Kamaljit S.

If your cloud environment grew faster than your security did — IAM roles nobody's audited in a year, Terraform that's never been scanned, containers running images nobody's checked — I can fix that without slowing your team down. Here's what I can do for you: 🔐 Find out what's actually exposed. I'll audit your AWS/GCP IAM, network rules, and Terraform for misconfigurations before an attacker or an auditor does. You get a clear list of what's risky and what to fix first — not a 40-page report you'll never read. 🛡️ Catch problems before they ship. I'll wire security scanning into your CI/CD pipeline — IaC checks, container image scanning, dependency scanning — so misconfigurations get caught in a pull request, not in production. ☸️ Harden your Kubernetes. Image hardening, admission controls, runtime detection, network policies — so a compromised container can't quietly become a compromised cluster. 🔑 Fix your IAM before it becomes an incident report. Least-privilege access, service account cleanup, secrets out of code and into proper management — the unglamorous work that actually stops breaches. 📊 Give you visibility you don't have to chase. Monitoring and alerting (Prometheus, Grafana, CloudWatch) tuned to actually tell you something's wrong, not bury it in noise. ⚙️ Do it without breaking what already works. I come from production DevOps, not a security-only background — I know what it costs a team when a "fix" takes down a deploy pipeline, so I build security in a way you can actually live with. A COUPLE OF RESULTS FROM PAST WORK At one company, I was the first infrastructure hire and inherited a setup with no IAM discipline and no TLS standardization — I rebuilt it from scratch and cut incident resolution time 40% in the process. At another, tightening cloud resource and access controls cut monitored cloud waste up to 35%, while streamlining the pipeline around it cut release time 60%. WORTH KNOWING UPFRONT My depth is strongest in AWS/GCP-native security, Terraform-based IaC, and Kubernetes/container hardening. I don't currently have production experience with CloudFormation, ARM templates, Windows Server hardening, or enterprise Zero Trust platforms (ZTNA/SASE/PAM/XDR vendors like Zscaler or CyberArk). If your project needs those specifically, I'll say so upfront rather than figure it out on your dime. HOW I WORK I test, monitor, and document before I call anything done. You'll always know where things stand — no jargon dumps, no radio silence. I prefer 6+ month engagements because that's how security actually gets fixed, not patched. Tell me what you're running and where it hurts, and I'll tell you honestly what I'd do about it.