SURYASECURITY ARCHITECTURE

Cloud Security Engineering

Surya Naga Sesank M

Security Architecture DevSecOps

Senior cloud security engineering with 8+ years in cybersecurity, across AWS, Microsoft Azure, and Google Cloud. Focused on Terraform, IAM, Zero Trust, detection, incident response, security automation, and governance.

AWS Microsoft Azure Google Cloud Terraform
AWS IAM Microsoft Entra ID Zero Trust Workload Identity

View Project RecordsGitHub Profile

  • Signal 01

    8+ Years Cybersecurity

  • Signal 02

    AWS — Certified Solutions Architect – Associate

  • Signal 03

    Microsoft Azure — Security Engineering / Entra ID / Azure RBAC

  • Signal 04

    Google Cloud — Professional Cloud Architect

  • Signal 05

    AI Security — GenAI Cybersecurity: OWASP & MITRE ATLAS

  • Signal 06

    Governance — ISO 27001 Lead Auditor

01

Architecture

Security architecture and governance

02

Infrastructure

Terraform and Infrastructure as Code

03

Identity

AWS IAM / Microsoft Entra ID / Zero Trust / Workload Identity

04

Response

Detection and incident response engineering

Featured engineering record

Current security engineering focus

Status: In Progress

FEATURED PROJECT / Healthcare security engineering

HIPAA/HITRUST-Aligned Healthcare Security Engineering Platform

In-progress HIPAA/HITRUST-aligned security engineering for a synthetic healthcare workload.

This is a technical engineering exercise using synthetic healthcare data. It is not a compliance claim, certification, attestation, or production healthcare system.

View Case StudyGitHub Repository

Engineering evidence

Objective
Implement security controls for a synthetic healthcare workload aligned to selected HIPAA and HITRUST control objectives.
Delivery
Terraform with AWS CLI and console validation
Validation record
Validation, remediation, and teardown records

Controls in scope

  • Network segmentation
  • Least privilege
  • VPC Flow Logs
  • CloudWatch

Engineering projects

AWS, GCP, Azure, and AI security engineering

PlatformProjectCase StudyGitHub RepoWhat It Does
AWSAWS Multi-Account Zero-Trust Architecture LabCase StudyGitHub RepoBuilds and validates a multi-account AWS landing-zone lab with Organizations, SCPs, IAM controls, CloudTrail, GuardDuty, and Terraform.
AWS / GCPEnterprise Multi-Cloud WAF Evaluation PlatformCase StudyGitHub RepoDeploys equivalent AWS WAF and Google Cloud Armor environments with Terraform for controlled cross-cloud security validation.
AWS / GCP scopeHIPAA/HITRUST-Aligned Healthcare Security Engineering PlatformCase StudyGitHub RepoImplements HIPAA/HITRUST-aligned AWS-first security controls for a synthetic healthcare workload, with Google Cloud control-equivalent scope.
AzureAZ-01 — Azure Workload Identity Attack & Secretless Federation LabCase StudyGitHub RepoValidates an Azure workload-identity attack path and remediates it with GitHub OIDC federation and least-privilege Azure RBAC.
AzureAZ-02 — Azure Cloud Security Architecture Review & Controlled Remediation LabCase StudyGitHub RepoAssesses Azure governance, identity, private access, logging, and workload controls through controlled remediation and residual-risk review.
AI / AWSAI-Powered Polycloud Security Incident Response PlatformCase StudyGitHub RepoBuilds an AWS-first event-driven incident-response architecture; Terraform implementation is in progress and Amazon Bedrock integration remains planned.

Security Labs & Project Series

Working notes from hands-on security labs

A lower-hierarchy series of public engineering write-ups. These records complement, rather than replace, the four flagship case studies above.

  1. LAB 01

    Hashnode / Jan 2026

    🔐 Project 1: Building a Secure Cloud Baseline in AWS (Before Things Break)

    Read article

  2. LAB 02

    Hashnode / Jan 2026

    🔐 Project 2: Security Design Trade-offs in AWS (Where Convenience Starts to Win)

    Read article

  3. LAB 03

    Hashnode / Jan 2026

    🔐 Project 3: Implementing and Testing Security Controls in a Real Cloud Environment

    Read article

  4. LAB 04

    Hashnode / Jan 2026

    🔐 Project 4: Eliminating SSH with AWS Systems Manager — IAM-Controlled, Auditable EC2 Access

    Read article

  5. LAB 05

    Hashnode / Feb 2026

    🔐 Project 5: Zero-Trust EC2 Access in AWS Using IAM, SSM, CloudTrail, and GuardDuty

    Read article

  6. LAB 06

    Hashnode / Feb 2026

    🔐 Project 6: Implementing Just-In-Time (JIT) SSH Access for EC2 on AWS

    Read article

  7. LAB 07

    Hashnode / Feb 2026

    🔐Project 7: Automated Threat Containment in AWS – Building a Cloud-Native SOAR Workflow

    Read article
View All Engineering Writing

Engineering evidence

Senior cloud security engineering, designed to be reviewed.

With 8+ years in cybersecurity, the work centers on cloud security architecture, infrastructure automation, identity, governance, detection, and incident-response engineering. Supporting records emphasize practical controls, validation, and clear limits.

Engineering scope

  • AWS / Microsoft Azure / Google Cloud
  • Terraform / Infrastructure as Code
  • AWS IAM / Microsoft Entra ID / Zero Trust
  • Detection / Incident Response
  • DevSecOps / Security Automation
  • Governance / Security Assurance

Framework familiarity includes NIST, ISO 27001, HIPAA/HITRUST-aligned engineering, PCI DSS, and SOC 2. This familiarity describes engineering context only and does not imply certification, compliance, or attestation.

Evidence-oriented method

  1. 01

    Model

    Define the control objective, cloud boundary, and assumptions before implementation.

  2. 02

    Implement

    Use infrastructure-as-code and versioned artifacts where the project supports them.

  3. 03

    Validate

    Test controls, record results, and distinguish confirmed evidence from planned work.

  4. 04

    Explain

    Document architecture, limitations, and remediation paths so the work can be reviewed.

Professional Credentials

Certifications & Credentials

Industry-recognized certifications validating expertise across Cloud Security, Cybersecurity, Architecture, Governance and Enterprise Security Practices.

Featured
ISO 27001 Lead Auditor
Lead Auditor

ISO 27001 Lead Auditor

AWS Certified Solutions Architect – Associate
AWS Certification

AWS Certified Solutions Architect – Associate

EC-Council Certified Ethical Hacker (CEH)
Security Certification

EC-Council Certified Ethical Hacker (CEH)

AWS Well-Architected Foundations
AWS Training

AWS Well-Architected Foundations

View All Certifications
Contact

Let's Build Secure Cloud Solutions Together

I'm always interested in discussing Cloud Security, Security Architecture, DevSecOps and Infrastructure as Code opportunities.

Email MeGitHubLinkedIn