Looking for a job

Amit Maurya

@amitmaurya

I’m a Cloud & AI Security Architect who secures multi-cloud platforms and production AI/ML with DevSecOps and Kubernetes.

India

Message

What I'm looking for

I’m looking to lead secure-by-design multi-cloud and Kubernetes security architecture, with DevSecOps automation, threat modeling, and strong governance—especially for secure AI/ML and LLM risk controls in regulated environments.

I’m a Cloud & AI Security Architect with 14+ years of experience designing and securing large-scale, multi-cloud platforms for banking, healthcare, and financial services. I focus on security architecture, threat modeling (STRIDE, MAESTRO), IAM governance, and building compliant secure landing zones for production workloads.

In practice, I help teams adopt cloud safely by delivering security-by-design reference architectures, policy-as-code guardrails, and Zero Trust Kubernetes environments. I’ve led 10+ STRIDE/MAESTRO threat modeling exercises across Vertex AI, serverless, and Kubernetes, and defined Zero Trust Kubernetes standards to reduce lateral movement risk in multi-tenant clusters.

I’m also hands-on with production infrastructure using Terraform and GitHub Actions (OIDC), with a growing focus on AI-driven DevOps. Recently, I’ve been researching and building expertise in LLM threat modeling, prompt injection mitigation, MITRE ATLAS, and EU AI Act compliance for regulated AI/ML deployments.

Experience

Work history, roles, and key accomplishments

Current

Cloud & AI Security Architect

Current

Independent Security Consulting

Jul 2025 - Present (11 months)

Built and deployed a production-grade secure cloud portfolio using agentic AI-driven DevOps with Terraform and GitHub Actions OIDC (AWS S3/CloudFront/ACM). Researches AI/ML security including LLM threat modeling, prompt injection mitigations, MITRE ATLAS, and EU AI Act compliance requirements.

Threat Modeling Prompt Injection Mitigation MITRE Terraform GitHub Actions AWS Security Secure Landing Zones

Cloud Security Architect

Publicis Sapient

Jul 2024 - Jul 2025 (1 year)

Evaluated and approved cloud service requests by validating GCP/AWS architectures against enterprise security controls for a 30M+ customer banking environment. Designed 10+ GCP security reference architectures and ran 10+ STRIDE/MAESTRO threat modeling exercises, defining Zero Trust Kubernetes standards and policy-as-code DevSecOps guardrails.

GCP Security AWS Security Threat Modeling STRIDE Model Maestro Policy as Code DevSecOps

Senior Architect

Virtusa

Apr 2022 - Sep 2023 (1 year 5 months)

Designed and delivered AWS Landing Zones using Terraform for global financial institutions, establishing multi-account/multi-VPC governance and security guardrails. Implemented Zero Trust EKS security architecture, hybrid identity federation (AD to AWS IAM), and resilient hybrid connectivity (Direct Connect and Site-to-Site VPN) with automated CI/CD-ready Terraform modules.

AWS Landing Zones Terraform Active Directory AWS SCPs Direct Connect Site To Site VPNs

Cloud Architect

Presidio

Nov 2020 - Apr 2022 (1 year 5 months)

Led secure-by-design cloud migration and modernization for enterprise and healthcare clients, including HIPAA-aligned target architectures and BCP/DR planning. Engineered petabyte-scale S3 storage optimization, reducing data footprint from 8.4PB to 6PB (30%) and delivering $420K in annual cost savings while maintaining encryption, retention, and access controls.

AWS S3 Optimization Terraform AWS CDK Cost Optimization Encryption & Retention Controls

Project Leader

R Systems International

Aug 2019 - Nov 2020 (1 year 3 months)

Led cloud migration and DevOps delivery across enterprise clients, including AWS infrastructure design, CI/CD pipeline development, and security controls. Standardized provisioning with Terraform/CloudFormation and implemented containerized deployments (Docker; EKS-based microservices), including automated MongoDB cluster deployment using Terraform and Ansible.

AWS Infrastructure CI CD Jenkins Terraform CloudFormation Docker MongoDB Automation Ansible

Senior System Engineer

Bluepi Consulting Pvt Ltd.

Jul 2018 - May 2019 (10 months)

Operated in an MSP model managing infrastructure, security, availability, and cost governance across 6 concurrent AWS/GCP client environments. Designed secure multi-client architectures (VPC/network segmentation, IAM, WAF) and improved cloud operations with centralized monitoring/logging and cost optimization (e.g., $12K annual savings for Nexval).

AWS GCP VPC & Network Segmentation IAM AWS WAF Monitoring Incident Response Cost Optimization

Associate Manager

ICICI Bank

Apr 2015 - Jun 2018 (3 years 2 months)

Led AWS cloud migration projects for critical banking workloads, ensuring zero downtime and regulatory compliance. Managed a fleet of 2,500+ Linux/Unix servers across production and disaster recovery environments, supporting core banking operations and high-availability storage reliability.

AWS Cloud Migration Linux Unix Disaster Recovery Business Continuity Planning (BCP)Shell Scripting & Automation High Availability SAN Administration

Unix & Infrastructure Admin

Symantec

Apr 2013 - Jun 2014 (1 year 2 months)

Supported enterprise data center operations across Linux, IBM AIX, Oracle Solaris, and VMware ESX, including workload transitions for a large-scale data center migration. Configured VMware ESX with vMotion and built automated OS installation and internal Yum repository tooling to reduce manual deployment overhead.