Designing, implementing, and auditing secure cloud architectures on AWS. Bridging the gap between robust infrastructure-as-code deployments and rigorous regulatory compliance frameworks.
A production-grade, audit-ready security baseline engineered on AWS, following industry frameworks like CIS Benchmarks and NIST SP 800-53.
Includes automated control tracking, multi-region CloudTrail audit logging, S3 encryption enforcement, and version-controlled compliance documentation.
View GitHub RepositoryInfrastructure as Code (IaC) deployment of a secure, multi-tier AWS VPC architecture enforcing network isolation and strict least-privilege security controls.
Modular Terraform architecture provisioning public and private subnets, NAT Gateways, Route Tables, and isolated security perimeters ready for enterprise deployment.
View GitHub RepositoryGovernance, Risk, and Compliance (GRC) assessment of a hypothetical AWS environment for Northstar Workflow, Inc., a fictional SaaS provider.
Developed a structured security risk assessment identifying potential database exposure and sensitive information in application logs. Includes a risk register, NIST control mapping, assessment findings, remediation plan, and executive summary.
Project Status: Documentation complete; operational validation pending.
Note: Northstar Workflow is fictional. The AWS environment and identified risks are hypothetical; no live environment or actual security incident is represented.
View GitHub RepositoryDesigning resilient, high-performing, secure, and cost-optimized architectures on AWS.
Overall understanding of AWS Cloud platform, core services, security model, and cloud economics.
Auditing and managing Information Security Management Systems (ISMS) and compliance readiness.
Control mapping, policy development, risk registers, audit readiness, and hands-on GRC capstone execution.
Validating risk management and core functions: Govern, Identify, Protect, Detect, Respond, Recover.
Foundational principles of Information Security Governance and ISO 27001 ISMS standards.
Core baseline security skills, threat management, risk mitigation, and enterprise security architecture.
Infrastructure as Code (IaC), AWS provisioning, state management, modules, and cloud governance.
AWS (IAM, VPC, S3, CloudFront, Route 53, CloudTrail, Security Groups)
Terraform, Git, GitHub CLI, AWS CLI, VS Code Automation
NIST CSF 2.0, NIST SP 800-53, ISO/IEC 27001, CIS Benchmarks