Gustavo Ranz

About Gustavo Ranz

As a software engineer with expertise in Security, Cloud, DevSecOps, Infrastructure as Code (IaC), and CI/CD, I thrive at the intersection of automation, security, and developer experience. I have a strong track record of designing and implementing high-availability distributed systems, secure development practices, and enterprise-scale solutions that empower teams to move faster and safer.Beyond technical execution, I’m recognized as a proactive leader and collaborator, delivering impact across teams. My background in functional and object-oriented programming, scripting, and architectural design—combined with a computer science degree and FinTech experience—allows me to approach complex challenges with a strategic mindset.Always learning, always building. Let’s connect!

Experience

1. Platform Security Engineering Senior Infosec Cloud Engineer

   USAA

   Sep 2024 — Present · Falls Church, VA, US

   Automated security engineering work through custom remote MCP servers, enhancing developer productivity and reducing operational overhead- Designed and implemented deterministic, agentic development workflows leveraging AI agents to fully automate repetitive engineering tasks and project management activities- Enablement of Google Cloud Platform at USAA for GenAI use-cases- Partnered across multiple teams to design and implement USAA’s first Terraform rollback implementation- Led the enterprise-wide enablement of multiple GCP services, delivering a secure, scalable, and operationally ready foundation through automation, policy-as-code, infrastructure-as-code, and cross-functional alignment- Authored foundational service enablement documentation, providing internal teams with actionable guidance on secure usage, configuration, and compliance expectations for GCP services- Developed and deployed reusable Terraform modules and Terratests with security requirements built-in to ensure all deployments adhered to enterprise and compliance standards by default- Authored and refined Open Policy Agent (OPA) rules to apply fine-grained access controls and enforce policy-as-code across a variety of GCP services- Designed an automated CI/CD testing framework for OPA policies, enabling rapid, safe iteration through integrated test evidencing and policy validation—accelerating development while maintaining auditability and compliance- Created and validated Prisma Cloud policies to detect and automatically remediate critical misconfigurations across GCP services- Conducted in-depth investigations into GCP organization policies, VPC Service Controls (VPC-SC), and Cloud Threat Detection and Response (CTR) to strengthen the overall cloud security posture- Designed custom IAM roles and structured environment-specific project hierarchies (dev/test/prod) to support secure, scalable, and operational efficient deployments.

Education

• George Mason University

  Bachelor's degree, Computer Science

  2014 — 2017

• Northern Virginia Community College

  Associate's degree, Computer Science

  2012 — 2014

Skills

• Customer Service
• Computer Hardware
• Javascript
• Operating Systems
• Microsoft Office
• Sales
• Extract, Transform, Load (Etl)
• Html
• Software Installation
• Css
• Os X
• Windows
• Microsoft Excel
• Wireless Networking
• C++
• Technical Support
• Swift
• Software Development
• Time Management
• Database Design
• Networking
• Windows Xp
• Troubleshooting
• Teamwork
• Outlook
• C
• Windows 7
• Microsoft Word
• Computer Repair
• Team Leadership
• Data Modeling
• Windows Server
• Java