I architected a secure static asset pipeline using AWS S3 and Amazon CloudFront, offloading media traffic from web servers. I restricted retrieval to encrypted CDN routes using Origin Access Control and granular IAM bucket policies.
To reduce origin server overhead and bandwidth costs, I tuned caching policies, edge compression, and browser caching headers. I also standardized CORS configurations and created automated local-to-cloud asset synchronization workflows.
For my security projects, I developed a PowerShell tool for Windows system hardening and compliance checks, and investigated SQL injection, XSS, and cookie theft. I validated security controls through Wireshark traffic analysis and manual penetration testing.
