Kamran A.

I work with organizations to secure and manage production cloud environments across Microsoft Azure and AWS. My focus is on building structured, secure, and well-governed platforms that are ready for real-world operations and compliance requirements. In Azure, I handle everything from tenant configuration and subscription structure to identity security and network design. I implement RBAC with proper least-privilege access, configure Entra ID (Azure AD), MFA, Conditional Access, and Privileged Identity Management. I deploy and tune Microsoft Sentinel, configure Defender for Cloud, enforce governance through Azure Policy, and set up monitoring with Azure Monitor and Log Analytics. I design secure VNet architectures with subnet segmentation, NSGs, Azure Firewall, DDoS protection, Key Vault integration, and disk encryption. Backup strategies, disaster recovery planning, and infrastructure automation using ARM, Bicep, and Terraform are also part of my day-to-day work. On AWS, I design secure VPC environments with proper subnet routing, NAT gateways, internet gateways, and security groups. I implement IAM users, roles, policies, and cross-account access following least-privilege principles. I configure CloudTrail, GuardDuty, CloudWatch logging, and centralized monitoring. My experience includes EC2, RDS, load balancers, SSL configuration, Auto Scaling, S3, Lambda, ECS, and infrastructure automation using Terraform and CloudFormation. I also have hands-on experience working with SIEM platforms including Microsoft Sentinel, IBM QRadar, ArcSight, Elastic, and Wazuh, along with Microsoft XDR technologies for monitoring and investigating advanced threats. My approach is straightforward and security-focused: strong identity controls, proper network segmentation, continuous monitoring, and infrastructure built to be maintainable over time. If you need someone who understands both Azure and AWS in practical production scenarios, I can help you design, secure, and optimize your cloud environment properly.