Security Engineer

• Jul 2020 - Present

Credential Management Lead credential management DevOps activities with 5 members. Used licensed Hashicorp Vault as a secure storage. Worked with multiple teams to automate password rotation, password validation and credential lifecycle management. Migrated licensed Hashicorp Vault from VM-based platform to Kubernetes-based platform without down time. Jump Server Deployment Designed, deployed and operated CentOS-based jump servers to enable engineers to access to new data center remotely. Identity Aware Proxy Deployed open source Identity aware Proxy “Pomerium” for newly bulit network in Germany. Integrated the proxy with Apache Guacamole(open source web CLI for PAM) to allow engineers to access to internal application/servers securely. Security Approval Checked each application release and change request to provide security approvals based on security criteria. Done for both Staging environment and Production environment.