Ajit Kumar

About Ajit Kumar

Cloud Security Architect with over 14+ years of industry experience, including 8+ years specializing in cloud computing and security across AWS platform. Proven expertise in implementing cloud-native security frameworks, IAM, VPC security, CSPM tools and regulatory compliance (PCI DSS, HIPAA, CIS, NIST-CSF, ISO 27001). Adept at securing multi-account environments, building landing zones, and performing risk assessments using AWS native tools.• Cloud Platforms: AWS.• Security Services: Security Hub, GuardDuty, Config, Macie, Inspector, WAF.• Cloud Networking: VPC, Subnetting, NACLs, VPN, Transit Gateway, Direct Connect.• Identity & Access: IAM, Federation, AWS SSO, MFA, ABAC, RBAC.• Compliance: PCI DSS, HIPAA, CIS Benchmarks, NIST CSF, ISO 27001.• Monitoring/Logging: CloudTrail, CloudWatch, SIEM-Qradar, Cisco-NBAD, Sentinel-one CSPM.

Experience

1. Cyber Security Specialist (Cloud)

   Wipro

   Sep 2023 — Present · Maharashtra, IN

   Cloud Security Architecture: Designed and implemented secure cloud architectures across AWS establishing robust frameworks for workload protection, data security, and regulatory compliance.• Security Solution Design: Architected and integrated advanced security controls and tools (AWS Security Hub, GuardDuty, Inspector, Detective, KMS, WAF, DDoS Protection) to provide end-to-end threat detection, prevention, and remediation capabilities.• Identity & Access Strategy: Developed and enforced secure identity and access management models using AWS IAM, federated access, SSO integration, and least-privilege principles, reducing risks associated with unauthorized access.• Governance & Compliance: Established multi-account governance and compliance controls using AWS Control Tower, AWS Organizations, CloudWatch, CloudTrail, and automated compliance assessments to meet regulatory standards (PCI DSS, ISO 27001, etc.).• Network Security: Engineered secure network topologies, including VPC design, subnetting, VPC peering, Transit Gateway configurations, and segmentation using cloud-native firewalls and security groups.• Application Security: Implemented application-layer security by designing Web ACLs, deploying WAF rules, and integrating AWS CloudFront / ALB to secure web-facing workloads against common attack vectors.Incident Response & Monitoring: Developed centralized logging, real-time monitoring, and threat intelligence integration to enable proactive incident response and forensics across complex cloud estates.• Cross-Platform Expertise: Provided technical leadership in multi-cloud security, delivering gap analyses, architecture reviews, and best-practice recommendations to optimize security posture across cloud platforms.