Cloud Security & DevSecOps Engineer

BERNARD MOLUA

SENIOR CLOUD SECURITY ENGINEER DEVSECOPS ENGINEER CLOUD & AI SECURITY AWS KUBERNETES

Frederick, MD +1-240-***-**** **********************@*****.***

linkedin.com/in/bernard-molua-217b05412/

PROFESSIONAL SUMMARY

Senior Cloud Security and DevSecOps Engineer with 13+ years of experience across AWS, Kubernetes, Terraform, IAM, CI/CD, cloud security, and security automation. Experienced in securing multi-account AWS environments, hardening EKS, implementing least-privilege access, managing vulnerabilities, and integrating security controls into CI/CD pipelines. Strong understanding of AI/ML security, MLOps security, AI workload protection, model and data security, AI governance, and secure ML deployments. Hands-on with Jenkins, GitHub Actions, Argo CD, Docker, Trivy, Snyk, SonarQube, OPA Gatekeeper, Splunk, Prometheus, and Grafana, with experience supporting CIS, NIST 800-53, FedRAMP, SOC 2, HIPAA, and PCI DSS requirements.

CORE SKILLS

Cloud Security, AWS Security, DevSecOps, AI Security, AI/ML Security, ML Security, Generative AI Security, MLOps Security, AI Governance, AWS Multi-Account Security, IAM, Least Privilege, Zero Trust, Kubernetes Security, Amazon EKS, Container Security, CI/CD Security, Terraform, Infrastructure as Code, GitOps, Vulnerability Management, Security Automation, Policy as Code, OPA Gatekeeper, Security Hardening, Threat Detection, Incident Response, Security Monitoring, Secrets Management, Cloud Governance, AI/ML Workload Security, Model Security, Data Security, AI Risk Management, Linux Security, Network Security, Compliance

TECHNICAL SKILLS

AWS & Cloud: AWS, EC2, S3, VPC, IAM, AWS Organizations, SCPs, Lambda, CloudTrail, GuardDuty, Security Hub, AWS Config, Inspector, WAF, Shield, Route 53, KMS, ECS, EKS, RDS, CloudWatch, AI/ML Cloud Workloads, Machine Learning Infrastructure

DevOps & CI/CD: Jenkins, GitHub Actions, GitLab CI/CD, Azure DevOps, Argo CD, GitOps, Helm, Docker, CI/CD Pipeline Security, Release Automation, MLOps, ML CI/CD, Secure ML Pipelines, AI/ML Deployment Security

Infrastructure & Automation: Terraform, CloudFormation, Ansible, Packer, Infrastructure as Code, Python, Bash, PowerShell, AI/ML Infrastructure Automation

Kubernetes & Containers: Kubernetes, Amazon EKS, Docker, Helm, RBAC, OPA Gatekeeper, Network Policies, Pod Security Standards, Service Accounts, Container Security, Secrets Management, AI/ML Workloads, ML Containers, AI Workload Isolation

AI, ML & LLM Security: Artificial Intelligence (AI), Machine Learning (ML), Large Language Models (LLMs), Generative AI Security, AI/ML Security, LLM Security, AI Application Security, Model Security, Model Risk Management, Prompt Injection Protection, AI Data Security, Model Access Controls, AI/ML Threat Modeling, Secure AI/ML Development, AI Governance, Responsible AI

Security: Vulnerability Management, Security Hardening, Security Automation, Policy as Code, CSPM, IAM Governance, Zero Trust, Least Privilege, MFA, Encryption, Threat Detection, Incident Response, AI Security, ML Security, AI Risk Management, Model Security, Data Protection, AI Governance

Security Tools: Trivy, Snyk, SonarQube, Vulnerability Scanning, Dependency Scanning, Container Scanning, IaC Security, AI/ML Application Security, Model/Dependency Security

Monitoring & Logging: Splunk, ELK Stack, Prometheus, Grafana, Datadog, CloudWatch, Dynatrace, OpenTelemetry, AI/ML Workload Monitoring, Security Monitoring

Compliance: CIS Benchmarks, NIST 800-53, FedRAMP, SOC 2, HIPAA, PCI DSS, AI Governance, AI Risk & Security Controls

Systems & Networking: Linux, RHEL, Ubuntu, CentOS, Windows Server, TCP/IP, DNS, VPN, Firewalls, Load Balancing, NGINX

Databases & Storage: MySQL, PostgreSQL, MongoDB, DynamoDB, Amazon RDS, Amazon S3, AI/ML Data Storage, Data Protection

PROFESSIONAL EXPERIENCE

BROADRIDGE FINANCIAL

Senior Cloud Security Engineer / DevSecOps Engineer Feb 2022 - Present

•Work with infrastructure, application, platform, AI/ML, data, and compliance teams to address cloud security issues and improve security across AWS environments.

•Manage AWS security controls across multiple accounts using AWS Organizations, IAM, Service Control Policies, GuardDuty, Security Hub, CloudTrail, and AWS Config.

•Review security findings related to IAM permissions, exposed resources, network settings, logging, encryption, and cloud misconfigurations, including environments supporting AI/ML and data-intensive workloads, and work with teams to fix them.

•Set up and review IAM roles and permissions using least-privilege principles for users, applications, workloads, AI/ML services, and service accounts.

•Build and maintain CI/CD pipelines using Jenkins, GitHub Actions, Terraform, Kubernetes, and Argo CD, supporting secure application and ML workload deployments.

•Add security checks to CI/CD pipelines using Trivy, Snyk, and SonarQube to find container, dependency, code, and infrastructure issues before deployment.

•Secure Amazon EKS clusters using Kubernetes RBAC, OPA Gatekeeper, Network Policies, Pod Security Standards, service accounts, and secrets-management practices for application and AI/ML workloads.

•Write and maintain Terraform and CloudFormation configurations used to build AWS infrastructure and apply consistent security settings across cloud and AI/ML environments.

•Create reusable infrastructure and security configurations that development, platform, and AI/ML engineering teams can use when deploying AWS resources.

•Monitor AWS and Kubernetes environments using Splunk, CloudWatch, Prometheus, and Grafana and investigate security and infrastructure alerts across cloud, container, and AI/ML workloads.

•Work with application, infrastructure, data, and AI/ML teams to review vulnerability findings, determine the cause, and track issues through remediation.

•Harden cloud resources, Linux systems, and Kubernetes environments using CIS-based security practices, including environments supporting machine learning workloads.

•Support security and compliance work related to CIS Benchmarks, NIST 800-53, SOC 2, and FedRAMP, including security and governance considerations for AI/ML workloads.

•Take part in security investigations, troubleshooting, root-cause analysis, and follow-up work after security or infrastructure incidents.

CUBIC DEFENCE

Cloud Security Engineer / DevOps Engineer Apr 2016 - Feb 2022

•Built and supported AWS environments across more than 20 cloud environments using Terraform and CloudFormation, including infrastructure used for data and AI/ML workloads.

•Set up common AWS networking, IAM, logging, and security configurations so new environments could be deployed with the same baseline settings.

•Built and maintained CI/CD pipelines using Jenkins, GitHub Actions, Docker, and Kubernetes for application and infrastructure deployments, with practices applicable to MLOps and ML workload delivery.

•Added SonarQube, Trivy, and Snyk to development pipelines to identify code, dependency, container, and infrastructure vulnerabilities before release.

•Worked with Kubernetes and EKS environments, including RBAC, Network Policies, secure ingress, pod security, and workload isolation for application and AI/ML workloads.

•Used AWS WAF, Shield, GuardDuty, IAM, KMS, and CloudWatch to protect applications and monitor security activity.

•Managed IAM roles and policies using least-privilege principles and supported MFA and encryption requirements for cloud, data, and AI/ML environments.

•Used Terraform and Ansible to provision and configure infrastructure across production and disaster recovery environments.

•Set up KMS encryption and S3 lifecycle policies for applications that handled sensitive and regulated information, including data protection considerations for analytics and ML workloads.

•Supported HIPAA-related security requirements by working on access controls, encryption, logging, vulnerability remediation, and system hardening.

•Built monitoring and logging solutions using ELK Stack, Prometheus, Grafana, CloudWatch, and Datadog.

•Investigated security and infrastructure alerts and worked with engineering and operations teams to resolve problems.

•Hardened Linux servers and Kubernetes environments based on CIS Benchmarks and fixed identified security weaknesses.

•Used Bash, Python, Terraform, and Ansible to automate repetitive infrastructure and operational work, supporting cloud and MLOps infrastructure automation.

•Supported production and disaster recovery environments through monitoring, troubleshooting, deployments, and security maintenance.

FIDELITY INVESTMENTS

AWS Cloud Engineer / DevOps Engineer Mar 2014 - Apr 2016

•Supported AWS infrastructure and application environments, handling cloud operations, deployments, monitoring, and troubleshooting, including cloud environments supporting data and emerging AI/ML workloads.

•Built Jenkins, Docker, and Terraform-based deployment pipelines to make application releases more consistent and support repeatable ML/application deployment practices.

•Used Infrastructure as Code to provision AWS resources and reduce manual configuration work.

•Supported containerized applications running on Kubernetes and Amazon ECS, including container-based workloads applicable to AI/ML environments.

•Configured AWS VPCs, subnets, route tables, NAT gateways, security groups, and load balancers.

•Managed IAM roles and permissions using role-based access, MFA, and least-privilege practices.

•Built CloudWatch, Splunk, and Grafana dashboards and alerts to monitor infrastructure and application environments.

•Used Bash, Python, and Ansible to automate regular infrastructure and support tasks.

•Helped troubleshoot production issues and supported day-to-day AWS operations.

FIDELITY INVESTMENTS

Systems Engineer / Cloud Support Engineer Jan 2013 - Mar 2014

•Supported Linux and AWS environments used by enterprise applications, including monitoring, troubleshooting, patching, and system maintenance.

•Used Bash and Ansible to automate server provisioning and configuration tasks.

•Configured AWS VPCs, route tables, NAT gateways, security groups, and load balancers.

•Performed Linux patching, vulnerability remediation, and basic security hardening.

•Monitored system performance and availability and helped resolve infrastructure issues.

•Supported daily cloud and server operations while following security and configuration standards.

KEY ACHIEVEMENTS

•Reduced enterprise security incidents by up to 75% through proactive threat detection, CSPM tooling, control automation, and improved remediation workflows across cloud and AI/ML-capable environments.

•Achieved and sustained 99%+ compliance across HIPAA and SOC 2 using continuous compliance monitoring, evidence automation, and control ownership tracking, with experience applicable to AI governance and security controls.

•Led and mentored 15+ engineers across cloud security, DevSecOps, threat modeling, policy-as-code, AI/ML security considerations, and security architecture initiatives.

•Generated $2M+ annual cost savings through automation, IaC optimization, cloud governance improvements, and reduced manual security operations effort.

•Delivered executive-level and client-facing presentations on cloud security, DevSecOps, Zero Trust strategies, AI/ML security and governance considerations, security posture, and compliance readiness.

EDUCATION

•Master of Science - Cybersecurity & Information Assurance

•Bachelor of Science - Computer Engineering - Presbyterian University of Cameroon

CERTIFICATIONS

•Microsoft Certified: Azure Security Engineer Associate

•HashiCorp Certified: Terraform Associate

•AWS Certified Cloud Practitioner

•Certified ScrumMaster (CSM)

•CompTIA Certification

Contact this candidate