Nicholas S.

I'm a Senior Cloud Security Engineer with 3+ years of professional experience in cloud security, infrastructure architecture, cloud migration, disaster recovery, network security, and cybersecurity operations. I specialize in Microsoft Azure and have additional experience with AWS, Google Cloud (GCP), and Huawei Cloud. My work spans enterprise cloud environments, hybrid infrastructure, virtualization, security monitoring, and infrastructure automation. I help businesses build secure, reliable cloud environments, migrate workloads, strengthen security controls, troubleshoot infrastructure issues, and implement practical security and disaster recovery solutions. What I Can Help You With ☁️ Cloud Security & Architecture - Azure Landing Zones, management groups, subscriptions, and cloud governance - Microsoft Defender for Cloud, Azure Policy, and security posture management - Cloud infrastructure architecture, security hardening, and access controls - Microsoft Entra ID, identity security, and hybrid infrastructure - Multi-cloud infrastructure and security support across Azure, AWS, GCP, and Huawei Cloud 🌐 Cloud Networking & Infrastructure - Azure Firewall, Application Gateway/WAF, Azure Front Door, and NSGs - Azure VPN Gateway, Site-to-Site/Point-to-Site VPNs, routing, and DNS - Hub-and-spoke network architectures and secure hybrid connectivity - Network troubleshooting, firewall configuration, and application connectivity 🔄 Cloud Migration, Virtualization & Disaster Recovery - VMware and Hyper-V workload migration and disaster recovery with Azure - Azure Site Recovery, Azure Backup, recovery planning, and failover testing - Azure Local and hybrid infrastructure solutions - Azure Virtual Desktop (AVD), RemoteApp, FSLogix, and virtual desktop infrastructure - Virtual machine deployments, workload sizing, and migration troubleshooting 🛡️ Cybersecurity & Security Operations - Microsoft Sentinel, SIEM, KQL, and Log Analytics - Security monitoring, incident investigation, and detection engineering - Vulnerability Assessment and Penetration Testing (VAPT) - Security assessments, vulnerability remediation, and infrastructure hardening - Cloud security reviews, risk identification, and security recommendations ⚙️ Automation, DevOps & Infrastructure as Code - Terraform, Azure DevOps, GitHub Actions, and Infrastructure as Code - PowerShell, Bash, Python, and Azure CLI - Docker, Linux, container security, and deployment automation - n8n self-hosting, workflow automation, and integrations - Cloud monitoring, operational troubleshooting, and infrastructure optimization Selected Professional Experience My project work includes enterprise Azure Landing Zone deployments, Azure Firewall and hybrid VPN architectures, Microsoft Sentinel and Log Analytics environments, Azure Virtual Desktop deployments, VMware/Hyper-V migration and disaster recovery, Terraform-managed infrastructure, AKS log analysis, Azure SQL backup troubleshooting, and cloud security assessments. I also have experience troubleshooting production infrastructure, investigating security incidents, implementing network security controls, and preparing technical architecture and operational documentation. Professional Certifications - Microsoft Certified: Cloud and AI Security Engineer Associate (SC-500) - Microsoft Certified: Azure Network Engineer Associate (AZ-700) - Microsoft Certified: Azure AI Engineer Associate (AI-102) - ISC2 Certified in Cybersecurity (CC) - INE Junior Penetration Tester (eJPT) Why Work With Me? I approach cloud engineering with security, reliability, and maintainability in mind. I focus on understanding the problem, identifying the right technical approach, implementing practical solutions, and communicating clearly throughout the project. Whether you're planning a cloud migration, securing an existing environment, implementing disaster recovery, deploying Azure infrastructure, or troubleshooting a complex issue, I can help with the architecture, implementation, and technical documentation.