Executive snapshot
- Experience: 20+ Jahre
- Seniority: Experte
- Work mode: Nicht angegeben
- Availability: Nach Absprache
- Region: Köln
- Focus: Cloud Security, DevSecOps, Enterprise Architecture, Risk Management
At a glance
Profile ID
DP-320199
Role
Cloud Security Architect, DevSecOps Engineer, Security Engineer, IT Security Manager
Seniority
Experte
Experience
20+ Jahre
Work mode
Nicht angegeben
Availability
Nach Absprache
Region
Köln
Engagement models
Festanstellung
Indicative rate
Nach Absprache
Short profile
Experienced Solution Architect SecOps with over 20 years of expertise in Cloud Security, DevSecOps, Enterprise Architecture, and Risk Management. Specialized in designing secure, scalable solutions in Azure and AWS, compliant with standards such as SOX, NIST, and PCI DSS. Extensive experience in Security Engineering, Vulnerability Management, and integrating security into CI/CD pipelines. Drives DevSecOps transformations and automates cloud and security operations. A video introduction is already available.
Focus (domains)
Cloud SecurityDevSecOpsEnterprise ArchitectureRisk ManagementIT SecuritySoftware DevelopmentSoftwareTestingsecurityLeadershipManagement
Core skills
SIEM IntegrationCloud GovernanceNetwork SecurityIncident ResponseSecurity AuditingWAF ConfigurationThreat ModellingArchitecture ReviewsZero Trust IAM HardeningVulnerability ManagementSAST/DAST/SCA GatingAutomated SOAR TriageThird-Party Risk Management (TPRM)PCI DSS ComplianceFunctional Cyber Risk AssessmentsCI/CD Pipeline IntegrationContainer Security (Docker/K8s)Scrum MasterKanban LeadershipSoftwareTestingsecurityLeadershipManagementCertified Implementation Specialist Certified ScrumMaster (CSM) ITIL Certified Configured components such as BPMCertified Microsoft Certified: Azure AI Engineer Associate Microsoft Certified: Azure Solutions Architect Expert Microsoft CertifCertified: Azure Administrator Associate Microsoft Azure Fundamentals (AZ-900) Oracle Database 12C certified Oracle WebLogic ServJenkinsDockerKubernetesScrumKanbanCybersecurity / SecurityConsulting / Stakeholder / Leadership
Tools & technologies
Microsoft AzureAWSWeblogicWebsphereSOAJenkinsGITIBM app scanTerraformApacheIISDockerKubernetesSOARScrumKanbanSoftwareTestingsecurity
Track record & project highlights
Responsibility for GRC and internal consulting, including IT security control tests, internal audit management, and regulatory mapping (DPDP, GDPR, NIST). Execution of Security Engineering, threat modeling, architecture reviews, and Zero Trust IAM hardening. Management of vulnerabilities, SAST/DAST/SCA gating, and automated SOAR triage. Ensuring PCI DSS compliance and conducting functional cyber risk assessments. Design of Azure/AWS Security Architectures and integration of security into CI/CD pipelines, as well as Container Security (Docker/K8s).