Avinash Kumar Reddy

About Avinash Kumar Reddy

With a Master\'s degree in Computer Science from Old Dominion University, my journey at…

Experience

1. Cloud Security Engineer

   Deloitte

   Aug 2024 — Present · McLean, VA, US

   Enhanced cloud security posture using Prisma Cloud and Wiz, identifying and remediating misconfigurations across AWS, Azure, and GCP environments.• Standardized Infrastructure as Code (IaC) deployments by creating reusable CloudFormation stacks and nested templates, reducing manual setup.• Leveraged Grafana templating and variables to build reusable dashboards across environments (dev, staging, prod) connected to InfluxDB sources.• Integrated monitoring and logging with Dynatrace, Prometheus, CloudWatch, and ELK stack to gain real-time visibility into app health and performance.• Developed GCP Cloud Functions for automated threat detection and remediation—integrating with Security Command Center alerts to isolate vulnerable workloads in near real-time.• Configured and integrated GCP Security Command Center for proactive threat monitoring and compliance auditing.• Enabled GitOps with ArgoCD, automating ML model deployment and rollback across dev, UAT, and prod environments.• Created secure, reproducible IaC using Terraform, CloudFormation, and AWS CDK (TypeScript) to provision resources across AWS and Azure.• Designed event-driven automation pipelines using Cloud Functions and Pub/Sub, enabling continuous scanning of storage buckets and IAM roles for misconfigurations.• Integrated CloudFormation with Jenkins pipelines to enable continuous delivery of secure and version-controlled infrastructure updates.• Integrated Gemini AI recommendations within GCP Security Command Center for predictive security risk insights.• Built ETL pipelines and managed metadata using AWS Glue and Data Catalog, integrating with GCS, Redshift, and RDS.• Developed StackSets to manage and synchronize infrastructure across multiple AWS accounts and regions.• Hardened GCP IAM roles and network policies as part of the Gemini Enablement project.• Automated vulnerability management using Python scripts to validate CSPM scan results and enforce remediation.