Open to opportunities

Achu Mofor

@achumofor

Message

Cloud security engineer securing AWS, Azure, and GCP with proven compliance and DevSecOps experience.

United States

Message

What I'm looking for

I seek a cloud-security role where I can design secure cloud architectures, embed DevSecOps practices, drive compliance, and mentor teams while strengthening incident response.

I am a Cloud Security Engineer with 10 years of IT experience and six years of hands-on cloud security across AWS, Azure, and GCP, focused on building secure, scalable, resilient infrastructures.

I have designed and implemented VPCs, IAM, MFA, encryption (KMS, TLS/SSL), AWS Landing Zones, and centralized logging while automating deployments with CloudFormation and Terraform to improve provisioning speed and reduce critical vulnerabilities.

I partner with application, DevOps, and architecture teams to embed security into CI/CD pipelines, support incident response and forensics, and ensure compliance with NIST, ISO 27001, FedRAMP, PCI-DSS, and related frameworks.

Experience

Work history, roles, and key accomplishments

Current

AWS Cloud Security Engineer

Current

CVS

Nov 2019 - Present (5 years 11 months)

Designed and implemented AWS security architecture and landing zones, automated IaC deployments to improve provisioning speed by 40%, and reduced critical vulnerabilities by 30% through risk assessments and remediation.

IAM S3 KMS CloudFormation Terraform GuardDuty Security Hub Splunk Incident Response DevSecOps

Cloud Security Engineer

Bank of America

Nov 2019 - Oct 2022 (2 years 11 months)

Implemented IaC (Terraform, CloudFormation) for secure cloud deployments, configured AWS security services (GuardDuty, Macie, Security Hub), and integrated security scanning into CI/CD pipelines to improve detection and remediation.

Terraform CloudFormation CloudTrail Jenkins Gitlab Vulnerability Assessment

Cybersecurity Analyst

Humana

Oct 2016 - Oct 2019 (3 years)

Implemented firewalls, IDS, and encryption solutions, conducted security audits and forensic investigations, and developed device hardening standards to improve endpoint security across Windows and Linux servers.