At BlinkRX, I architect Zero Trust initiatives across AWS and Azure, enforcing least-privilege IAM boundaries, PAM controls, and micro-segmentation. I also hardened EKS and AKS workloads using Trivy, OPA Gatekeeper, and base-image hardening policies.
I matured BlinkRX’s enterprise AppSec program by embedding SCA, SAST, and DAST gates into GitHub Actions CI/CD pipelines, reducing critical exposure findings by 40%. I also led cloud incident response and root cause analysis, implementing automated remediation with Python and Terraform.
At Amazon Web Services (AWS), I hardened multi-account cloud infrastructure and automated detection, alerting, and key management across 50+ cloud accounts. I authored Terraform and CloudFormation security guardrails and supported penetration testing and compliance audits.
At JumpCloud, I reduced production cloud vulnerabilities by 55% through assessments, code scanning, and container security policies. Earlier, at Rackspace Technology, I secured multi-tenant AWS environments and supported application penetration testing and remediation.

