Anye Ngang

About Anye Ngang

Transforming Cloud Security Through Innovation & AutomationSenior Cloud Security Engineer with 8+ years of experience architecting secure, scalable cloud solutions across AWS, Azure, and multi-cloud environments. Currently at Deloitte, where I lead enterprise security initiatives serving users and manage 200+ AWS accounts through automated governance frameworks.I Design and implement zero-trust security architectures using AWS Control Tower, Security Hub, and IAMSecure containerized environments with Kubernetes, EKS, and runtime protection solutionsAutomate security workflows through Infrastructure as Code (Terraform) and CI/CD pipeline integrationManage cloud security posture with Prisma Cloud, Wiz, and comprehensive monitoring solutionsRecent Impact: Reduced security vulnerabilities by 65% through strategic automation Improved threat detection capabilities by 40% with custom SIEM rules Achieved 99% compliance across multi-cloud environments Secured 50+ Kubernetes clusters with runtime protectionCore Expertise: Cloud Platforms: AWS (Solutions Architect Certified), Azure (Security Engineer Certified) Security Tools: Prisma Cloud, Wiz, GuardDuty, Security Hub, CrowdStrike DevSecOps: Terraform, GitHub Actions, Container Security, SAST/DAST Integration Compliance: SOC 2, ISO 27001, Cloud Governance, Risk ManagementCertifications:AWS Certified Solutions Architect – AssociateMicrosoft Certified: Azure Security Engineer AssociateCompTIA Security+Certified Scrum MasterAlways interested in connecting with fellow cloud security professionals, discussing the latest in DevSecOps practices, and sharing insights on multi-cloud security strategies. Let\'s connect and explore how we can advance cloud security together!#CloudSecurity #AWS #Azure #DevSecOps #Terraform #Kubernetes #Cybersecurity

Experience

1. Cloud Security Engineer

   Deloitte

   Jan 2022 — Present · Washington, DC, US

   Implemented cloud governance using AWS Control Tower, establishing guardrails and management controls for secure AWS account configurations. Lead security initiatives in AWS environments, ensuring compliance with security best practices in regulatory requirements.Managed IAM policies and roles, ensuring least privilege access and enabling seamless authentication and authorization processes.Integrated AWS Security Hub, GuardDuty, and Macie for continuous monitoring of security risks and vulnerabilities across multi-cloud environments.Spearheaded IaC security scanning using tools like Terraform and AWS Config for infrastructure and application security assessments.Implemented WAF and network security best practices for AWS-hosted applications, securing data at rest and in transit with encryption.Leveraged Crowdstrike for endpoint security monitoring and responded to security incidents in real time.Ensured secured deployments of cloudstrike to ec2 host. Guided the secure deployment of Kubernetes and containerized applications, ensuring container security with best practices and tools like Aqua Security and Prisma Cloud.Enforced security within CI/CD pipelines using GitHub Actions, ensuring code quality through static (SAST) and dynamic (DAST) testing.Designed and implemented security policies for API Gateway, including rate limiting, IP whitelisting, authentication, and authorization via AWS Cognito and Lambda authorizers.Led initiatives for hardening Terraform modules by using pre-defined security rules for parameter validation, enforcing secure storage configurations, and managing sensitive information securely.Utilized Prisma Cloud to continuously monitor cloud environments, identify misconfigurations, and automate remediation across AWS, Azure, and GCP.Enrolled cloud accounts, subscriptions and projects into Prisma cloud and Wiz for customers.

Education

• Presbyterian University

  Bachelor of Science, Computational Science