Lead Security Engineer | Cloud Security | DevSecOps | Security Automation
I build secure cloud platforms and practical security automation across AWS, Google Cloud, and Azure. My work brings cloud security, identity governance, endpoint controls, and developer workflows together so security controls scale with engineering teams.
- Lead Security Engineer at TripleLift, promoted from Security Engineer in May 2026.
- 13+ years in infrastructure, cloud engineering, DevSecOps, and security, including 8 years at Ollion and earlier Linux operations experience.
- Based in Pune, India.
- I enjoy turning security and compliance requirements into repeatable platform capabilities, with clear ownership and less manual work.
| Area | Tools and experience |
|---|---|
| Cloud security | AWS Security Hub, AWS Config, GuardDuty, IAM, IAM Identity Center, GCP Security Command Center, Microsoft Defender for Cloud |
| Cloud platforms | AWS, Google Cloud, Azure, multi-account architecture, landing zones, Linux, cloud migration and modernization |
| Identity governance | Okta, Azure AD, Google Workspace, Microsoft 365, SAML, lifecycle automation, access reviews, CyberArk |
| Security operations | Rapid7, ELK, Azure Sentinel, endpoint inventory, vulnerability management, detection and response workflows |
| Infrastructure as code | Terraform, CloudFormation, GitHub Actions, Jenkins, GitLab |
| Automation | Python, Bash, OIDC-based workflows, Slack integrations, reporting and evidence collection |
| Leadership | Technical team leadership, architecture reviews, stakeholder management, compliance enablement, mentorship |
- Built an AWS security posture scoring and reporting system using AWS Config and Security Hub. It gives account owners recurring compliance visibility through Slack and Google Sheets and removes hours of manual reporting each week.
- Automated access reviews and permissions inventories across AWS, GCP, Google Workspace, and GitHub, producing audit-ready evidence and reducing manual review effort by about 90%.
- Implemented identity lifecycle workflows that reconcile Okta with AWS IAM Identity Center and GitHub, with approval gates for high-impact access changes.
- Led a six-member DevSecOps team and delivered 15+ cloud migrations and SaaS implementations across enterprise environments.
- Directed cloud hardening, posture management, and patching programs that reduced vulnerabilities by 30%.
- Standardized SOC 2 and ISO 27001 audit procedures, contributing to a 25% improvement in audit pass rates.
- Optimized more than 10 AWS accounts, reducing operating costs by 25% while improving governance and consistency.
- Built Google Workspace activity log pipelines covering 14+ applications and delivering telemetry to Rapid7 through S3.
Designed automated governance across 12+ AWS accounts using AWS Config and Security Hub, with centralized findings, standardized severity handling, and OIDC-authenticated workflows. Added AI-assisted weekly summaries for security trends and account owner notifications.
Created Okta-driven offboarding and access governance workflows spanning AWS IAM Identity Center and GitHub. Built recurring user access review reports and permissions exports to support audit evidence and reduce manual collection.
Unified endpoint inventory from CyberArk EPM, Microsoft Intune, Kandji (now Iru), and HiBob to identify coverage gaps. Automated agent upgrades, device organization, and anomaly notifications.
Led Terraform-based Google Cloud foundations and landing zones aligned with security best practices and MAS TRM taxonomy. Delivered Google Cloud migrations and an AWS microservices platform migration for a major video streaming environment.
- Lead Security Engineer, TripleLift - Jun 2024 to present
- Lead DevSecOps Engineer, Ollion - Feb 2016 to May 2024; earned four promotions over eight years
- Systems Support Engineer, Mithi Software - May 2013 to Jan 2016
AWS: Security Specialty, DevOps Engineer Professional, Solutions Architect Professional, Advanced Networking Specialty, SysOps Administrator Associate, Developer Associate, Solutions Architect Associate
Google Cloud: Professional Cloud Security Engineer, Associate Cloud Engineer, Professional Google Workspace Administrator
Microsoft: Security, Compliance, and Identity Fundamentals (SC-900)
HashiCorp: Terraform Associate (002)
- Automatically Organize Your Screenshots on Mac with launchd
- SAML2.0 and OAuth2.0 Simplified
- Bypassing paywalled webpages
- WSL2 with Windows Terminal and syncing with Mac OSX
- RDS Authentication via IAM User/Role
- Portfolio: vrnchndk.in
- Resume: resume.vrnchndk.in
- Projects: GitHub repositories