Open to opportunities

Achu Mofor

@achumofor

Message

Cloud security engineer securing AWS, Azure, and GCP with proven compliance and DevSecOps experience.

United States

Message

What I'm looking for

I seek a cloud-security role where I can design secure cloud architectures, embed DevSecOps practices, drive compliance, and mentor teams while strengthening incident response.

I am a Cloud Security Engineer with 10 years of IT experience and six years of hands-on cloud security across AWS, Azure, and GCP, focused on building secure, scalable, resilient infrastructures.

I have designed and implemented VPCs, IAM, MFA, encryption (KMS, TLS/SSL), AWS Landing Zones, and centralized logging while automating deployments with CloudFormation and Terraform to improve provisioning speed and reduce critical vulnerabilities.

I partner with application, DevOps, and architecture teams to embed security into CI/CD pipelines, support incident response and forensics, and ensure compliance with NIST, ISO 27001, FedRAMP, PCI-DSS, and related frameworks.

Experience

Work history, roles, and key accomplishments

Current

AWS Cloud Security Engineer

Current

CVS

Nov 2019 - Present (6 years 7 months)

Designed and implemented AWS security architecture and landing zones, automated IaC deployments to improve provisioning speed by 40%, and reduced critical vulnerabilities by 30% through risk assessments and remediation.

IAM S3 KMS CloudFormation Terraform GuardDuty Security Hub Splunk Incident Response DevSecOps

Cloud Security Engineer

Bank of America

Nov 2019 - Oct 2022 (2 years 11 months)

Implemented IaC (Terraform, CloudFormation) for secure cloud deployments, configured AWS security services (GuardDuty, Macie, Security Hub), and integrated security scanning into CI/CD pipelines to improve detection and remediation.

Terraform CloudFormation CloudTrail Jenkins Gitlab Vulnerability Assessment

Cybersecurity Analyst

Humana

Oct 2016 - Oct 2019 (3 years)

Implemented firewalls, IDS, and encryption solutions, conducted security audits and forensic investigations, and developed device hardening standards to improve endpoint security across Windows and Linux servers.

IDS Forensics Risk Assessment Endpoint Security Windows Linux & Compliance