Open to opportunities

Sohail Khan

@sohailkhan1

Message

Results-driven Cloud Security Engineer with 7+ years of experience.

United States

Message

What I'm looking for

I am looking for a role that fosters innovation, collaboration, and continuous learning in cloud security.

I am a results-driven Cloud Security Engineer with over 7 years of experience in architecting, implementing, and securing cloud infrastructures across multi-cloud environments. My expertise lies in Zero Trust architecture and DevSecOps practices, where I have successfully reduced unauthorized access and enhanced security posture through automation and infrastructure as code. I am passionate about developing innovative security solutions that balance robust protection with operational efficiency.

In my recent role at Tesla, I architected and implemented a Zero Trust security model that secured over 500 cloud workloads, achieving a 65% reduction in unauthorized access while maintaining compliance with NIST 800-53. I have engineered reusable Infrastructure as Code (IaC) security modules with Terraform, significantly reducing deployment time across multiple cloud environments. My commitment to security excellence is demonstrated through my successful deployment of a custom SIEM solution that processes over 200,000 daily security events, enhancing operational efficiency and reducing false positives.

Throughout my career, I have consistently leveraged my skills in cloud security frameworks, compliance, and automation to drive impactful results. I have a strong foundation in cloud platforms such as AWS and Azure, and I am dedicated to continuous learning and improvement in the ever-evolving field of cloud security.

Experience

Work history, roles, and key accomplishments

Current

Cloud Security Engineer

Current

Tesla

Jan 2024 - Present (1 year 4 months)

Architected and implemented a Zero Trust security model, securing over 500 cloud workloads and achieving a 65% reduction in unauthorized access. Developed Infrastructure as Code security modules with Terraform and supported PKI infrastructure for Tesla's autonomous vehicle systems.

Terraform PKI DevSecOps Azure Sentinel Security Automation

Graduate Research Assistant

University of Southern Mississippi

Aug 2022 - Nov 2023 (1 year 3 months)

Conducted research on cloud security best practices and developed security monitoring scripts. Facilitated cybersecurity labs and presented secure configuration strategies aligned with NIST frameworks.

Cloud Security AWS Config Azure Security Center Python PowerShell NIST Security Monitoring Compliance Analysis Incident Response

Intern - Cloud Platforms

Tesla

May 2023 - Jul 2023 (2 months)

Optimized Kubernetes configurations for AI workloads and developed Terraform security modules compliant with ISO 26262. Created Python scripts for security vulnerability scanning, improving detection accuracy and reducing manual efforts.

Kubernetes Terraform Python Azure Sentinel Security Automation

Cloud Security Engineer

HCL

Aug 2019 - Jul 2022 (2 years 11 months)

Implemented cloud security frameworks using Microsoft Defender and AWS Security Hub, ensuring compliance with ISO 27001 and HIPAA. Developed automated IAM remediation workflows and led migration to cloud-native security solutions.

Microsoft Defender AWS Security Terraform IAM Remediation ISO 27001 HIPAA Cloud Security Security Monitoring Threat Detection Splunk

Junior Cloud Engineer

NTPC

Feb 2018 - Jul 2019 (1 year 5 months)

Managed hybrid infrastructure and implemented security hardening based on CIS benchmarks. Automated TLS certificate management and implemented DDoS protections, ensuring high availability and security.

Infrastructure Management Linux Windows Server DDoS Protection RBAC Automation

Education

Degrees, certifications, and relevant coursework

University of Southern Mississippi

Master of Science, Computer Science

2021 - 2023

Activities and societies: Conducted research on cloud security, developed security monitoring scripts, and facilitated hands-on cybersecurity labs for students.

Pursued a Master of Science in Computer Science, focusing on advanced topics in cloud security, compliance frameworks, and security automation. Engaged in research on cloud security configuration best practices and presented findings at university symposiums.