SQS for sending and receiving the data. • Installation and configuration of JBoss Application servers 4.0.x, 5.1.x and Tomcat 5.x, 6.x, 7.x. • Configured Continuous Integration by setting up Build and test automation (ATDD) Jobs in Hudson/Jenkins by pointing to Orchestration and UI layer Repositories in GitHub. • Cloud infrastructure maintenance using a combination of Jenkins, Ansible and Terraform for automating CI/CD pipeline in AWS. • Installed RedHat Linux servers in the AWS cloud environment using the custom AMIs. • Worked with different number of RESTFUL APIs and deployed them via API Gateway to validate the API calls happening. • Create, maintain and administrating GitHub repositories as source code managements. • Created end to end automation of Continuous Deployment and Configuration Management in Udeploy. Show less
-
-
-
Sigma Resources LLC
-
United States
-
IT Services and IT Consulting
-
1 - 100 Employee
-
Automation Engineer
-
Jun 2012 - Oct 2014
• Used Maven as build tool on Java projects for the development of build artifacts on the source code. • Provides direction to System Administrators to ensure proper deployment, configuration, and testing of RHEL Linux systems, applications, and security patches. • Identify issues and risks, resolve problems and escalate them as necessary. • Serve as an escalation resource for staff that provides 24x7 (on-call) system supports. • Cross functional engineering knowledge across the technology stack • Create new infrastructure in OpenShift on-premises environment and deploy the application on Ubuntu and CentOS. • Use RedHat linux servers for provisioning the applications across different servers to maintain scalability and availability. • Perform code-reviews and deploy the code across different platforms and environments including Windows and Linux. • Designed and implemented Subversion and GIT metadata including elements, labels, attributes, triggers and hyperlinks. • Implemented & maintained the branching and build/release strategies utilizing Subversion/GIT. • Performed all necessary day-to-day Subversion/GIT support for different projects. Show less
-
-
Education
-
2011 - 2012
Western Michigan University
Bachelor's degree, Finance & Business
Community
