PROFILE SUMMARY
Cloud Security Engineer with 9+ years in cloud security across GCP, AWS, and Azure, I specialize in MVC environment design, AD user synchronization with Google Cloud Identity, MFA implementation, and Google Workspace.
PROFESSIONAL EXPERIENCE
Lead Cloud Security Architect
Airtel | Oct 2023 - May 2024- Designed and implemented secure Azure and GCP cloud infrastructures to protect data and mitigate risks for internal clients and applications.
- Developed and enforced security policies, conducted audits, and stayed informed about emerging threats.
- Integrated security measures into cloud solutions and designed landing zones for internal Airtel applications.
- Created end-to-end network flows to ensure secure data transmission and access.
- Managed Google Foundation architecture setups, including technical design documents and VPC configurations.
- Synchronized Active Directory (AD) users and groups between on-premises and Azure environments.
- Oversaw GCP services such as VPC Service Control, Cloud Armor, and Secret Manager.
- Implemented security best practices to safeguard cloud environments and data assets.
Assistant Manager / Cloud Security
KPMG | Aug 2022 - Oct 2023- Designed and implemented client solutions, emphasizing adherence to security guidelines.
- Utilized GCP native services and Terraform Infrastructure as Code (IAC) for deployment automation.
- Created MVC (Model-View-Controller) environments with landing zones for structured application deployment.
- Set up Google Foundation architecture to establish a robust cloud framework.
- Prepared technical design documents to guide implementation processes.
- Managed shared VPC configurations to ensure secure network communication.
- Synchronized Active Directory (AD) users from on-premises environments to GCP.
- Ensured compliance with standards such as CIS (Center for Internet Security), PCI DSS (Payment Card Industry Data Security Standard), and NIST ISO (National Institute of Standards and Technology International Organization for Standardization).
Cloud Security Consultant
Infosys | May 2021 - Aug 2022- Implemented MVC environments with Landing Zones and Consumer Data Platform on GCP.
- Conducted setup of Google Foundation architecture.
- Managed AD user synchronization and Authentication/SSO via OneLogin.
- Implemented MFA (Multi-Factor Authentication) for Super Admin users.
- Integrated Azure AD for centralized user and group management and SSO (Single Sign-On).
- Ensured compliance with CIS, PCI-DSS, and NIST ISO standards.
- Handled IAM tasks including policy definition, role assignments, and custom roles.
- Configured VPC firewall rules to secure network traffic.
- Set up log forwarding to Rapid 7 SIEM (Security Information and Event Management).
- Managed GCP services such as VPC Service Control, Cloud KMS (Key Management Service), and Secret Manager.
Cloud Security / Network Administration
Various projects | Nov 2014 - Apr 2021- Designed MVC environments and established Consumer Data Platforms on GCP.
- Conducted Google Foundation architecture setup.
- Synchronized AD users from On-Premises Active Directory to GCP.
- Implemented authentication and SSO (Single Sign-On) solutions.
- Integrated Azure AD for centralized user and group management.
- Managed IAM (Identity and Access Management) tasks.
- Configured firewall rules within GCP for network security.
- Set up log forwarding to Rapid 7 SIEM (Security Information and Event Management) using GCP services.
- Possess in-depth knowledge of GCP services including Google Monitoring, VPC (Virtual Private Cloud), Cloud CDN (Content Delivery Network), and instance management.
- Familiar with AWS services, utilizing IAM, Configuration, CloudTrail, and GuardDuty for enhanced security measures.
Akhilesh Sharma
Cloud Security Engineer
Experience: 9 Years
TECHNICAL SKILLS
Cloud Security GCP AWS Azure Google Security Command Center Cloud Armor Terraform AWS Network Firewall Azure Active Directory IAC IAMEDUCATION
Bachelors in technology (Manav Rachana International University) - 2014
CERTIFICATIONS
- AWS Certified Solution Architect Associate
- AWS Certified Security Specialist
- Google Associate Cloud Engineer
- Google Professional Security Enginee
- Azure Security Engineer Associate
- SC-900 Microsoft Security, Compliance, Identity
