Debendra Mohapatra

About Debendra Mohapatra

I am a Cloud Security Engineer with specialized expertise in securing multi-cloud environments across AWS, Azure, and GCP. Operating within an Agile/Scrum delivery model, I bridge the gap between technical execution and governance, ensuring Identity Access Management (IAM), CSPM, and Compliance align with strictly defined NIST 800-53 standards.My technical focus spans four key pillars:1. Cloud Security Posture & Agile OperationsI manage security posture using InsightCloudSec (DivvyCloud) and native cloud dashboards. I translate security findings into actionable Jira Stories and tasks, managing the full lifecycle from triage to closure. By integrating security remediation into Agile Sprints, I ensure SLA adherence, clear accountability, and audit-ready documentation via ServiceNow and Jira.2. Identity & Access Governance (IAM)I enforce robust identity security by managing Azure RBAC, validating permissions, and strictly enforcing Least Privilege access to prevent identity drift. In AWS, I drive multi-account governance by architecting and reviewing Service Control Policies (SCPs) to maintain security guardrails and restrict high-risk operations.3. FinOps & Cost OptimizationBalancing security with efficiency, I lead Azure Cost Optimization initiatives. I analyze Log Analytics ingestion, tune diagnostic settings, and adjust retention policies to reduce operational overhead without compromising Security Monitoring visibility. I also execute Platform Hygiene by identifying and removing underutilized resources and non-compliant OS Images.4. Continuous Compliance & GovernanceI conduct GCP Baseline Security Assessments, validating controls across logging, encryption, and network security. I perform gap analysis by mapping controls directly to NIST 800-53, delivering actionable reports that drive standardization and continuous compliance. Core Competencies:• Cloud Platforms: AWS, Azure, Google Cloud Platform (GCP).• Methodologies: Agile, Scrum, DevSecOps.• Governance: IAM, RBAC, AWS SCPs, Policy Enforcement, Least Privilege.• Tools: InsightCloudSec (DivvyCloud), Jira (Story/Task Management), ServiceNow.• Operations: Log Analytics, Diagnostic Tuning, Python for Automation, OS Image Governance.• Frameworks: NIST 800-53, FinOps Principles, Enterprise Security Standards. Certifications:• Google Cloud: Professional Cloud Security Engineer• AWS: Certified Solutions Architect – Associate | Certified AI Practitioner• Microsoft: Azure Administrator Associate (AZ-104)

Experience

1. Cloud Security Consultant (Consultant Cyber)

   Deloitte

   Jun 2025 — Present · Bengaluru, IN

   Working as a Cloud Security Engineer focused on cloud security posture management (CSPM/CNAPP) and identity-first risk reduction across AWS, Azure, and GCP environments.Operate InsightCloudSec (DivvyCloud) to continuously identify, analyze, and prioritize cloud misconfigurations across IAM, network exposure, storage access, encryption, and compute services, with emphasis on real risk impact rather than alert volume.Perform risk-based triage of CSPM findings, validate false positives, and drive remediation in collaboration with platform and application teams, ensuring fixes meaningfully reduce attack surface and blast radius.Lead identity and access security initiatives, including Azure Entra ID and RBAC, enforcing least-privilege access models, access reviews, and controlled privilege assignment in enterprise cloud environments.Map cloud security findings to CIS benchmarks and NIST 800-53 controls, supporting audit readiness, continuous compliance, and standardized security posture across multi-cloud platforms.Contribute to strengthening preventive cloud security controls by identifying recurring misconfiguration patterns and helping establish stronger platform-level guardrails.Work closely with engineering teams to ensure cloud security is engineered into platform design and operations, not treated as a post-deployment checklist.

Education

• Biju Patnaik University of Technology, Odisha

  Bachelor of Technology (B.Tech.), Electrical and Electronics Engineering

  2011 — 2015