Mihai V.

I design and build production-grade security systems for companies that need to secure cloud infrastructure, pass audits, and operate in regulated environments. Most teams don’t have a security tool problem. They have an architecture, integration, and execution problem. That’s where I come in. What I Do I help startups and enterprise teams move from: ❌ fragmented tools and partial controls ❌ audit delays and failing security reviews ❌ reactive fixes and security debt → to ✅ engineered, scalable security architecture ✅ audit-ready, continuously compliant environments ✅ automated, integrated security operations Core Expertise Cloud Security & Cryptography • Multi-cloud security architecture (AWS, Azure, GCP) • TLS PKI systems with automated certificate lifecycle (IaC + CI/CD) • Encryption architecture (CMEK, KMS, data masking, data protection) • Cryptographic hardening aligned with FIPS and modern standards • DNS security, network isolation, and zero-trust patterns Identity & Access Management • SSO (SAML, OIDC), enterprise identity federation • RBAC and least-privilege system design at scale • SCIM provisioning and identity lifecycle automation • Integration with enterprise IdPs (PingFederate, Azure AD, Okta) • Cross-account and multi-environment access control Compliance & Audit Readiness • SOC 2, ISO 27001, PCI DSS, HIPAA, FedRAMP-aligned environments • End-to-end delivery: gap assessment → implementation → audit support • Control design, remediation, and evidence automation (Vanta, Drata, custom pipelines) • Continuous compliance monitoring vs point-in-time audits • Closing audit findings fast (not just identifying them) Security Engineering & Incident Response • CI/CD security (SAST, DAST, IaC scanning, secret management) • Vulnerability management with automated remediation workflows • Cloud misconfiguration detection (CIS benchmarks, runtime analysis) • Secure system design across infrastructure and application layers • Incident response, forensics support, and system hardening AI-Driven Security I don’t just integrate tools — I design security platforms. I have built and architected multi-agent AI-driven cybersecurity systems combining: • Cloud security analysis (AWS integrations, IAM analysis, misconfiguration detection) • Offensive security (recon, exploitation, privilege escalation simulation) • Vulnerability management (SAST, DAST, fuzzing, CI/CD integration) • SOC automation (SIEM/SOAR integrations, alert enrichment, playbooks) • Forensics and incident investigation workflows • Compliance reporting mapped to frameworks (SOC 2, ISO 27001, PCI, HIPAA) Key capabilities: • Multi-agent orchestration and communication • Automated remediation workflows • MITRE ATT&CK mapping and executive reporting • API-driven integrations across security tooling ecosystem • Role-based access for security, DevOps, and compliance teams This enables: → Continuous security instead of periodic assessments → 80% reduction in manual security effort → Faster audit readiness and real-time visibility How I Work • Engineering-first — I build and implement, not just advise • Work directly in production systems (cloud, identity, pipelines) • Design for real audit constraints, not theoretical compliance • Fast execution, clear communication, and ownership Typical Clients • SaaS companies preparing for SOC 2 / ISO 27001 / HIPAA • Cloud-native platforms handling sensitive or regulated data • Startups entering enterprise sales with security blockers • Organizations with fragmented security tools that don’t work together Important I’m not a fit for checklist-based security or surface-level audits. If you need: • real security architecture • working implementations • systems that pass audits and hold up in production - we’ll work well together.