Security & Cloud Infrastructure
Architected full-stack solutions bridging AI/ML models with game engine pipelines, handling sensitive data with appropriate security controls
Established secure CI/CD pipelines using GitHub Actions with branch protection rules, required reviews, and secrets scanning
Implemented Infrastructure as Code (Terraform) with state locking and audit trails for reproducible, version-controlled deployments
Enforced AWS security best practices across the stack:
IAM: least-privilege policies, role-based access, fine-grained permission boundaries
ECS: task-level security groups, encrypted task definitions, secrets injection via SSM Parameter Store
EKS: RBAC configuration, pod security policies, encrypted etcd, network policies for micro-segmentation
ECR: image scanning for vulnerabilities, lifecycle policies, signed images
Configured VPC architecture with private subnets, NAT gateways, and security group rules to isolate environments
Set up CloudTrail, Config, and GuardDuty for continuous monitoring and compliance auditing