Work directly with global clients and onshore SRE / Platform teams to investigate AWS environments and propose DevOps / cloud security solutions.
Analyze and remediate AWS security findings, including misconfigurations, exposed credentials, overly permissive IAM policies, and related vulnerabilities.
Design, implement, and review AWS IAM policies, roles, SCPs, and permission boundaries following least-privilege principles.
Drive structured remediation workflows across multiple AWS accounts and environments.
Contribute to or review Infrastructure as Code, especially CloudFormation, for repeatable and auditable remediation.
Maintain and improve secure, scalable AWS infrastructure in multi-account / multi-environment setups.
Join architecture discussions and provide recommendations on AWS security, reliability, and best practices.