Anuj Varma

Served as Enterprise Security Architect for cloud and API security, including threat modeling and risk documentation for 3+ dozen acquisition-based applications. Designed AWS security reference architectures (Shared VPCs, GWLB firewall patterns) and architected fraud/anti–money laundering AI/ML security using Vertex AI and SageMaker workflows with IAM and encryption controls.

Owned API security for a healthcare HIPAA data pipeline, securing GKE clusters and healthcare API integrations and performing threat modeling for hosted and consumed APIs. Supported ML/dataflow transformations for reshaping and preparing datasets used by patient processing workloads.

Defined multi-cloud security standards for a SAP ecosystem migration and remediated over 1,000 Prisma CSPM findings across AWS and GCP. Led zero-trust evaluation and PoCs to reduce VPN reliance and created a GCP CIS benchmarking matrix covering 115 benchmarks, routing CIS violations through Security Command Center dashboards and remediation plans.

Migrated 80+ SaaS and on-premises applications from ADFS SSO to Azure AD, implementing AAD Connect Sync/Cloud Sync, SCIM-based provisioning, and Conditional Access/RBAC. Built OAuth 2.0 provider protections and automated user/group onboarding with PowerShell and Microsoft Graph API.

Implemented a Terraform-driven GCP deployment of F5 instances across 3 zones for high availability, including health checks, static/NAT IPs, SSH key setup, and automated F5 onboarding. Configured FedRAMP FIPS-2 compliant settings, APM module, HA, and modularized Terraform for repeatable environment provisioning.

Designed and implemented AWS and GCP security and infrastructure patterns, including EC2 automation with IAM roles and SSM profiles and Terraform-based DevSecOps workflows. Automated certificate lifecycle and encryption controls using AWS PKI/KMS, Venafi, AWS ACM, LetsEncrypt/Certbot, and GCP KMS/IAM for encrypted workloads and compliant key management.

Led a team of 8 cloud architects delivering 2+ dozen complex customer projects spanning AWS, Azure, and GCP landing zones, security audits, and cloud migrations. Provided FinOps cost-optimization and migration readiness assessments using multi-cloud governance, monitoring, and rightsizing tooling.

Containerized a .NET/SQL Server gas monitoring sensors application using Docker (Compose/Swarm) with production-ready Dockerfiles for SSL/TLS and Windows gMSA configuration. Automated host configuration via PowerShell and delivered monitoring and CI/CD using Prometheus-based container metrics and ADO pipelines.

Conducted cloud readiness and migration strategy discovery by assessing ~200 applications (COTS/SaaS/custom) and mapping on-prem-to-cloud dependencies. Performed security architecture activities including HP Fortify/WebInspect assessments, WAF PoCs, IAM evaluations, and performance troubleshooting with centralized reporting via Tableau and CMDB approaches.

Completed a Master of Engineering in Electrical Engineering at Cornell University. (1995–1996)

Completed a Master of Science in Physics at the University of Florida with a full assistantship. (1992–1995)

Earned a B.S. in Physics and Math at Angelo State University as a full scholarship recipient. (1988–1992)