Designs, deploys, and operates enterprise DLP and SASE capabilities, including data classification, inspection policies, secure access controls, traffic steering, TLS inspection, and legacy VPN or proxy migrations. Investigates incidents, tunes controls, integrates security platforms, manages vulnerabilities, monitors service health, and develops automation. Partners with IT, networking, legal, privacy, compliance, and application teams to improve protection, resilience, performance, and risk communication.

Lead cloud security strategy and hands-on execution across AWS environments. Own CNAPP and CSPM capabilities, improve IAM and container security, build infrastructure-as-code guardrails, conduct architecture reviews and threat modeling, support detection and incident response, and drive remediation programs. Establish a multi-year cloud security roadmap, influence engineering priorities, mentor teammates, and partner with platform, infrastructure, SOC, and product engineering teams.