Farat Bagawan

About Farat Bagawan

Cloud Security Engineer with 4+ years of experience specializing in HashiCorp Vault & Boundary, multi-cloud security (GCP/Azure), and DevSecOps. I help enterprises implement zero-trust architecture and secrets management at scale.**Core Vault**• Platform engineering for 100+ applications with RBAC, replication & DR policies• Dynamic secrets for AWS, GCP, Azure, databases - 90% reduction in static secrets• AppRole authentication integrated into CI/CD pipelines• Kubernetes auth & Vault Agent Injector for 50+ containerized workloads**HashiCorp Boundary**• Zero-trust access deployment reducing VPN dependency by 60%• Session recording for RDP/SSH with complete audit trails• Credential brokering for 100+ Linux/Windows servers**Terraform & Automation**• Infrastructure as Code for Vault configuration• Automated namespace provisioning, KV secrets, dynamic roles, policies**Security Operations**• Qualys vulnerability scanning & Trend Micro Deep Security monitoring• Compliance reporting & security metrics dashboards• Real-time anomaly detection with audit log integration **Key Achievements:**• Secured secrets & API keys - 30% reduction in unauthorized access• Reduced VPN dependency by 60% through Boundary implementation• Cut static secret exposure by 90% with dynamic secrets• Accelerated deployments by 25% with CI/CD AppRole integration• Reduced user onboarding time by 35% with OIDC/Azure AD **Certifications:**• Microsoft Certified: Azure Fundamentals (AZ-900)• Zscaler ZIA & ZPA Administrator• Purdue University - Cybersecurity Certification• HashiCorp Certified: Vault Associate (In Progress)Looking cloud security, Devsecops roles and always eager to connect with fellow professionals. Whether you\'re looking for expertise in Vault, zero-trust, or DevSecOps - let\'s connect!#CloudSecurity #HashiCorpVault #ZeroTrust #DevSecOps #GCP #Azure #Terraform

Experience

1. Cyber Security Engineer

   Infosys

   Mar 2022 — Present · IN

   Vault Platform Engineering: Spearheaded centralized HashiCorp Vault Enterprise for 100+ applications with replication, DR policies, and RBAC securing 500+ secrets - reduced unauthorized access by 30%• Zero Trust Implementation: Deployed HashiCorp Boundary across hybrid infrastructure, reducing VPN dependency by 60% with complete RDP/SSH session recording for compliance• Terraform Automation: Automated 100% of Vault configuration managing 10+ namespaces, 500+ KV secrets, dynamic database/cloud roles, AppRole for 200+ CI/CD pipelines, and 50+ RBAC policies• Kubernetes Security: Integrated Vault with Kubernetes auth and Agent Injector for 50+ containerized workloads; implemented GCP workload identity federation• Dynamic Secrets: Implemented dynamic secrets for AWS, GCP, Azure, databases across 200+ services - reduced static secret exposure by 90%• CI/CD Security: Integrated Vault AppRole authentication into Jenkins/Azure DevOps pipelines, accelerating deployments by 25%• Identity Integration: Integrated OIDC authentication for 200+ users with Azure AD, reducing onboarding time by 35%• Patch Management: Implemented daily OS patching for 100+ GCP servers with Qualys vulnerability scanning and Trend Micro Deep Security monitoring

Education

• CMR Institute Of Technology

  Bachelor's degree